Add SAST security test to CI/CD pipeline

.github/workflows/lesson-3.yaml

@@ -4,19 +4,25 @@ on:
   push:
     branches:
       - lesson-3-complete
+
 jobs:
   function_test:
     runs-on: ubuntu-latest
-    defaults:
-      run:
-        working-directory: frontend
     steps:
       - uses: actions/checkout@v4
-      - run: npm install
-      - name: Run functional tests
-        run: npm test -- --coverage --watchAll=false
+      - name: Set up Node.js
+        uses: actions/setup-node@v3
+        with:
+          node-version: '18'
+      - name: Install dependencies
+        run: npm install
+        working-directory: frontend
+      - name: Run tests
+        run: npm test
+        working-directory: frontend
+
   deploy:
-    needs: [function_test]
+    needs: function_test
     runs-on: ubuntu-latest
     defaults:
       run:
@@ -27,4 +33,4 @@ jobs:
       - name: Generate deployment package
         run: zip -r deploy.zip build Dockerfile
       - name: '**PLACEHOLDER** Deploy to Elastic Beanstalk'
-        run: echo Placeholder for Deployment
+        run: echo Placeholder for Deployment

.github/workflows/lesson-5-backend.yaml

@@ -4,8 +4,24 @@ on:
   push:
     branches:
       - lesson-5
+
 jobs:
+  security_test:
+    runs-on: ubuntu-latest
+    defaults:
+      run:
+        working-directory: backend
+    name: Execute the PyCharm security test
+    steps:
+      - uses: actions/checkout@v4
+      - name: disable debug
+        run: |
+          sed -i 's/DEBUG = True/DEBUG = False/g' hangry_api/hangry_api/settings.py
+      - name: Run PyCharm Security
+        uses: tonybaloney/pycharm-security@1.9.0
+
   build_and_test:
+    needs: security_test
     runs-on: ubuntu-latest
     defaults:
       run:
@@ -24,15 +40,19 @@ jobs:
         run: |
           coverage run -m --source=./hangry_api pytest
           coverage report
+
   deploy:
-    needs: [build_and_test]
+    needs: build_and_test
     runs-on: ubuntu-latest
     defaults:
       run:
         working-directory: backend
     steps:
       - uses: actions/checkout@v4
+      - name: Disable Debug
+        run: |
+          sed -i 's/DEBUG = True/DEBUG = False/g' hangry_api/hangry_api/settings.py
       - name: Generate deployment package
         run: zip -r deploy.zip . -x '*.git*'
       - name: '**PLACEHOLDER** Deploy to Elastic Beanstalk'
-        run: echo Placeholder for Deployment
+        run: echo Placeholder for Deployment

.github/workflows/lesson-5-frontend.yaml

@@ -3,7 +3,7 @@ name: Lesson 5 DAST
 on:
   push:
     branches:
-      - lesson-5
+      - lesson-5-complete
 jobs:
   function_test:
     runs-on: ubuntu-latest
@@ -28,3 +28,11 @@ jobs:
         run: zip -r deploy.zip build Dockerfile
       - name: '**PLACEHOLDER** Deploy to Elastic Beanstalk'
         run: echo Placeholder for Deployment
+  security_test:
+    needs: [deploy]
+    runs-on: ubuntu-latest
+    steps:
+      - name: Dynamic Application Security Scan
+        uses: zaproxy/action-baseline@v0.7.0
+        with:
+          target: 'http://hangry-web-dev.us-east-1.elasticbeanstalk.com/'

.github/workflows/lesson-6.yaml

@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - lesson-6
+
 jobs:
   function_test:
     runs-on: ubuntu-latest
@@ -15,6 +16,7 @@ jobs:
       - run: npm install
       - name: Run functional tests
         run: npm test -- --coverage --watchAll=false
+
   deploy:
     needs: [function_test]
     runs-on: ubuntu-latest
@@ -28,11 +30,12 @@ jobs:
         run: zip -r deploy.zip build Dockerfile
       - name: '**PLACEHOLDER** Deploy to Elastic Beanstalk'
         run: echo Placeholder for Deployment
+
   security_test:
     needs: [deploy]
     runs-on: ubuntu-latest
     steps:
       - name: Dynamic Application Security Scan
         uses: zaproxy/action-baseline@v0.7.0
         with:
-          target: 'http://hangryhippo.quantic.host/'
+          target: 'https://hangryhippo.quantic.host/'

README.md

@@ -140,15 +140,15 @@ The front end was originally created using [Create React App](https://create-rea
 
 3.  As a result, you should see something like
 
-        ================= test session starts ===================
+        test session starts 
         platform linux -- Python 3.8.13, pytest-7.1.2, pluggy-1.0.0
         rootdir: ./quantic-test-course/backend/hangry_api
         collected 5 items
 
         tests/test_DeliveryCost.py ...                     [ 50%]
         tests/test_SubtotalCost.py ..                      [ 83%]
         tests/test_Tax.py ...........                      [100%]
-        ================= 5 passed in 0.16s =====================
+       5 passed in 0.16s 
 
 4.  [Optional] Generate a coverage report (note that you must have run the unit tests at least once for this to work):
 
@@ -203,7 +203,11 @@ The front end was originally created using [Create React App](https://create-rea
 
 5.  [Optional] To use the local back-end APIs, make sure both servers (front-end and back-end) are running. Then, update ./frontend/src/utils/constants.js by replacing this line:
 
+ HEAD
+        export const API_URL = 'https://hangryhippo-api.quantic.host';
+
         export const API_URL = 'http://hangryhippo-api.quantic.host';
+         origin/main
 
     with this line:
 
@@ -233,7 +237,6 @@ The front end was originally created using [Create React App](https://create-rea
 
 2.  Verify that the tests were run. You should see something like
 
-        ==============================================
         (Run Starting)
         ┌─────────────────────────────────────────────┐
         │ Cypress:        10.3.0                      │
@@ -279,7 +282,7 @@ The front end was originally created using [Create React App](https://create-rea
           -  Finished processing: /quantic-test-course/frontend/cypress/videos/spec.cy.js.mp4     (2 seconds)
 
 
-        ===============================================
+
 
         (Run Finished)