Skip to content

Feature/lab9#1380

Open
BuiniyYarik wants to merge 18 commits into
inno-devops-labs:mainfrom
BuiniyYarik:feature/lab9
Open

Feature/lab9#1380
BuiniyYarik wants to merge 18 commits into
inno-devops-labs:mainfrom
BuiniyYarik:feature/lab9

Conversation

@BuiniyYarik

Copy link
Copy Markdown

Goal

Submit Lab 9 for the DevOps course

Changes

  • Added Trivy image, filesystem, and configuration scans
  • Generated a CycloneDX SBOM for the QuickNotes image
  • Triaged all HIGH and CRITICAL Trivy findings
  • Executed an OWASP ZAP baseline scan
  • Added security headers middleware for all HTTP responses
  • Added unit tests verifying security headers
  • Re-ran ZAP after the security improvements
  • Added Lab 9 submission report, scan artifacts, and screenshots

Testing

  • Trivy image scan completed successfully
  • Trivy filesystem scan completed successfully
  • Trivy configuration scan completed successfully
  • CycloneDX SBOM generated successfully
  • go test ./... passes
  • Security headers are present on all responses
  • OWASP ZAP baseline scan completed successfully
  • Follow-up ZAP scan confirms only accepted findings remain

Checklist

  • Title is a clear sentence (≤70 chars)
  • Commits are signed
  • submissions/lab9.md updated

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>
* docs(lab1): start submission

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* docs(lab1): finish submission

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

---------

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>
Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>
* docs: upstream moved while you worked

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* wip(lab2): start

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* wip(lab2): more progress

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* docs(lab2): finish submission

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

---------

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>
* docs: upstream moved while you worked

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* ci(lab3): add PR-gated pipeline

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* test(lab3): deliberately break CI

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* Revert "test(lab3): deliberately break CI"

This reverts commit 28ffa8d.

* ci(lab3): measure baseline workflow

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* ci(lab3): measure cached workflow

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* ci(lab3): measure cached workflow

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* ci(lab3): restore final optimized workflow

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* docs(lab3): finish submission

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* docs(lab3): finish submission

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

---------

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>
* docs: upstream moved while you worked

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* docs(lab4): finish submission

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* ci: run checks for submissions changes

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

---------

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>
* docs: upstream moved while you worked

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* docs(lab5): add virtualization evidence and analysis

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* docs(lab5): finish submission

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

---------

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>
* docs: upstream moved while you worked

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* docs(lab6): add docker submission

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

---------

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>
* docs: upstream moved while you worked

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* feat(lab7): deploy QuickNotes with Ansible

* docs(lab7): finish submission

---------

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>
Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>
* docs: upstream moved while you worked

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

* docs(lab8): finish submission

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>

---------

Signed-off-by: Yaroslav Sokolov <sokoslav1707@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant