Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

edit sonarqube.yml file + edit README #4

Closed
wants to merge 6 commits into from
Closed
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
43 changes: 43 additions & 0 deletions .github/workflows/sonarqube.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,43 @@
on:
# Trigger analysis when pushing to your main branches, and when creating a pull request.
push:
branches:
- main
- master
- development
- 'releases/**'
pull_request:
types: [opened, synchronize, reopened]

name: Mutillidae II SonarQube Workflow

jobs:
sonarqube:
runs-on: ubuntu-latest

steps:
- name: Checkout Code
uses: actions/checkout@v4
with:
# Disabling shallow clones is recommended for improving the relevancy of reporting
fetch-depth: 0

- name: Set up JDK 11 (Required for SonarQube)
uses: actions/setup-java@v4
with:
java-version: '11'
distribution: 'temurin'
java-package: 'jdk'

- name: SonarQube Scan
uses: sonarsource/sonarqube-scan-action@v2.3.0 # Latest version of SonarQube scan action
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }} # SonarQube authentication token
SONAR_HOST_URL: ${{ vars.SONAR_HOST_URL }} # SonarQube URL

- name: Report Quality Gate Status
if: always() # Ensure the status is reported even if the scan fails
uses: sonarsource/sonarqube-quality-gate-action@master
env:
SONAR_TOKEN: ${{ secrets.SONAR_TOKEN }}
SONAR_HOST_URL: ${{ vars.SONAR_HOST_URL }}
19 changes: 13 additions & 6 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,4 +1,5 @@
# OWASP Mutillidae II
<a name="top"></a>
# $\color{LimeGreen}{OWASP\ Mutillidae\ II\ -\ Forked\ to\ showcase\ DevSecOps\ pipelines\}$

OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application designed for web-security enthusiasts. It serves as a target for learning and practicing web security skills. Mutillidae can be easily installed on Linux and Windows systems using LAMP, WAMP, and XAMMP stacks. Additionally, it comes pre-installed on SamuraiWTF and OWASP BWA, and the existing version can be updated on these platforms. With dozens of vulnerabilities and hints to guide the user, Mutillidae provides an accessible web hacking environment suitable for labs, security enthusiasts, classrooms, CTFs, and vulnerability assessment tool targets. It has been widely used in graduate security courses, corporate web security training, and as an assessment target for vulnerability assessment software. OWASP Mutillidae II provides a comprehensive platform for learning and practicing web security techniques in a controlled environment.

Expand All @@ -14,15 +15,18 @@ Explore our tutorials on YouTube: [webpwnized YouTube channel](https://www.youtu

### Location of source code

Note carefully that the source code ishas moved to the ***src*** project directory. **Be careful to adjust accordingly.**
> [!IMPORTANT]
> Note carefully that the source code ishas moved to the ***src*** project directory. **Be careful to adjust accordingly.**

### LAMP Stack

Note carefully that the source code ishas moved to the ***src*** project directory. **Be careful to adjust accordingly.** If you have a LAMP stack set up already, you can skip directly to installing Mutillidae. Check out our [comprehensive installation guide](README-INSTALLATION.md) for detailed instructions. Watch the video tutorial: [How to Install Mutillidae on LAMP Stack](https://www.youtube.com/watch?v=TcgeRab7ayM)
> [!IMPORTANT]
> Note carefully that the source code ishas moved to the ***src*** project directory. **Be careful to adjust accordingly.** If you have a LAMP stack set up already, you can skip directly to installing Mutillidae. Check out our [comprehensive installation guide](README-INSTALLATION.md) for detailed instructions. Watch the video tutorial: [How to Install Mutillidae on LAMP Stack](https://www.youtube.com/watch?v=TcgeRab7ayM)

### Docker

Note carefully that the source code ishas moved to the ***src*** project directory. **Be careful to adjust accordingly.**
> [!NOTE]
> Note carefully that the source code ishas moved to the ***src*** project directory. **Be careful to adjust accordingly.**

Learn how to set up Mutillidae using Docker with our video tutorials:

Expand All @@ -33,7 +37,8 @@ Learn how to set up Mutillidae using Docker with our video tutorials:

## Usage

Explore a large number of video tutorials available on the [webpwnized YouTube channel](https://www.youtube.com/playlist?list=PLZOToVAK85MrsyNmNp0yyUTBXqKRTh623) for guidance on using Mutillidae.
> [!TIP]
> Explore a large number of video tutorials available on the [webpwnized YouTube channel](https://www.youtube.com/playlist?list=PLZOToVAK85MrsyNmNp0yyUTBXqKRTh623) for guidance on using Mutillidae.

## Key Features

Expand Down Expand Up @@ -61,4 +66,6 @@ configurations.
- `passwords`: Password-related files.
- `styles`: CSS stylesheets.
- `webservices`: Web services files, including REST and SOAP services.
- `soap/lib`: Library files for SOAP services.
- `soap/lib`: Library files for SOAP services.

[:arrow_up:](#top)
Loading