diff --git a/.github/scripts/.bash_history b/.github/scripts/.bash_history index 292a7b710..df9909347 100644 --- a/.github/scripts/.bash_history +++ b/.github/scripts/.bash_history @@ -347,7 +347,7 @@ rm -rf jdk-18_linux-x64_bin.deb git rebase -i main git rebase -i master git stash -export tempPassword="uzsmJV29aLxsikOElqENg9O2dUkuY6Q4zg6ysYaO4HE=" +export tempPassword="VBzUegoDQFOCQXJQ/HbEtklzEgOd1hNNQIdsVnW0Ovc=" mvn run tempPassword k6 npx k6 diff --git a/.github/workflows/dast-zap-test.yml b/.github/workflows/dast-zap-test.yml index 9cc8d8fd6..885ff5f64 100644 --- a/.github/workflows/dast-zap-test.yml +++ b/.github/workflows/dast-zap-test.yml @@ -24,7 +24,7 @@ jobs: - name: Start wrongsecrets run: nohup ./mvnw spring-boot:run -Dspring-boot.run.profiles=without-vault & - name: ZAP Scan - uses: zaproxy/action-baseline@v0.13.0 + uses: zaproxy/action-baseline@v0.14.0 env: ZAP_AUTH_HEADER_VALUE: "Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==" ZAP_AUTH_HEADER: "Authorization" diff --git a/.github/workflows/link_checker.yml b/.github/workflows/link_checker.yml index 7c244e8a8..702f9bbcb 100644 --- a/.github/workflows/link_checker.yml +++ b/.github/workflows/link_checker.yml @@ -18,7 +18,7 @@ jobs: - name: Link Checker id: lychee - uses: lycheeverse/lychee-action@v2.1.0 + uses: lycheeverse/lychee-action@v2.2.0 with: args: --exclude-all-private --exclude-path "src/main/resources/templates/about.html" --exclude-path ".lycheeignore" -r 2 './**/*.md' './**/*.html' fail: true diff --git a/.github/workflows/pre-commit.yml b/.github/workflows/pre-commit.yml index 8c6d99136..2a0802271 100644 --- a/.github/workflows/pre-commit.yml +++ b/.github/workflows/pre-commit.yml @@ -8,8 +8,8 @@ on: env: TF_DOCS_VERSION: v0.19.0 - TFSEC_VERSION: v1.28.11 TFLINT_VERSION: v0.53.0 + TRIVY_VERSION: 0.58.0 permissions: contents: read jobs: @@ -54,11 +54,10 @@ jobs: tar -zxvf terraform_docs.tar.gz terraform-docs chmod +x terraform-docs mv terraform-docs /usr/local/bin/ - - name: Setup tfsec + - name: Setup trivy run: | - curl --output tfsec https://github.com/aquasecurity/tfsec/releases/download/${{env.TFSEC_VERSION}}/tfsec-linux-amd64 - chmod +x tfsec - mv tfsec /usr/local/bin/ + wget https://github.com/aquasecurity/trivy/releases/download/v${{env.TRIVY_VERSION}}/trivy_${{env.TRIVY_VERSION}}_Linux-64bit.deb + sudo dpkg -i trivy_${{env.TRIVY_VERSION}}_Linux-64bit.deb - name: Pre-commit checks uses: pre-commit/action@v3.0.1 - name: pre-commit-ci-lite diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml index dd762334c..aa6593c4d 100644 --- a/.pre-commit-config.yaml +++ b/.pre-commit-config.yaml @@ -9,11 +9,11 @@ ci: submodules: false repos: - repo: https://github.com/renovatebot/pre-commit-hooks - rev: 39.17.1 + rev: 39.124.0 hooks: - id: renovate-config-validator - repo: https://github.com/eslint/eslint - rev: v9.15.0 + rev: v9.18.0 hooks: - id: eslint args: @@ -26,7 +26,7 @@ repos: exclude: ^(src/test/resources/yourkey.txt|src/test/resources/secondkey.txt) - id: trailing-whitespace - repo: https://github.com/antonbabenko/pre-commit-terraform - rev: v1.96.2 + rev: v1.97.0 hooks: - id: terraform_fmt - id: terraform_tflint @@ -46,7 +46,7 @@ repos: - "--args=--only=terraform_workspace_remote" - id: terraform_docs - repo: https://github.com/alessandrojcm/commitlint-pre-commit-hook - rev: v9.18.0 + rev: v9.20.0 hooks: - id: commitlint stages: [commit-msg] diff --git a/Dockerfile b/Dockerfile index 81883f0ff..7d31eacb4 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,7 +1,15 @@ +FROM bellsoft/liberica-openjre-debian:23.0.1-13-cds AS builder +WORKDIR /builder + +ARG argBasedVersion="1.10.2" + +COPY --chown=wrongsecrets target/wrongsecrets-${argBasedVersion}-SNAPSHOT.jar application.jar +RUN java -Djarmode=tools -jar application.jar extract --layers --destination extracted + FROM eclipse-temurin:23.0.1_11-jre-alpine +WORKDIR /application ARG argBasedPassword="default" -ARG argBasedVersion="1.8.5" ARG spring_profile="" ENV SPRING_PROFILES_ACTIVE=$spring_profile ENV ARG_BASED_PASSWORD=$argBasedPassword @@ -17,15 +25,34 @@ RUN echo "$argBasedPassword" RUN apk add --no-cache libstdc++ icu-libs -#RUN useradd -u 2000 -m wrongsecrets -RUN adduser -u 2000 -D wrongsecrets -USER wrongsecrets - -COPY --chown=wrongsecrets target/wrongsecrets-${argBasedVersion}-SNAPSHOT.jar /application.jar COPY --chown=wrongsecrets .github/scripts/ /var/tmp/helpers COPY --chown=wrongsecrets .github/scripts/.bash_history /home/wrongsecrets/ COPY --chown=wrongsecrets src/main/resources/executables/*linux-musl* /home/wrongsecrets/ COPY --chown=wrongsecrets src/test/resources/alibabacreds.kdbx /var/tmp/helpers COPY --chown=wrongsecrets src/test/resources/RSAprivatekey.pem /var/tmp/helpers/ + +COPY --from=builder /builder/extracted/dependencies/ ./ +COPY --from=builder /builder/extracted/spring-boot-loader/ ./ +COPY --from=builder /builder/extracted/snapshot-dependencies/ ./ +COPY --from=builder /builder/extracted/application/ ./ + + +# Mock the service account token for CDS profile generation +RUN mkdir -p /var/run/secrets/kubernetes.io/serviceaccount && \ + echo "mock-token" > /var/run/secrets/kubernetes.io/serviceaccount/token && \ + chmod 600 /var/run/secrets/kubernetes.io/serviceaccount/token + +# Create a dynamic archive +RUN java -XX:ArchiveClassesAtExit=application.jsa -Dspring.context.exit=onRefresh -jar application.jar + +# Clean up the mocked token +RUN rm -rf /var/run/secrets/kubernetes.io + +# Static archive +# RUN java -Xshare:off -XX:DumpLoadedClassList=application.classlist -Dspring.context.exit=onRefresh -jar application.jar +# RUN java -Xshare:dump -XX:SharedArchiveFile=application.jsa -XX:SharedClassListFile=application.classlist -Dspring.context.exit=onRefresh -cp application.jar + +RUN adduser -u 2000 -D wrongsecrets USER wrongsecrets -CMD java -jar -Dspring.profiles.active=$(echo ${SPRING_PROFILES_ACTIVE}) -Dspringdoc.swagger-ui.enabled=${SPRINGDOC_UI} -Dspringdoc.api-docs.enabled=${SPRINGDOC_DOC} -D /application.jar + +CMD java -jar -XX:SharedArchiveFile=application.jsa -Dspring.profiles.active=$(echo ${SPRING_PROFILES_ACTIVE}) -Dspringdoc.swagger-ui.enabled=${SPRINGDOC_UI} -Dspringdoc.api-docs.enabled=${SPRINGDOC_DOC} -D application.jar diff --git a/Dockerfile.web b/Dockerfile.web index 2ad9d5f44..0ed4be279 100644 --- a/Dockerfile.web +++ b/Dockerfile.web @@ -1,5 +1,5 @@ -FROM jeroenwillemsen/wrongsecrets:1.9.2-no-vault -ARG argBasedVersion="1.9.2-no-vault" +FROM jeroenwillemsen/wrongsecrets:1.10.2-CDS-no-vault +ARG argBasedVersion="1.10.2-no-vault" ARG CANARY_URLS="http://canarytokens.com/terms/about/s7cfbdakys13246ewd8ivuvku/post.jsp,http://canarytokens.com/terms/about/y0all60b627gzp19ahqh7rl6j/post.jsp" ARG CTF_ENABLED=false ARG HINTS_ENABLED=true diff --git a/LICENSE b/LICENSE index 626ca1b19..6f6db4697 100644 --- a/LICENSE +++ b/LICENSE @@ -629,7 +629,7 @@ to attach them to the start of each source file to most effectively state the exclusion of warranty; and each file should have at least the "copyright" line and a pointer to where the full notice is found. - Copyright (c) 2020-2024 Jeroen Willemsen and WrongSecret contributors. + Copyright (c) 2020-2025 Jeroen Willemsen and WrongSecret contributors. This program is free software: you can redistribute it and/or modify it under the terms of the GNU Affero General Public License as published by diff --git a/README.md b/README.md index 709df8b71..d2b1654b3 100644 --- a/README.md +++ b/README.md @@ -16,7 +16,7 @@ Welcome to the OWASP WrongSecrets game! The game is packed with real life examples of how to _not_ store secrets in your software. Each of these examples is captured in a challenge, which you need to solve using various tools and techniques. Solving these challenges will help you recognize common mistakes & can help you to reflect on your own secrets management strategy. -Can you solve all the 50 challenges? +Can you solve all the 51 challenges? Try some of them on [our Heroku demo environment](https://wrongsecrets.herokuapp.com/). @@ -70,11 +70,11 @@ an [issue](https://github.com/OWASP/wrongsecrets/issues) , or use [discussions](https://github.com/OWASP/wrongsecrets/discussions). Please note that this is an OWASP volunteer based project, so it might take a little while before we respond. -Copyright (c) 2020-2024 Jeroen Willemsen and WrongSecrets contributors. +Copyright (c) 2020-2025 Jeroen Willemsen and WrongSecrets contributors. ## Basic docker exercises -_Can be used for challenges 1-4, 8, 12-32, 34, 35-43, 49-50_ +_Can be used for challenges 1-4, 8, 12-32, 34, 35-43, 49-51_ For the basic docker exercises you currently require: @@ -86,8 +86,10 @@ You can install it by doing: ```bash docker run -p 8080:8080 jeroenwillemsen/wrongsecrets:latest-no-vault ``` - -Now you can try to find the secrets by means of solving the challenge offered at: +Now you can try to find the secrets by means of solving the challenge offered at the links below +
+ all the links for docker challenges (click triangle to open the block). + - [localhost:8080/challenge/challenge-1](http://localhost:8080/challenge/challenge-1) - [localhost:8080/challenge/challenge-2](http://localhost:8080/challenge/challenge-2) @@ -125,8 +127,11 @@ Now you can try to find the secrets by means of solving the challenge offered at - [localhost:8080/challenge/challenge-41](http://localhost:8080/challenge/challenge-41) - [localhost:8080/challenge/challenge-42](http://localhost:8080/challenge/challenge-42) - [localhost:8080/challenge/challenge-43](http://localhost:8080/challenge/challenge-43) -- [localhost:8080/challenge/challenge-43](http://localhost:8080/challenge/challenge-49) -- [localhost:8080/challenge/challenge-43](http://localhost:8080/challenge/challenge-50) +- [localhost:8080/challenge/challenge-49](http://localhost:8080/challenge/challenge-49) +- [localhost:8080/challenge/challenge-50](http://localhost:8080/challenge/challenge-50) +- [localhost:8080/challenge/challenge-51](http://localhost:8080/challenge/challenge-51) + +
Note that these challenges are still very basic, and so are their explanations. Feel free to file a PR to make them look better ;-). @@ -154,7 +159,7 @@ If you want to host WrongSecrets on Railway, you can do so by deploying [this on ## Basic K8s exercise -_Can be used for challenges 1-6, 8, 12-43, 48-50_ +_Can be used for challenges 1-6, 8, 12-43, 48-51_ ### Minikube based @@ -247,7 +252,7 @@ This is because if you run the start script again it will replace the secret in ## Cloud Challenges -_Can be used for challenges 1-50_ +_Can be used for challenges 1-51_ **READ THIS**: Given that the exercises below contain IAM privilege escalation exercises, never run this on an account which is related to your production environment or can influence your account-over-arching @@ -311,17 +316,18 @@ Contributors: - [Rodolfo Cabral Neves @roddas](https://www.github.com/roddas) - [Osama Magdy @osamamagdy](https://www.github.com/osamamagdy) - [Shubham Patel @Shubham-Patel07](https://www.github.com/Shubham-Patel07) +- [za @za](https://www.github.com/za) - [Divyanshu Dev @Novice-expert](https://www.github.com/Novice-expert) - [Tibor Hercz @tiborhercz](https://www.github.com/tiborhercz) -- [za @za](https://www.github.com/za) - [Chris Elbring Jr. @neatzsche](https://www.github.com/neatzsche) +- [Adarsh A @adarsh-a-tw](https://www.github.com/adarsh-a-tw) - [Diamond Rivero @diamant3](https://www.github.com/diamant3) - [Norbert Wolniak @nwolniak](https://www.github.com/nwolniak) -- [Adarsh A @adarsh-a-tw](https://www.github.com/adarsh-a-tw) - [Filip Chyla @fchyla](https://www.github.com/fchyla) -- [Turjo Chowdhury @turjoc120](https://www.github.com/turjoc120) -- [Vineeth Jagadeesh @djvinnie](https://www.github.com/djvinnie) - [Dmitry Litosh @Dlitosh](https://www.github.com/Dlitosh) +- [Vineeth Jagadeesh @djvinnie](https://www.github.com/djvinnie) +- [Turjo Chowdhury @turjoc120](https://www.github.com/turjoc120) +- [SndR @SndR85](https://www.github.com/SndR85) - [Josh Grossman @tghosth](https://www.github.com/tghosth) - [alphasec @alphasecio](https://www.github.com/alphasecio) - [CaduRoriz @CaduRoriz](https://www.github.com/CaduRoriz) @@ -329,13 +335,13 @@ Contributors: - [Mike Woudenberg @mikewoudenberg](https://www.github.com/mikewoudenberg) - [Spyros @northdpole](https://www.github.com/northdpole) - [RubenAtBinx @RubenAtBinx](https://www.github.com/RubenAtBinx) -- [Jeff Tong @Wind010](https://www.github.com/Wind010) -- [Fern @f3rn0s](https://www.github.com/f3rn0s) -- [Shlomo Zalman Heigh @szh](https://www.github.com/szh) -- [Rick M @kingthorin](https://www.github.com/kingthorin) -- [Nicolas Humblot @nhumblot](https://www.github.com/nhumblot) -- [Danny Lloyd @dannylloyd](https://www.github.com/dannylloyd) - [Alex Bender @alex-bender](https://www.github.com/alex-bender) +- [Danny Lloyd @dannylloyd](https://www.github.com/dannylloyd) +- [Nicolas Humblot @nhumblot](https://www.github.com/nhumblot) +- [Rick M @kingthorin](https://www.github.com/kingthorin) +- [Shlomo Zalman Heigh @szh](https://www.github.com/szh) +- [Fern @f3rn0s](https://www.github.com/f3rn0s) +- [Jeff Tong @Wind010](https://www.github.com/Wind010) Testers: diff --git a/aws/.terraform.lock.hcl b/aws/.terraform.lock.hcl index 1c368438a..d1b6a886b 100644 --- a/aws/.terraform.lock.hcl +++ b/aws/.terraform.lock.hcl @@ -2,38 +2,38 @@ # Manual edits may be lost in future updates. provider "registry.terraform.io/hashicorp/aws" { - version = "5.76.0" - constraints = ">= 4.0.0, >= 4.33.0, >= 5.46.0, >= 5.61.0, ~> 5.76.0" + version = "5.84.0" + constraints = ">= 4.0.0, >= 4.33.0, >= 5.46.0, >= 5.61.0, ~> 5.84.0" hashes = [ - "h1:0kI13izqob5Y68/D0QOrZBFZRsqpRt5y3xBbvXGCoFA=", - "h1:0vvRpjncvOeSq0e7hq5z9vkxqWqxrIe0T4uDOJYMogU=", - "h1:1HDJQxhd/6TGT1XjrhHs7OBAnjfBoJ3xNo4nn6wzoWM=", - "h1:3HO1CXuuuWt6dCfSYO4tBJjaNh86hd8M2ldzAAN1LTs=", - "h1:8xbmsJs9nCS9uBNjoxUXo5rOq1WgrXps632VIazrx84=", - "h1:GCIz6RqKVqFFdbaBRRCdLWilbMDpMiAblbn62BEuM9w=", - "h1:GxERYvv14yV5Eq0Ct1eInn3A0UAyvZsKgsDbmZmbtJU=", - "h1:JSLR3JP9naVcnH0PHcDwwHr3aQB9vlW0+b8HQma1GpU=", - "h1:RIaMr2WLZxL5Xs634b5Sa+hK6mVT7apzWcd9GfsGL20=", - "h1:bYc0hbgVRXYCiapr/EgjdP8ohcwFjninfknZvqHQZPQ=", - "h1:jD74ysr8oFfeOfFs38iwcINGNNa6lMOpojszl3auMx4=", - "h1:sD1YrPlCP6I6NsWhVVAl7IGKL9SvUZcbq4VhpiDv6xg=", - "h1:tOF76x3MbmnYsyciKeWSKM58mOGAcAa7BXln0h1zQrQ=", - "h1:xOKohtuoKP9ApJILrOTAS3oXZ+1vMGWvJ4o9+lzhX30=", - "zh:05b2a0d25fc07576f6698d4840d0d2ae2599484c49f1b911ea1154584557bc13", - "zh:1b22dd1d9c482739e133adb996a9c8b285ca7d978d0fe04deaa5588eba5d254c", - "zh:216088c8800e7b8d7eff7b1a822317bc6faec64f27946ffd22bb3494ac4175cb", - "zh:43e994112b1484bf49945c4885aa2fee32486c9a5d64b9146bbd6f309f24e332", - "zh:46a28ba800f176eef500f998217bccc331605ef05f11abb1728f727a81f3a8b0", - "zh:4fad2743174a600da76a0cceeec2fef8399a18d880ba8929d811cd5cea1b5dee", - "zh:5c42a2c1438cd7533456026f52b562715664490711fdea809f44610a7565c145", - "zh:792d4fd4be434682e4540d2579505c7f11f39d0efe1d12ee2761ed0d46c8cd51", - "zh:7bb5f9f87c9da6d62d6f89504f01a9d6d2f19dcaa0efc46ea51ebdc4bb6fd536", - "zh:81cdbd97f81b1110fce793944d5668a4389904979eb7d178d3142a6b0e175e5e", + "h1:897cPKLnktFTBHxlPDyv52hQoR7rUy52Tzr9F/bvXW0=", + "h1:EJLTu1eqP93P4+DexFZHnuMCwEapkmHhEUirUT+tjZw=", + "h1:MVppdPvKcROdwwj1i7OMoZ/ODFZlqrYr7GVHI1Fevb8=", + "h1:MsFKMU05GLbXfXQZHqy+eC5FC5hDxyRB1irY3lvAaf8=", + "h1:N0mARumaxRCk1FmbDiEW89izbpV/3jkWowrm/78HucQ=", + "h1:OJ53RNte7HLHSMxSkzu1S6H8sC0T8qnCAOcNLjjtMpc=", + "h1:TpsSFMkiuLC1V29n4Ov99g4L6jlsBmBMWxqDX3GZNww=", + "h1:X50oGSrQb2Hzf6i1BWnYOqIneJSy7TiWNtKK+VY+aGA=", + "h1:dwpeFUdcxgXVAc0JSqO57xf0/r2qOBLPloombCQWFz8=", + "h1:eeLhwhBhj96w3YFnTcOMPV0ybGER5fbv/ihcTMeoTk4=", + "h1:iBnPrv1hIjnS26jHVGXuxTDF27OaVOx2XJ0Sbp45qHs=", + "h1:lL0Ftd7QOGinm/1w/1qwfoj6urdJsmRSVxV+xfBD8R4=", + "h1:mwHAD66PY6wi858oGl5NcWGfA9X7mdxPrZrAGfJGS3A=", + "h1:p7kabmCUZYyP5A6VqtIvuy/+CTiGn03jVdcIFMbQkOI=", + "zh:078f77438aba6ec8bf9154b7d223e5c71c48d805d6cd3bcf9db0cc1e82668ac3", + "zh:1f6591ff96be00501e71b792ed3a5a14b21ff03afec9a1c4a3fd9300e6e5b674", + "zh:2ab694e022e81dd74485351c5836148a842ed71cf640664c9d871cb517b09602", + "zh:33c8ccb6e3dc496e828a7572dd981366c6271075c1189f249b9b5236361d7eff", + "zh:6f31068ebad1d627e421c72ccdaafe678c53600ca73714e977bf45ff43ae5d17", + "zh:7488623dccfb639347cae66f9001d39cf06b92e8081975235a1ac3a0ac3f44aa", + "zh:7f042b78b9690a8725c95b91a70fc8e264011b836605bcc342ac297b9ea3937d", + "zh:88b56ac6c7209dc0a775b79975a371918f3aed8f015c37d5899f31deff37c61a", "zh:9b12af85486a96aedd8d7984b0ff811a4b42e3d88dad1a3fb4c0b580d04fa425", - "zh:ab4b881eb0f3812b702aaecf921c5c16bbcc33d61d668be4d72d6da9c57ded85", - "zh:c1d9d1166fd948845614deef81f3197568d0d3c2a03b8b97fff308ebc59043f9", - "zh:cda7530f2c01434e483d3faf62fc0685295e7f844176aa38df1ba65fa6a4407a", - "zh:fdad558b1c41aa68123d0da82cc0d65bc86d09eaa1ab1d3a167ec3bce0fc0c66", + "zh:a1979ba840d704af0932f8de5f541cbb4caa9b6bbd25ed552a24e6772175ba07", + "zh:b058c0533dae580e69d1adbc1f69e6a80632374abfc10e8634d06187a108e87b", + "zh:c88610af9cf957f8dcf4382e0c9ca566ef10e3290f5de01d4d90b2d81b078aa8", + "zh:e9562c055a2247d0c287772b55abef468c79f8d66a74780fe1c5e5dae1a284a9", + "zh:f7a7c71d28441d925a25c08c4485c015b2d9f0338bc9707443e91ff8e161d3d9", + "zh:fee533e81976d0900aa6fa443dc54ef171cbd901847f28a6e8edb1d161fa6fde", ] } diff --git a/aws/go.mod b/aws/go.mod index 4b8a9a3f3..45bd3a599 100644 --- a/aws/go.mod +++ b/aws/go.mod @@ -2,7 +2,7 @@ module wrongsecrets go 1.22.7 -toolchain go1.23.3 +toolchain go1.23.4 require github.com/gruntwork-io/terratest v0.47.2 @@ -72,13 +72,13 @@ require ( go.opentelemetry.io/otel/sdk v1.32.0 // indirect go.opentelemetry.io/otel/sdk/metric v1.32.0 // indirect go.opentelemetry.io/otel/trace v1.32.0 // indirect - golang.org/x/crypto v0.29.0 // indirect + golang.org/x/crypto v0.31.0 // indirect golang.org/x/mod v0.22.0 // indirect - golang.org/x/net v0.31.0 // indirect + golang.org/x/net v0.33.0 // indirect golang.org/x/oauth2 v0.24.0 // indirect - golang.org/x/sync v0.9.0 // indirect - golang.org/x/sys v0.27.0 // indirect - golang.org/x/text v0.20.0 // indirect + golang.org/x/sync v0.10.0 // indirect + golang.org/x/sys v0.28.0 // indirect + golang.org/x/text v0.21.0 // indirect golang.org/x/time v0.8.0 // indirect golang.org/x/tools v0.27.0 // indirect golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect diff --git