STRLCPY/wrongsecrets

Update POM file with new version: 1.6.5RC2
Jeroen Willemsen committed 11 months ago

e1933c82

1 parent 093517f8

■ ■ ■ ■ ■ ■

.github/scripts/secondkey.txt

1 - tJbQjCM=9SnCq6LBU=2h5GD7
2 -
1 + hsqLppY=9agDM6WZg=20tgO7

All occurrences
■ ■ ■ ■ ■ ■

.github/scripts/thirdkey.txt

1 - ZNXwBs5ApiOX5dXRj+xVh0QL8yAAesSMya4cBnF0V3w=
2 -
1 + tmAMY4u9zqhhpiz9cnUZRqiGcWqA7bEq5pJRdXS8BxY=

All occurrences

■ ■ ■ ■ ■ ■

Dockerfile.web

1		-	FROM jeroenwillemsen/wrongsecrets:1.6.5-no-vault
	1	+	FROM jeroenwillemsen/wrongsecrets:1.6.5RC2-no-vault
2	2		ARG argBasedVersion="1.6.5-no-vault"
3	3		ARG CANARY_URLS="http://canarytokens.com/terms/about/s7cfbdakys13246ewd8ivuvku/post.jsp,http://canarytokens.com/terms/about/y0all60b627gzp19ahqh7rl6j/post.jsp"
4	4		ARG CTF_ENABLED=false
		skipped 29 lines

■ ■ ■ ■ ■ ■

aws/k8s/secret-challenge-vault-deployment.yml

		skipped 40 lines
41	41		volumeAttributes:
42	42		secretProviderClass: "wrongsecrets-aws-secretsmanager"
43	43		containers:
44		-	- image: jeroenwillemsen/wrongsecrets:1.6.5-k8s-vault
	44	+	- image: jeroenwillemsen/wrongsecrets:1.6.5RC2-k8s-vault
45	45		imagePullPolicy: IfNotPresent
46	46		name: secret-challenge
47	47		securityContext:
		skipped 71 lines

■ ■ ■ ■ ■ ■

azure/k8s/secret-challenge-vault-deployment.yml.tpl

		skipped 40 lines
41	41		volumeAttributes:
42	42		secretProviderClass: "azure-wrongsecrets-vault"
43	43		containers:
44		-	- image: jeroenwillemsen/wrongsecrets:1.6.5-k8s-vault
	44	+	- image: jeroenwillemsen/wrongsecrets:1.6.5RC2-k8s-vault
45	45		imagePullPolicy: IfNotPresent
46	46		name: secret-challenge
47	47		securityContext:
		skipped 81 lines

■ ■ ■ ■ ■ ■

fly.toml

		skipped 8 lines
9	9		dockerfile = "Dockerfile"
10	10
11	11		[build.args]
12		-	argBasedVersion="1.6.5"
	12	+	argBasedVersion="1.6.5RC2"
13	13		spring_profile="without-vault"
14	14		springdoc_api-docs_enabled="false"
15	15		springdoc_swagger-ui_enabled="false"
		skipped 35 lines

■ ■ ■ ■ ■ ■

gcp/k8s/secret-challenge-vault-deployment.yml.tpl

		skipped 38 lines
39	39		volumeAttributes:
40	40		secretProviderClass: "wrongsecrets-gcp-secretsmanager"
41	41		containers:
42		-	- image: jeroenwillemsen/wrongsecrets:1.6.5-k8s-vault
	42	+	- image: jeroenwillemsen/wrongsecrets:1.6.5RC2-k8s-vault
43	43		imagePullPolicy: IfNotPresent
44	44		name: secret-challenge
45	45		ports:
		skipped 75 lines

■ ■ ■ ■ ■ ■

k8s/secret-challenge-deployment.yml

		skipped 27 lines
28	28		runAsGroup: 2000
29	29		fsGroup: 2000
30	30		containers:
31		-	- image: jeroenwillemsen/wrongsecrets:1.6.5RC1-no-vault
	31	+	- image: jeroenwillemsen/wrongsecrets:1.6.5RC2-no-vault
32	32		imagePullPolicy: IfNotPresent
33	33		name: secret-challenge
34	34		ports:
		skipped 67 lines

■ ■ ■ ■ ■ ■

k8s/secret-challenge-vault-deployment.yml

		skipped 29 lines
30	30		runAsNonRoot: true
31	31		serviceAccountName: vault
32	32		containers:
33		-	- image: jeroenwillemsen/wrongsecrets:1.6.5RC1-k8s-vault
	33	+	- image: jeroenwillemsen/wrongsecrets:1.6.5RC2-k8s-vault
34	34		imagePullPolicy: IfNotPresent
35	35		name: secret-challenge
36	36		securityContext:
		skipped 71 lines

■ ■ ■ ■ ■ ■

okteto/k8s/secret-challenge-ctf-deployment.yml

		skipped 27 lines
28	28		runAsGroup: 2000
29	29		fsGroup: 2000
30	30		containers:
31		-	- image: jeroenwillemsen/wrongsecrets:1.6.5-no-vault
	31	+	- image: jeroenwillemsen/wrongsecrets:1.6.5RC2-no-vault
32	32		name: secret-challenge-ctf
33	33		imagePullPolicy: IfNotPresent
34	34		securityContext:
		skipped 91 lines

■ ■ ■ ■ ■ ■

okteto/k8s/secret-challenge-deployment.yml

		skipped 27 lines
28	28		runAsGroup: 2000
29	29		fsGroup: 2000
30	30		containers:
31		-	- image: jeroenwillemsen/wrongsecrets:1.6.5-no-vault
	31	+	- image: jeroenwillemsen/wrongsecrets:1.6.5RC2-no-vault
32	32		name: secret-challenge
33	33		imagePullPolicy: IfNotPresent
34	34		securityContext:
		skipped 75 lines

■ ■ ■ ■ ■ ■

pom.xml

		skipped 5 lines
6	6		<groupId>org.springframework.boot</groupId>
7	7		<artifactId>spring-boot-starter-parent</artifactId>
8	8		<version>3.0.6</version>
9		-	<relativePath></relativePath>
10	9		<!-- lookup parent from repository -->
11	10		</parent>
12	11
		skipped 599 lines

■ ■ ■ ■ ■ ■

src/main/resources/templates/about.html

		skipped 78 lines
79	79		<li>(Apache License 2.0) compiler (com.github.spullara.mustache.java:compiler:0.9.6 - http://github.com/spullara/mustache.java)</li>
80	80		<li>(Apache License, Version 2.0) JCIP Annotations under Apache License (com.github.stephenc.jcip:jcip-annotations:1.0-1 - http://stephenc.github.com/jcip-annotations)</li>
81	81		<li>(Apache 2.0) Google Android Annotations Library (com.google.android:annotations:4.1.1.4 - http://source.android.com/)</li>
82		-	<li>(BSD-3-Clause) API Common (com.google.api:api-common:2.8.0 - https://github.com/googleapis/gapic-generator-java)</li>
83		-	<li>(BSD-3-Clause) GAX (Google Api eXtensions) for Java (Core) (com.google.api:gax:2.25.0 - https://github.com/googleapis/gapic-generator-java)</li>
84		-	<li>(BSD-3-Clause) GAX (Google Api eXtensions) for Java (gRPC) (com.google.api:gax-grpc:2.25.0 - https://github.com/googleapis/gapic-generator-java)</li>
85		-	<li>(BSD-3-Clause) GAX (Google Api eXtensions) for Java (HTTP JSON) (com.google.api:gax-httpjson:0.110.0 - https://github.com/googleapis/gapic-generator-java)</li>
86		-	<li>(Apache-2.0) proto-google-cloud-secretmanager-v1 (com.google.api.grpc:proto-google-cloud-secretmanager-v1:2.15.0 - https://github.com/googleapis/google-cloud-java)</li>
87		-	<li>(Apache-2.0) proto-google-cloud-secretmanager-v1beta1 (com.google.api.grpc:proto-google-cloud-secretmanager-v1beta1:2.15.0 - https://github.com/googleapis/google-cloud-java)</li>
88		-	<li>(Apache-2.0) proto-google-common-protos (com.google.api.grpc:proto-google-common-protos:2.16.0 - https://github.com/googleapis/gapic-generator-java)</li>
89		-	<li>(Apache-2.0) proto-google-iam-v1 (com.google.api.grpc:proto-google-iam-v1:1.11.0 - https://github.com/googleapis/gapic-generator-java)</li>
	82	+	<li>(BSD-3-Clause) API Common (com.google.api:api-common:2.10.0 - https://github.com/googleapis/gapic-generator-java)</li>
	83	+	<li>(BSD-3-Clause) GAX (Google Api eXtensions) for Java (Core) (com.google.api:gax:2.27.0 - https://github.com/googleapis/gapic-generator-java)</li>
	84	+	<li>(BSD-3-Clause) GAX (Google Api eXtensions) for Java (gRPC) (com.google.api:gax-grpc:2.27.0 - https://github.com/googleapis/gapic-generator-java)</li>
	85	+	<li>(BSD-3-Clause) GAX (Google Api eXtensions) for Java (HTTP JSON) (com.google.api:gax-httpjson:0.112.0 - https://github.com/googleapis/gapic-generator-java)</li>
	86	+	<li>(Apache-2.0) proto-google-cloud-secretmanager-v1 (com.google.api.grpc:proto-google-cloud-secretmanager-v1:2.17.0 - https://github.com/googleapis/google-cloud-java)</li>
	87	+	<li>(Apache-2.0) proto-google-cloud-secretmanager-v1beta1 (com.google.api.grpc:proto-google-cloud-secretmanager-v1beta1:2.17.0 - https://github.com/googleapis/google-cloud-java)</li>
	88	+	<li>(Apache-2.0) proto-google-common-protos (com.google.api.grpc:proto-google-common-protos:2.18.0 - https://github.com/googleapis/gapic-generator-java)</li>
	89	+	<li>(Apache-2.0) proto-google-iam-v1 (com.google.api.grpc:proto-google-iam-v1:1.13.0 - https://github.com/googleapis/gapic-generator-java)</li>
90	90		<li>(BSD New license) Google Auth Library for Java - Credentials (com.google.auth:google-auth-library-credentials:1.16.0 - https://github.com/googleapis/google-auth-library-java/google-auth-library-credentials)</li>
91	91		<li>(BSD New license) Google Auth Library for Java - OAuth2 HTTP (com.google.auth:google-auth-library-oauth2-http:1.16.0 - https://github.com/googleapis/google-auth-library-java/google-auth-library-oauth2-http)</li>
92	92		<li>(Apache 2.0) AutoValue Annotations (com.google.auto.value:auto-value-annotations:1.10.1 - https://github.com/google/auto/tree/master/value)</li>
93		-	<li>(Apache-2.0) Google Cloud Secret Manager (com.google.cloud:google-cloud-secretmanager:2.15.0 - https://github.com/googleapis/google-cloud-java)</li>
	93	+	<li>(Apache-2.0) Google Cloud Secret Manager (com.google.cloud:google-cloud-secretmanager:2.17.0 - https://github.com/googleapis/google-cloud-java)</li>
94	94		<li>(The Apache Software License, Version 2.0) FindBugs-jsr305 (com.google.code.findbugs:jsr305:3.0.2 - http://findbugs.sourceforge.net/)</li>
95	95		<li>(Apache-2.0) Gson (com.google.code.gson:gson:2.9.1 - https://github.com/google/gson/gson)</li>
96	96		<li>(Apache 2.0) error-prone annotations (com.google.errorprone:error_prone_annotations:2.18.0 - https://errorprone.info/error_prone_annotations)</li>
		skipped 189 lines