a/aws/go.sum b/aws/go.sum index 32da40d90..fff377edf 100644 --- a/aws/go.sum +++ b/aws/go.sum @@ -608,6 +608,8 @@ golang.org/x/crypto v0.28.0 h1:GBDwsMXVQi34v5CCYUm2jkJvu4cbtru2U4TN2PSyQnw= golang.org/x/crypto v0.28.0/go.mod h1:rmgy+3RHxRZMyY0jjAJShp2zgEdOqj2AO7U0pYmeQ7U= golang.org/x/crypto v0.29.0 h1:L5SG1JTTXupVV3n6sUqMTeWbjAyfPwoda2DLX8J8FrQ= golang.org/x/crypto v0.29.0/go.mod h1:+F4F4N5hv6v38hfeYwTdx20oUvLLc+QfrE9Ax9HtgRg= +golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U= +golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= @@ -702,6 +704,8 @@ golang.org/x/net v0.30.0 h1:AcW1SDZMkb8IpzCdQUaIq2sP4sZ4zw+55h6ynffypl4= golang.org/x/net v0.30.0/go.mod h1:2wGyMJ5iFasEhkwi13ChkO/t1ECNC4X4eBKkVFyYFlU= golang.org/x/net v0.31.0 h1:68CPQngjLL0r2AlUKiSxtQFKvzRVbnzLwMUn5SzcLHo= golang.org/x/net v0.31.0/go.mod h1:P4fl1q7dY2hnZFxEk4pPSkDHF+QqjitcnDjUQyMM+pM= +golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I= +golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= @@ -751,6 +755,8 @@ golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ= golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sync v0.9.0 h1:fEo0HyrW1GIgZdpbhCRO0PkJajUS5H9IFUztCgEo2jQ= golang.org/x/sync v0.9.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ= +golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -821,6 +827,8 @@ golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo= golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/sys v0.27.0 h1:wBqf8DvsY9Y/2P8gAfPDEYNuS30J4lPHJxXSb/nJZ+s= golang.org/x/sys v0.27.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA= +golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= @@ -843,6 +851,8 @@ golang.org/x/text v0.19.0 h1:kTxAhCbGbxhK0IwgSKiMO5awPoDQ0RpfiVYBfK860YM= golang.org/x/text v0.19.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY= golang.org/x/text v0.20.0 h1:gK/Kv2otX8gz+wn7Rmb3vT96ZwuoxnQlY+HlJVj7Qug= golang.org/x/text v0.20.0/go.mod h1:D4IsuqiFMhST5bX19pQ9ikHC2GsaKyk/oF+pn3ducp4= +golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo= +golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ= golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= diff --git a/aws/k8s-aws-alb-script.sh b/aws/k8s-aws-alb-script.sh index 8c3ea323b..f0ee98486 100755 --- a/aws/k8s-aws-alb-script.sh +++ b/aws/k8s-aws-alb-script.sh @@ -24,7 +24,7 @@ fi ACCOUNT_ID=$(aws sts get-caller-identity | jq '.Account' -r) echo "ACCOUNT_ID=${ACCOUNT_ID}" -LBC_VERSION="v2.10.1" +LBC_VERSION="v2.11.0" echo "LBC_VERSION=$LBC_VERSION" # echo "executing eksctl utils associate-iam-oidc-provider" diff --git a/aws/k8s/secret-challenge-vault-deployment.yml b/aws/k8s/secret-challenge-vault-deployment.yml index f68de90ae..f1191839a 100644 --- a/aws/k8s/secret-challenge-vault-deployment.yml +++ b/aws/k8s/secret-challenge-vault-deployment.yml @@ -58,7 +58,7 @@ spec: volumeAttributes: secretProviderClass: "wrongsecrets-aws-secretsmanager" containers: - - image: jeroenwillemsen/wrongsecrets:1.9.2-k8s-vault + - image: jeroenwillemsen/wrongsecrets:1.10.2-k8s-vault imagePullPolicy: IfNotPresent name: secret-challenge command: [ "/bin/sh" ] diff --git a/aws/main.tf b/aws/main.tf index 7f142a5af..d54d3c1fd 100644 --- a/aws/main.tf +++ b/aws/main.tf @@ -40,7 +40,7 @@ data "aws_availability_zones" "available" {} module "vpc" { source = "terraform-aws-modules/vpc/aws" - version = "~> 5.15.0" + version = "~> 5.17.0" name = "${var.cluster_name}-vpc" cidr = local.vpc_cidr @@ -65,7 +65,7 @@ module "vpc" { module "eks" { source = "terraform-aws-modules/eks/aws" - version = "20.29.0" + version = "20.33.1" cluster_name = var.cluster_name cluster_version = var.cluster_version diff --git a/aws/shared-state/.terraform.lock.hcl b/aws/shared-state/.terraform.lock.hcl index 4e66b5169..52f2f5de8 100644 --- a/aws/shared-state/.terraform.lock.hcl +++ b/aws/shared-state/.terraform.lock.hcl @@ -2,37 +2,37 @@ # Manual edits may be lost in future updates. provider "registry.terraform.io/hashicorp/aws" { - version = "5.76.0" + version = "5.84.0" constraints = "~> 5.0" hashes = [ - "h1:0kI13izqob5Y68/D0QOrZBFZRsqpRt5y3xBbvXGCoFA=", - "h1:0vvRpjncvOeSq0e7hq5z9vkxqWqxrIe0T4uDOJYMogU=", - "h1:1HDJQxhd/6TGT1XjrhHs7OBAnjfBoJ3xNo4nn6wzoWM=", - "h1:3HO1CXuuuWt6dCfSYO4tBJjaNh86hd8M2ldzAAN1LTs=", - "h1:8xbmsJs9nCS9uBNjoxUXo5rOq1WgrXps632VIazrx84=", - "h1:GCIz6RqKVqFFdbaBRRCdLWilbMDpMiAblbn62BEuM9w=", - "h1:GxERYvv14yV5Eq0Ct1eInn3A0UAyvZsKgsDbmZmbtJU=", - "h1:JSLR3JP9naVcnH0PHcDwwHr3aQB9vlW0+b8HQma1GpU=", - "h1:RIaMr2WLZxL5Xs634b5Sa+hK6mVT7apzWcd9GfsGL20=", - "h1:bYc0hbgVRXYCiapr/EgjdP8ohcwFjninfknZvqHQZPQ=", - "h1:jD74ysr8oFfeOfFs38iwcINGNNa6lMOpojszl3auMx4=", - "h1:sD1YrPlCP6I6NsWhVVAl7IGKL9SvUZcbq4VhpiDv6xg=", - "h1:tOF76x3MbmnYsyciKeWSKM58mOGAcAa7BXln0h1zQrQ=", - "h1:xOKohtuoKP9ApJILrOTAS3oXZ+1vMGWvJ4o9+lzhX30=", - "zh:05b2a0d25fc07576f6698d4840d0d2ae2599484c49f1b911ea1154584557bc13", - "zh:1b22dd1d9c482739e133adb996a9c8b285ca7d978d0fe04deaa5588eba5d254c", - "zh:216088c8800e7b8d7eff7b1a822317bc6faec64f27946ffd22bb3494ac4175cb", - "zh:43e994112b1484bf49945c4885aa2fee32486c9a5d64b9146bbd6f309f24e332", - "zh:46a28ba800f176eef500f998217bccc331605ef05f11abb1728f727a81f3a8b0", - "zh:4fad2743174a600da76a0cceeec2fef8399a18d880ba8929d811cd5cea1b5dee", - "zh:5c42a2c1438cd7533456026f52b562715664490711fdea809f44610a7565c145", - "zh:792d4fd4be434682e4540d2579505c7f11f39d0efe1d12ee2761ed0d46c8cd51", - "zh:7bb5f9f87c9da6d62d6f89504f01a9d6d2f19dcaa0efc46ea51ebdc4bb6fd536", - "zh:81cdbd97f81b1110fce793944d5668a4389904979eb7d178d3142a6b0e175e5e", + "h1:897cPKLnktFTBHxlPDyv52hQoR7rUy52Tzr9F/bvXW0=", + "h1:EJLTu1eqP93P4+DexFZHnuMCwEapkmHhEUirUT+tjZw=", + "h1:MVppdPvKcROdwwj1i7OMoZ/ODFZlqrYr7GVHI1Fevb8=", + "h1:MsFKMU05GLbXfXQZHqy+eC5FC5hDxyRB1irY3lvAaf8=", + "h1:N0mARumaxRCk1FmbDiEW89izbpV/3jkWowrm/78HucQ=", + "h1:OJ53RNte7HLHSMxSkzu1S6H8sC0T8qnCAOcNLjjtMpc=", + "h1:TpsSFMkiuLC1V29n4Ov99g4L6jlsBmBMWxqDX3GZNww=", + "h1:X50oGSrQb2Hzf6i1BWnYOqIneJSy7TiWNtKK+VY+aGA=", + "h1:dwpeFUdcxgXVAc0JSqO57xf0/r2qOBLPloombCQWFz8=", + "h1:eeLhwhBhj96w3YFnTcOMPV0ybGER5fbv/ihcTMeoTk4=", + "h1:iBnPrv1hIjnS26jHVGXuxTDF27OaVOx2XJ0Sbp45qHs=", + "h1:lL0Ftd7QOGinm/1w/1qwfoj6urdJsmRSVxV+xfBD8R4=", + "h1:mwHAD66PY6wi858oGl5NcWGfA9X7mdxPrZrAGfJGS3A=", + "h1:p7kabmCUZYyP5A6VqtIvuy/+CTiGn03jVdcIFMbQkOI=", + "zh:078f77438aba6ec8bf9154b7d223e5c71c48d805d6cd3bcf9db0cc1e82668ac3", + "zh:1f6591ff96be00501e71b792ed3a5a14b21ff03afec9a1c4a3fd9300e6e5b674", + "zh:2ab694e022e81dd74485351c5836148a842ed71cf640664c9d871cb517b09602", + "zh:33c8ccb6e3dc496e828a7572dd981366c6271075c1189f249b9b5236361d7eff", + "zh:6f31068ebad1d627e421c72ccdaafe678c53600ca73714e977bf45ff43ae5d17", + "zh:7488623dccfb639347cae66f9001d39cf06b92e8081975235a1ac3a0ac3f44aa", + "zh:7f042b78b9690a8725c95b91a70fc8e264011b836605bcc342ac297b9ea3937d", + "zh:88b56ac6c7209dc0a775b79975a371918f3aed8f015c37d5899f31deff37c61a", "zh:9b12af85486a96aedd8d7984b0ff811a4b42e3d88dad1a3fb4c0b580d04fa425", - "zh:ab4b881eb0f3812b702aaecf921c5c16bbcc33d61d668be4d72d6da9c57ded85", - "zh:c1d9d1166fd948845614deef81f3197568d0d3c2a03b8b97fff308ebc59043f9", - "zh:cda7530f2c01434e483d3faf62fc0685295e7f844176aa38df1ba65fa6a4407a", - "zh:fdad558b1c41aa68123d0da82cc0d65bc86d09eaa1ab1d3a167ec3bce0fc0c66", + "zh:a1979ba840d704af0932f8de5f541cbb4caa9b6bbd25ed552a24e6772175ba07", + "zh:b058c0533dae580e69d1adbc1f69e6a80632374abfc10e8634d06187a108e87b", + "zh:c88610af9cf957f8dcf4382e0c9ca566ef10e3290f5de01d4d90b2d81b078aa8", + "zh:e9562c055a2247d0c287772b55abef468c79f8d66a74780fe1c5e5dae1a284a9", + "zh:f7a7c71d28441d925a25c08c4485c015b2d9f0338bc9707443e91ff8e161d3d9", + "zh:fee533e81976d0900aa6fa443dc54ef171cbd901847f28a6e8edb1d161fa6fde", ] } diff --git a/aws/versions.tf b/aws/versions.tf index fc992eefa..eaea75d9f 100644 --- a/aws/versions.tf +++ b/aws/versions.tf @@ -4,7 +4,7 @@ terraform { required_providers { aws = { source = "hashicorp/aws" - version = "~> 5.76.0" + version = "~> 5.84.0" } random = { source = "hashicorp/random" diff --git a/azure/.terraform.lock.hcl b/azure/.terraform.lock.hcl index e7ec8e38f..d26c724fe 100644 --- a/azure/.terraform.lock.hcl +++ b/azure/.terraform.lock.hcl @@ -2,32 +2,32 @@ # Manual edits may be lost in future updates. provider "registry.terraform.io/hashicorp/azurerm" { - version = "4.10.0" - constraints = "~> 4.10.0" + version = "4.16.0" + constraints = "~> 4.16.0" hashes = [ - "h1:9fUr1wbpiMsv+bbnVVu6gG+dNeuD6JO/Cw30eNKHJR4=", - "h1:BTe2CYDIdDY+PZEdFl56njE5d29gL9WgxYZmmWnEd/0=", - "h1:C9DaUcXsU53Kp1ccJToJzaWL+Cct08l5y18WnFVECOc=", - "h1:Cpgo1Glw1H8dQDcuFJEWuEQiDzoSy2B3XVfjoexyDEc=", - "h1:D1XClb/QbsWNpQE1PN19OT0ATC82ogUPbXX6oXi1CHk=", - "h1:GE4x5zs03lqkgPgzBs86PXhRRJUyqF7dwc7hDVNlSqI=", - "h1:VN8tO3s6APKjDlyNlX7oXhWrSE2CDv9alamEhpP+ySQ=", - "h1:XGD15zVV5HQQjBToAlHNVE0BNCKixO3gWLHe21nr67s=", - "h1:iG+HWQUlWVpizuBFd+NAeHAyrGFf6sMD0hA4fol7Svg=", - "h1:p6KW81Vm9UavVAj6OC/B8sHozAqRY7Avb4xKmhniYsY=", - "h1:ywiF/F7Mx+FJTPz1yFsQf3nzpWMP6/HKwv0l/N7pehk=", - "zh:0fe9fc17b0146f29eaefd2bbce7daad93e011de4ba2dca5a6422bea521120737", - "zh:3a1ff1792c3341a9666522b36a45910cf83a35d7c632e45d5a0e0e25a4323284", - "zh:491886b0fc298f7b15a4f3f56a5ff521b3782a8675c0b8512bb92d02c41ff562", - "zh:629cb97dc98e05f167fd9b4ec4e491f484e38291eaf8c69d887f0a136ee45e31", - "zh:80993263737317400981f5bf2b3c2634962e086f4fdd6f995c295202afcea383", - "zh:a490d8f0c6005e20c7024a99073ef5c9f98427d2a7ddfdab47bc39b9060b0b2e", - "zh:a736d534a057f5dbc39272b1952981ba2507c3681e3f9f431c3951c98444b9e2", - "zh:a8831d3d9fbc9972956b639501c180711271928f05aa4ae409045e39fbd41469", - "zh:c0cd073a5ca178fc3ea866d59b437c20158c2fcd57d24431eec575d505da77eb", - "zh:caa667363a0b5ed4df5fc21544ea0123709d77cdd158870fc452a3ee328cf4ab", - "zh:cc15f1f28c9230b66825e893b47264279bb6a1c9dd49c588a896d7666ebea5ed", + "h1:5aUNrEyEto0kuqvVlot0oJIfjZvufkaVpBLFRAHKYEk=", + "h1:7e25Wr4cpUvlAcwL+9ZOeeA1xha84LqTZNviDaVQFlo=", + "h1:8hK4uDEChFAWE9MvC+/HBB4WUkhJdedn7Q4pLJEQDl4=", + "h1:HZdmFPnC/+x6si15pq4rGYv/1TrCcyQXLnDMqq1SONw=", + "h1:UNZga7kYMfYfDHmuP6LvHmJNXlb3fyvRY1tA9ol6yY4=", + "h1:ZJgJLXK4nZKfj1z2TIKCKa+7Jt+p1G5Mwty2PTF7Tso=", + "h1:iTxbOUuean5hkvi0xyxU+UXK5HT3DfxZYumlJHphCIw=", + "h1:kZJbZZTpZVW6rfj0wt4I7VFekUEDD5CRa1sAP6wrwGI=", + "h1:uIzu9HMGN1ySZ1s+iYCKY9UqsgCjgH05tnBg1DgHtV4=", + "h1:uulWiJ93kZmKKh6/EtHktJQ901npRmTb/ao7oTP402w=", + "h1:zQ3svnDlwO7XtuXurLKLanW7arcRbFmw/pUd1DzLuEU=", + "zh:2035e461a94bd4180557a06f8e56f228a8a035608d0dac4d08e5870cf9265276", + "zh:3f15778a22ef1b9d0fa28670e5ea6ef1094b0be2533f43f350a2ef15d471b353", + "zh:4f1a4d03b008dd958bcd6bf82cf088fbaa9c121be2fd35e10e6b06c6e8f6aaa1", + "zh:5859f31c342364e849b4f8c437a46f33e927fa820244d0732b8d2ec74a95712d", + "zh:693d0f15512ca8c6b5e999b3a7551503feb06b408b3836bc6a6403e518b9ddab", + "zh:7f4912bec5b04f5156935292377c12484c13582151eb3c2555df409a7e5fb6e0", + "zh:bb9a509497f3a131c52fac32348919bf1b9e06c69a65f24607b03f7b56fb47b6", + "zh:c1b0c64e49ac591fd038ad71e71403ff71c07476e27e8da718c29f0028ea6d0d", + "zh:dd4ca432ee14eb0bb0cdc0bb463c8675b8ef02497be870a20d8dfee3e7fe52b3", + "zh:df58bb7fea984d2b11709567842ca4d55b3f24e187aa6be99e3677f55cbbe7da", "zh:f569b65999264a9416862bca5cd2a6177d94ccb0424f3a4ef424428912b9cb3c", + "zh:f7fb37704da50c096f9c7c25e8a95fe73ce1d3c5aab0d616d506f07bc5cfcdd8", ] } diff --git a/azure/go.mod b/azure/go.mod index 4b8a9a3f3..45bd3a599 100644 --- a/azure/go.mod +++ b/azure/go.mod @@ -2,7 +2,7 @@ module wrongsecrets go 1.22.7 -toolchain go1.23.3 +toolchain go1.23.4 require github.com/gruntwork-io/terratest v0.47.2 @@ -72,13 +72,13 @@ require ( go.opentelemetry.io/otel/sdk v1.32.0 // indirect go.opentelemetry.io/otel/sdk/metric v1.32.0 // indirect go.opentelemetry.io/otel/trace v1.32.0 // indirect - golang.org/x/crypto v0.29.0 // indirect + golang.org/x/crypto v0.31.0 // indirect golang.org/x/mod v0.22.0 // indirect - golang.org/x/net v0.31.0 // indirect + golang.org/x/net v0.33.0 // indirect golang.org/x/oauth2 v0.24.0 // indirect - golang.org/x/sync v0.9.0 // indirect - golang.org/x/sys v0.27.0 // indirect - golang.org/x/text v0.20.0 // indirect + golang.org/x/sync v0.10.0 // indirect + golang.org/x/sys v0.28.0 // indirect + golang.org/x/text v0.21.0 // indirect golang.org/x/time v0.8.0 // indirect golang.org/x/tools v0.27.0 // indirect golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect diff --git a/azure/go.sum b/azure/go.sum index 32da40d90..fff377edf 100644 --- a/azure/go.sum +++ b/azure/go.sum @@ -608,6 +608,8 @@ golang.org/x/crypto v0.28.0 h1:GBDwsMXVQi34v5CCYUm2jkJvu4cbtru2U4TN2PSyQnw= golang.org/x/crypto v0.28.0/go.mod h1:rmgy+3RHxRZMyY0jjAJShp2zgEdOqj2AO7U0pYmeQ7U= golang.org/x/crypto v0.29.0 h1:L5SG1JTTXupVV3n6sUqMTeWbjAyfPwoda2DLX8J8FrQ= golang.org/x/crypto v0.29.0/go.mod h1:+F4F4N5hv6v38hfeYwTdx20oUvLLc+QfrE9Ax9HtgRg= +golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U= +golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= @@ -702,6 +704,8 @@ golang.org/x/net v0.30.0 h1:AcW1SDZMkb8IpzCdQUaIq2sP4sZ4zw+55h6ynffypl4= golang.org/x/net v0.30.0/go.mod h1:2wGyMJ5iFasEhkwi13ChkO/t1ECNC4X4eBKkVFyYFlU= golang.org/x/net v0.31.0 h1:68CPQngjLL0r2AlUKiSxtQFKvzRVbnzLwMUn5SzcLHo= golang.org/x/net v0.31.0/go.mod h1:P4fl1q7dY2hnZFxEk4pPSkDHF+QqjitcnDjUQyMM+pM= +golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I= +golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= @@ -751,6 +755,8 @@ golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ= golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sync v0.9.0 h1:fEo0HyrW1GIgZdpbhCRO0PkJajUS5H9IFUztCgEo2jQ= golang.org/x/sync v0.9.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ= +golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -821,6 +827,8 @@ golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo= golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/sys v0.27.0 h1:wBqf8DvsY9Y/2P8gAfPDEYNuS30J4lPHJxXSb/nJZ+s= golang.org/x/sys v0.27.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA= +golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= @@ -843,6 +851,8 @@ golang.org/x/text v0.19.0 h1:kTxAhCbGbxhK0IwgSKiMO5awPoDQ0RpfiVYBfK860YM= golang.org/x/text v0.19.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY= golang.org/x/text v0.20.0 h1:gK/Kv2otX8gz+wn7Rmb3vT96ZwuoxnQlY+HlJVj7Qug= golang.org/x/text v0.20.0/go.mod h1:D4IsuqiFMhST5bX19pQ9ikHC2GsaKyk/oF+pn3ducp4= +golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo= +golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ= golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= diff --git a/azure/k8s/secret-challenge-vault-deployment.yml.tpl b/azure/k8s/secret-challenge-vault-deployment.yml.tpl index 4a577c183..9f28596bc 100644 --- a/azure/k8s/secret-challenge-vault-deployment.yml.tpl +++ b/azure/k8s/secret-challenge-vault-deployment.yml.tpl @@ -61,7 +61,7 @@ spec: volumeAttributes: secretProviderClass: "azure-wrongsecrets-vault" containers: - - image: jeroenwillemsen/wrongsecrets:1.9.2-k8s-vault + - image: jeroenwillemsen/wrongsecrets:1.10.2-k8s-vault imagePullPolicy: IfNotPresent name: secret-challenge command: ["/bin/sh"] diff --git a/azure/versions.tf b/azure/versions.tf index 8952bf377..f0fa60170 100644 --- a/azure/versions.tf +++ b/azure/versions.tf @@ -8,7 +8,7 @@ terraform { } azurerm = { source = "hashicorp/azurerm" - version = "~> 4.10.0" + version = "~> 4.16.0" } http = { source = "hashicorp/http" diff --git a/config/zap/rule-config.tsv b/config/zap/rule-config.tsv index 29d5a1b99..afc7cc02f 100644 --- a/config/zap/rule-config.tsv +++ b/config/zap/rule-config.tsv @@ -16,3 +16,4 @@ 10094 IGNORE Base64 Disclosure 90005 IGNORE Sec-Fetch-Dest Header is Missing 10003 IGNORE Vulnerable JS Library +90004 IGNORE Insufficient Site Isolation Against Spectre Vulnerability diff --git a/fly.toml b/fly.toml index 699a9061e..b95d9698c 100644 --- a/fly.toml +++ b/fly.toml @@ -8,7 +8,7 @@ app = "wrongsecrets" primary_region = "ams" [build] - image = "docker.io/jeroenwillemsen/wrongsecrets:1.9.2-no-vault" + image = "docker.io/jeroenwillemsen/wrongsecrets:1.10.2-no-vault" [env] K8S_ENV = "Fly(Docker)" diff --git a/gcp/.terraform.lock.hcl b/gcp/.terraform.lock.hcl index dcc070527..032178bea 100644 --- a/gcp/.terraform.lock.hcl +++ b/gcp/.terraform.lock.hcl @@ -2,62 +2,62 @@ # Manual edits may be lost in future updates. provider "registry.terraform.io/hashicorp/google" { - version = "6.11.2" - constraints = "~> 6.11.0" + version = "6.17.0" + constraints = "~> 6.17.0" hashes = [ - "h1:2cOnIe/dITv3iUOtIeqir/RIg0O6JYi6OFIROmcx308=", - "h1:56CA3B17/khf5Ch4HZynvcTACJEOmnqup9mxCcHxIfA=", - "h1:FsWUoFRk8a8J1yzFP9qinr4h571U49IVroMTE9JEYIg=", - "h1:H71tUF5icQMV//ccF7TGKdYA39mqiu2neAxB7YLHW3o=", - "h1:HIEferDX6zWh6t0JSVtbAFUDIsNy89mqJdueGYGysHg=", - "h1:NotYd2ABdj/DgDkzuuYq+5r3Yy9nUf+izJz1qt9kO5A=", - "h1:Nsc/b1Tect7CBZMqTatsVp+f56fOByne01qCdqL+TME=", - "h1:efAFxePGKXwk1dx2bpJjErANQh3Na7M+Na416BUC1sU=", - "h1:mHHJNoJrvfj+5n/YrqDaX6iTQRR4Zc75VZVdlq4BXM8=", - "h1:z36TZIxzooTf7T6/mmO+TaTbzwLymk+Y70ljVapb2eM=", - "h1:zMaIzyOEF8kJaIdbTsGKxnzPQAJZiJ6QngBu2sndkVk=", - "zh:00dc7de86e134064eebaa8a9a792de466bbbea090c0f83e5276aa421bd820740", - "zh:07efe84ab4557c2654e275ad0526a156aa8afbab245a1b6c0b25807d36b529ba", - "zh:17c029263afaf24e09078a1e65df4e12562304cc05f2f728b141e211f8959dc1", - "zh:381c13a92e059a8167d08ade6ed3248e61e192214ed49d401a9efb46ff707d2d", - "zh:761a1ba29e56245a553eef936eb4b16a10c1ec596b0eadd6c9d5951152bc27ee", - "zh:7956a1793ead6071c5787e25611f21f8272681ade94a47199483df03671a9b3a", - "zh:83fd6d976253ab911c947a79b9fa9450179605660727c0765c85b00ef054ec9b", - "zh:94a6566cc7db6a6f19cc6e05a30a7d4b6a8c4c668c8b9e14db17d2ee34b0678e", - "zh:a1a44bf143c8ebdcb7994f19897591fcce4d7480087daddaecaf0c587ba28d69", - "zh:d7f0e21c61638268267bd75160c01ec9f2339e357696159c9c7e2787310a0400", - "zh:e5b8b1f822549b0c1eb2c999e90548465774ee3bff15d284020a3d84c35f3af6", + "h1:2ycjv7XhGgMjTnDR+6ZfSLCPrm3o5nLn9RZ7g7iYT+0=", + "h1:ATBXbtcc0yaEQNkTK8eWxmMXH045AfLSDFMJOtoq3qQ=", + "h1:J7qp2vw9rlE7S80yO/WAK6kpri6r18J18/9lYm9lNB8=", + "h1:KaUdG4wHUzLBnIMeuYWyVMSSPmeemyJqMyc+/c0jYDE=", + "h1:QRjzeNePGTvp1a9UzGqu9Z8mMVjnRkfbZy2Uq13DRjU=", + "h1:Ro8XL1RTzXYs7e7EenvpiU/Rgsw/X6maSGWYb6e3Tpo=", + "h1:TQtswaM3aJSK0DPpBrpkGC9wQBoj9bO0h93sJ9NE264=", + "h1:aEcEXIGwaTDu+XAQP1xxso97MxDLWvLw9q0Q9kZiz6A=", + "h1:jTC2VqqElSe4qv/GS2rgI+AhILiVv1uIh0QJMnBemm8=", + "h1:n5tFN82RSrqLQlueXx5h4kgUbud2YhMkSDv3hw41kzE=", + "h1:siQ5DPLcE3KCbl55zr9yE1ceecICvbZ3MKkLbIcHZ04=", + "zh:2ae1ba33889babf740298f131c3151477c638a6d8dc2d850f207380ae91d5ee0", + "zh:2b950b0f4dcb1f79e10ad9611fc1573114028be423af742eb9b5027d1e1127fc", + "zh:4557ce5a9ce78e365af99c15c3a2d4d37a246535d0d62182a66cfc1c9de53cbd", + "zh:5ced8255a5cd868ebd6a0ba377b5016f578be402daea7479e488c109a74e8339", + "zh:6b7666678f6238637c7f78020edb8405669804a18ae580296419fb4179642cf6", + "zh:8677c153477daf1b636421a00633f25022b8c33fc803699d6ea6f89b75b4554b", + "zh:9f85498e26bf90049c252e6220a5a47cff88a4cd249e08845c59bd4c16aa48f3", + "zh:dce93c05d1852f1c692566c2ebf7200cb98aa059301044c2211c10319354c680", + "zh:df72b36e76e0721904c63eab34191bc9c4ccf93d067c2a0d455dd8bb39e73b66", + "zh:e9a9e8d8ae14ab6e661f3f9b07c5edec60507203dac7d2f187dc716317f4d79c", "zh:f569b65999264a9416862bca5cd2a6177d94ccb0424f3a4ef424428912b9cb3c", + "zh:fb92287bca4fc7b49666c644ca7789e4acf5b17317acb963f138c0ae6347a289", ] } provider "registry.terraform.io/hashicorp/google-beta" { - version = "6.11.2" - constraints = "~> 6.11.0" + version = "6.17.0" + constraints = "~> 6.17.0" hashes = [ - "h1:+5FShWzaOtHGoaE0ZnelS2LfNhQwGnsJa6mdGv7IcZA=", - "h1:+clk3eUKVZF9L3SpJ0ja5x51AYRpUgnT+yhAVeWnUxA=", - "h1:FgpHGAd3edyX06VCX3cAh7/DJntixSXuG3PkuEo2LGo=", - "h1:JMNWsl6bDGjQVJr3RfNST4Ds/GfRhxLRUsIbTwIRsyc=", - "h1:Nr5hxhUjnVvNHBsEyDPiHi6eByhnrBYbWSCxrusb0HU=", - "h1:OuxHhrZT3Dd9lhMigejG2RgjNWKnkVkjrNhBuXW9KSg=", - "h1:kqxzC0/imyDIDOUCY5R42L+9iy++fwLlDcE+V6qOaGk=", - "h1:mIEGB9MXyiljLjenYDFOYrPv1KymKY6CLfNDvyte4F4=", - "h1:p/IMJwFlss0+XxLFjtgzgapm6lPxe7OZ3NbL3kf4+Rk=", - "h1:t4GNI30U/ggxACdXNDm+3C0OJlFojKHL4ZXTh4e8IRQ=", - "h1:wHWAdPaIX8mchxnFk4n8OMkQOSOi90nUCtmXd8j3T8Y=", - "zh:02fda0d27adce977c2007bca3f69c62c75eae511df43091c09a826e962e66530", - "zh:34d3ec551cb53619e93f00b05aa5ad511137f9e0c370191aec6a3cf127696028", - "zh:5d2e07787d5430ab5ad9aa047fe21535641e99f6ac654dc5575e4d9b4ba864b8", - "zh:76b6f7dc870a6c91796336824de43b0bf001782199b834329c3fbba9e0f7dd51", - "zh:8a0d782f88cf9e9770fed44e2768e78ca9943d2ee9f584c684426e56c333217d", - "zh:9694c7b9e1e1799a44db25f4c7e858f9573c5b8a387056e9b4fa8b90c9389df5", - "zh:9c2914d4bfe7ad4376b16b679bd7c7eec473f8fab1e7c0236741f3024859fec6", - "zh:9cfd82d8e474976d21c4fd1b73b225d348d9ea311dcc2e11a987768319292a81", - "zh:d62767e8ae4b6122adf50cc05065b9c91df6ec25acf7afeb3ed6786ee6fb7ccc", - "zh:e48779c09b885fe5f2af8837ced76dde23f0e8a7f37145ea9fb5a90616d05a0b", - "zh:e8a3dd541e7bb89b5acb886f382aa2f84b172df5718c6ee531e260bdf80ffa14", + "h1:/Ld1YLT//KSQ5kOI8i9fjKvLGJLYXux/9ydCk1EE67E=", + "h1:1VPOmKMlzFBSZwi5rcyeW4a/GI1uvPiTAMCiNjuZj/Q=", + "h1:9TqgpkrVf5fTpOOuFGbKgivAVaxzQhL8zGAYZ72dlWQ=", + "h1:9epAYhibwVLbPccDH1PbIHcahHG1Ow3d1fPP7dgBDOM=", + "h1:FLmiAuFNpfeG0ZuK/0gGjUYFK7ozFJsTeWaRcQHOqCs=", + "h1:P6nH8QlquksSpm48z7s+U6RbW6uoNeaueEcKEW8+KWI=", + "h1:PbCB1KZwCBSvmsqpGKsRBpjjykHHe1Rk0WD8+undr2U=", + "h1:SG6r2HLjs+vIrNpWUY0TUQ2rUjegNs4iXD+1UReOoJQ=", + "h1:T4cedGVWX9Lc5cBeo4eJ4Vs1UkvmvReYts2qjvIDyM8=", + "h1:TxK80dKr+ony5VnU9iC5eGIPBFU4gq6+ZqV/ug2yBtk=", + "h1:aUsjqbCZRpO/ATlv/plTJ4FSl4Rd1x67v48XOeJP+r0=", + "zh:41018bb792fbc6eeb389be133ebeb88df5c0c7ab1cdd70cb49ef3b834b5253ef", + "zh:464a0432a42a0973a7cdaf40713a0e54adf74a18db2d9390b00ab691a7cbab14", + "zh:57d8f8c2f8d2ea2512ba73caf58b80b6643e268e63dd33aa6b3908f8e9c92e8c", + "zh:5a7e90f80f6a8fe19597053565565c4d85efd9896cbe28038c8e1f9452acef74", + "zh:5c5ad4eed1bc1c42c088555aa90c99e499b2904e4de0009aacf57fff90ebb2de", + "zh:6c950ac6dc08c4db26762717907109665989bb3c6faa0be2db8bf65f82112eaa", + "zh:846c821a7664b29569626dcba87667416b399a506ca86f045263e3b918dc73c6", + "zh:e06a2ac6afa592127e01768bf3b47051ac010e8c7ddc515dbd42b232d2ecfa2e", + "zh:ea2eec97f55eff6cf5cc67f41b1d4d4ec4403b1f61cd762dc1c028ba50e3b349", + "zh:f0e102bfdb2c70b747e7a439b31fe2c03480b598f46193325287a51ef744d2fa", "zh:f569b65999264a9416862bca5cd2a6177d94ccb0424f3a4ef424428912b9cb3c", + "zh:f76136bfb3c9c0848ff84a3bf98fba1b61c13124ade4194020d18583951b9df2", ] } diff --git a/gcp/go.mod b/gcp/go.mod index 4b8a9a3f3..45bd3a599 100644 --- a/gcp/go.mod +++ b/gcp/go.mod @@ -2,7 +2,7 @@ module wrongsecrets go 1.22.7 -toolchain go1.23.3 +toolchain go1.23.4 require github.com/gruntwork-io/terratest v0.47.2 @@ -72,13 +72,13 @@ require ( go.opentelemetry.io/otel/sdk v1.32.0 // indirect go.opentelemetry.io/otel/sdk/metric v1.32.0 // indirect go.opentelemetry.io/otel/trace v1.32.0 // indirect - golang.org/x/crypto v0.29.0 // indirect + golang.org/x/crypto v0.31.0 // indirect golang.org/x/mod v0.22.0 // indirect - golang.org/x/net v0.31.0 // indirect + golang.org/x/net v0.33.0 // indirect golang.org/x/oauth2 v0.24.0 // indirect - golang.org/x/sync v0.9.0 // indirect - golang.org/x/sys v0.27.0 // indirect - golang.org/x/text v0.20.0 // indirect + golang.org/x/sync v0.10.0 // indirect + golang.org/x/sys v0.28.0 // indirect + golang.org/x/text v0.21.0 // indirect golang.org/x/time v0.8.0 // indirect golang.org/x/tools v0.27.0 // indirect golang.org/x/xerrors v0.0.0-20240903120638-7835f813f4da // indirect diff --git a/gcp/go.sum b/gcp/go.sum index 32da40d90..fff377edf 100644 --- a/gcp/go.sum +++ b/gcp/go.sum @@ -608,6 +608,8 @@ golang.org/x/crypto v0.28.0 h1:GBDwsMXVQi34v5CCYUm2jkJvu4cbtru2U4TN2PSyQnw= golang.org/x/crypto v0.28.0/go.mod h1:rmgy+3RHxRZMyY0jjAJShp2zgEdOqj2AO7U0pYmeQ7U= golang.org/x/crypto v0.29.0 h1:L5SG1JTTXupVV3n6sUqMTeWbjAyfPwoda2DLX8J8FrQ= golang.org/x/crypto v0.29.0/go.mod h1:+F4F4N5hv6v38hfeYwTdx20oUvLLc+QfrE9Ax9HtgRg= +golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U= +golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= @@ -702,6 +704,8 @@ golang.org/x/net v0.30.0 h1:AcW1SDZMkb8IpzCdQUaIq2sP4sZ4zw+55h6ynffypl4= golang.org/x/net v0.30.0/go.mod h1:2wGyMJ5iFasEhkwi13ChkO/t1ECNC4X4eBKkVFyYFlU= golang.org/x/net v0.31.0 h1:68CPQngjLL0r2AlUKiSxtQFKvzRVbnzLwMUn5SzcLHo= golang.org/x/net v0.31.0/go.mod h1:P4fl1q7dY2hnZFxEk4pPSkDHF+QqjitcnDjUQyMM+pM= +golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I= +golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= @@ -751,6 +755,8 @@ golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ= golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sync v0.9.0 h1:fEo0HyrW1GIgZdpbhCRO0PkJajUS5H9IFUztCgEo2jQ= golang.org/x/sync v0.9.