286	286		<li>(The Apache Software License, Version 2.0) Dependency-Check Core (org.owasp:dependency-check-core:8.2.1 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-core)</li>
287	287		<li>(The Apache Software License, Version 2.0) Dependency-Check Maven Plugin (org.owasp:dependency-check-maven:8.2.1 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-maven)</li>
288	288		<li>(The Apache Software License, Version 2.0) Dependency-Check Utils (org.owasp:dependency-check-utils:8.2.1 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-utils)</li>
289		-	<li>(The MIT License) Project Lombok (org.projectlombok:lombok:1.18.26 - https://projectlombok.org)</li>
	289	+	<li>(The MIT License) Project Lombok (org.projectlombok:lombok:1.18.28 - https://projectlombok.org)</li>
290	290		<li>(MIT-0) reactive-streams (org.reactivestreams:reactive-streams:1.0.4 - http://www.reactive-streams.org/)</li>
291	291		<li>(The MIT License) semver4j (org.semver4j:semver4j:4.3.0 - https://github.com/semver4j/semver4j)</li>
292	292		<li>(The Apache Software License, Version 2.0) Simple XML (org.simpleframework:simple-xml:2.7.1 - http://simple.sourceforge.net)</li>
		skipped 34 lines
327	327		<li>(Apache License, Version 2.0) spring-boot-starter-thymeleaf (org.springframework.boot:spring-boot-starter-thymeleaf:3.0.6 - https://spring.io/projects/spring-boot)</li>
328	328		<li>(Apache License, Version 2.0) spring-boot-starter-tomcat (org.springframework.boot:spring-boot-starter-tomcat:3.0.6 - https://spring.io/projects/spring-boot)</li>
329	329		<li>(Apache License, Version 2.0) spring-boot-starter-web (org.springframework.boot:spring-boot-starter-web:3.0.6 - https://spring.io/projects/spring-boot)</li>
330		-	<li>(Apache License, Version 2.0) Spring Cloud Commons (org.springframework.cloud:spring-cloud-commons:4.0.2 - https://projects.spring.io/spring-cloud/spring-cloud-commons/)</li>
331		-	<li>(Apache License, Version 2.0) Spring Cloud Context (org.springframework.cloud:spring-cloud-context:4.0.2 - https://projects.spring.io/spring-cloud/spring-cloud-context/)</li>
332		-	<li>(Apache License, Version 2.0) spring-cloud-starter (org.springframework.cloud:spring-cloud-starter:4.0.2 - https://projects.spring.io/spring-cloud)</li>
	330	+	<li>(Apache License, Version 2.0) Spring Cloud Commons (org.springframework.cloud:spring-cloud-commons:4.0.3 - https://projects.spring.io/spring-cloud/spring-cloud-commons/)</li>
	331	+	<li>(Apache License, Version 2.0) Spring Cloud Context (org.springframework.cloud:spring-cloud-context:4.0.3 - https://projects.spring.io/spring-cloud/spring-cloud-context/)</li>
	332	+	<li>(Apache License, Version 2.0) spring-cloud-starter (org.springframework.cloud:spring-cloud-starter:4.0.3 - https://projects.spring.io/spring-cloud)</li>
333	333		<li>(Apache License, Version 2.0) Spring Cloud Starter Vault Config (org.springframework.cloud:spring-cloud-starter-vault-config:4.0.1 - https://cloud.spring.io/spring-cloud-vault/)</li>
334	334		<li>(Apache License, Version 2.0) Spring Cloud Vault Configuration Integration (org.springframework.cloud:spring-cloud-vault-config:4.0.1 - https://spring.io/spring-cloud/spring-cloud-vault-parent/spring-cloud-vault-config)</li>
335	335		<li>(Apache License, Version 2.0) spring-security-config (org.springframework.security:spring-security-config:6.0.3 - https://spring.io/projects/spring-security)</li>
		skipped 8 lines
344	344		<li>(The Apache Software License, Version 2.0) thymeleaf-extras-springsecurity6 (org.thymeleaf.extras:thymeleaf-extras-springsecurity6:3.1.1.RELEASE - http://www.thymeleaf.org/thymeleaf-lib/thymeleaf-extras-springsecurity6)</li>
345	345		<li>(Public Domain) XZ for Java (org.tukaani:xz:1.9 - https://tukaani.org/xz/java.html)</li>
346	346		<li>(The Apache Software License, Version 2.0) unbescape (org.unbescape:unbescape:1.1.6.RELEASE - http://www.unbescape.org)</li>
347		-	<li>(Apache License, Version 2.0) Bootstrap (org.webjars:bootstrap:5.2.3 - http://webjars.org)</li>
	347	+	<li>(Apache License, Version 2.0) Bootstrap (org.webjars:bootstrap:5.3.0 - http://webjars.org)</li>
348	348		<li>(MIT) DataTables (org.webjars:datatables:1.13.2 - http://webjars.org)</li>
349	349		<li>(MIT License) jquery (org.webjars:jquery:3.6.4 - http://webjars.org)</li>
350	350		<li>(Apache 2.0) Swagger UI (org.webjars:swagger-ui:4.18.2 - http://webjars.org)</li>
		skipped 37 lines

1		-	ZNXwBs5ApiOX5dXRj+xVh0QL8yAAesSMya4cBnF0V3w=
2		-
	1	+	tmAMY4u9zqhhpiz9cnUZRqiGcWqA7bEq5pJRdXS8BxY=

1		-	tJbQjCM=9SnCq6LBU=2h5GD7
2		-
	1	+	hsqLppY=9agDM6WZg=20tgO7

Update POM file with new version: 1.6.5RC2