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ= +golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -821,6 +827,8 @@ golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo= golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/sys v0.27.0 h1:wBqf8DvsY9Y/2P8gAfPDEYNuS30J4lPHJxXSb/nJZ+s= golang.org/x/sys v0.27.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA= +golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= @@ -843,6 +851,8 @@ golang.org/x/text v0.19.0 h1:kTxAhCbGbxhK0IwgSKiMO5awPoDQ0RpfiVYBfK860YM= golang.org/x/text v0.19.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY= golang.org/x/text v0.20.0 h1:gK/Kv2otX8gz+wn7Rmb3vT96ZwuoxnQlY+HlJVj7Qug= golang.org/x/text v0.20.0/go.mod h1:D4IsuqiFMhST5bX19pQ9ikHC2GsaKyk/oF+pn3ducp4= +golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo= +golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ= golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= diff --git a/gcp/k8s/secret-challenge-vault-deployment.yml.tpl b/gcp/k8s/secret-challenge-vault-deployment.yml.tpl index 3b3567c8f..ff9862a26 100644 --- a/gcp/k8s/secret-challenge-vault-deployment.yml.tpl +++ b/gcp/k8s/secret-challenge-vault-deployment.yml.tpl @@ -58,7 +58,7 @@ spec: volumeAttributes: secretProviderClass: "wrongsecrets-gcp-secretsmanager" containers: - - image: jeroenwillemsen/wrongsecrets:1.9.2-k8s-vault + - image: jeroenwillemsen/wrongsecrets:1.10.2-k8s-vault imagePullPolicy: IfNotPresent name: secret-challenge command: ["/bin/sh"] diff --git a/gcp/versions.tf b/gcp/versions.tf index b7528ba7c..0a9377453 100644 --- a/gcp/versions.tf +++ b/gcp/versions.tf @@ -3,11 +3,11 @@ terraform { required_providers { google = { source = "hashicorp/google" - version = "~> 6.11.0" + version = "~> 6.17.0" } google-beta = { source = "hashicorp/google-beta" - version = "~> 6.11.0" + version = "~> 6.17.0" } random = { source = "hashicorp/random" diff --git a/js/index.js b/js/index.js index 88c683141..ad63acca9 100644 --- a/js/index.js +++ b/js/index.js @@ -1,5 +1,5 @@ function secret() { - var password = "MgvPITU=" + 9 + "+EVD" + 6 + "1wg=" + 2 + "GaRN" + 7; + var password = "cxsWHCc=" + 9 + "3bmI" + 6 + "2FA=" + 2 + "vYuX" + 7; return password; } diff --git a/k8s/secret-challenge-deployment.yml b/k8s/secret-challenge-deployment.yml index 4eba3ab37..61c706b3d 100644 --- a/k8s/secret-challenge-deployment.yml +++ b/k8s/secret-challenge-deployment.yml @@ -28,7 +28,7 @@ spec: runAsGroup: 2000 fsGroup: 2000 containers: - - image: jeroenwillemsen/wrongsecrets:1.9.2-no-vault + - image: jeroenwillemsen/wrongsecrets:1.10.2-no-vault imagePullPolicy: IfNotPresent name: secret-challenge ports: diff --git a/k8s/secret-challenge-vault-deployment.yml b/k8s/secret-challenge-vault-deployment.yml index f07efd141..5e69fe389 100644 --- a/k8s/secret-challenge-vault-deployment.yml +++ b/k8s/secret-challenge-vault-deployment.yml @@ -50,7 +50,7 @@ spec: type: RuntimeDefault serviceAccountName: vault containers: - - image: jeroenwillemsen/wrongsecrets:1.9.2-k8s-vault + - image: jeroenwillemsen/wrongsecrets:1.10.2-k8s-vault imagePullPolicy: IfNotPresent name: secret-challenge command: ["/bin/sh"] diff --git a/okteto/k8s/secret-challenge-ctf-deployment.yml b/okteto/k8s/secret-challenge-ctf-deployment.yml index 8611e2511..75eb43b56 100644 --- a/okteto/k8s/secret-challenge-ctf-deployment.yml +++ b/okteto/k8s/secret-challenge-ctf-deployment.yml @@ -28,7 +28,7 @@ spec: runAsGroup: 2000 fsGroup: 2000 containers: - - image: jeroenwillemsen/wrongsecrets:1.9.2-no-vault + - image: jeroenwillemsen/wrongsecrets:1.10.2-no-vault name: secret-challenge-ctf imagePullPolicy: IfNotPresent securityContext: diff --git a/okteto/k8s/secret-challenge-deployment.yml b/okteto/k8s/secret-challenge-deployment.yml index 0b5c29393..768c195dc 100644 --- a/okteto/k8s/secret-challenge-deployment.yml +++ b/okteto/k8s/secret-challenge-deployment.yml @@ -28,7 +28,7 @@ spec: runAsGroup: 2000 fsGroup: 2000 containers: - - image: jeroenwillemsen/wrongsecrets:1.9.2-no-vault + - image: jeroenwillemsen/wrongsecrets:1.10.2-no-vault name: secret-challenge imagePullPolicy: IfNotPresent securityContext: diff --git a/package-lock.json b/package-lock.json index 9f4308177..247a68954 100644 --- a/package-lock.json +++ b/package-lock.json @@ -87,10 +87,11 @@ } }, "node_modules/@babel/eslint-parser": { - "version": "7.25.9", - "resolved": "https://registry.npmjs.org/@babel/eslint-parser/-/eslint-parser-7.25.9.tgz", - "integrity": "sha512-5UXfgpK0j0Xr/xIdgdLEhOFxaDZ0bRPWJJchRpqOSur/3rZoPbqqki5mm0p4NE2cs28krBEiSM2MB7//afRSQQ==", + "version": "7.26.5", + "resolved": "https://registry.npmjs.org/@babel/eslint-parser/-/eslint-parser-7.26.5.tgz", + "integrity": "sha512-Kkm8C8uxI842AwQADxl0GbcG1rupELYLShazYEZO/2DYjhyWXJIOUVOE3tBYm6JXzUCNJOZEzqc4rCW/jsEQYQ==", "dev": true, + "license": "MIT", "dependencies": { "@nicolo-ribaudo/eslint-scope-5-internals": "5.1.1-v1", "eslint-visitor-keys": "^2.1.0", @@ -1514,9 +1515,9 @@ } }, "node_modules/@commitlint/config-conventional": { - "version": "19.5.0", - "resolved": "https://registry.npmjs.org/@commitlint/config-conventional/-/config-conventional-19.5.0.tgz", - "integrity": "sha512-OBhdtJyHNPryZKg0fFpZNOBM1ZDbntMvqMuSmpfyP86XSfwzGw4CaoYRG4RutUPg0BTK07VMRIkNJT6wi2zthg==", + "version": "19.6.0", + "resolved": "https://registry.npmjs.org/@commitlint/config-conventional/-/config-conventional-19.6.0.tgz", + "integrity": "sha512-DJT40iMnTYtBtUfw9ApbsLZFke1zKh6llITVJ+x9mtpHD08gsNXaIRqHTmwTZL3dNX5+WoyK7pCN/5zswvkBCQ==", "dev": true, "license": "MIT", "dependencies": { @@ -1594,13 +1595,13 @@ } }, "node_modules/@eslint/config-array": { - "version": "0.18.0", - "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.18.0.tgz", - "integrity": "sha512-fTxvnS1sRMu3+JjXwJG0j/i4RT9u4qJ+lqS/yCGap4lH4zZGzQ7tu+xZqQmcMZq5OBZDL4QRxQzRjkWcGt8IVw==", + "version": "0.19.1", + "resolved": "https://registry.npmjs.org/@eslint/config-array/-/config-array-0.19.1.tgz", + "integrity": "sha512-fo6Mtm5mWyKjA/Chy1BYTdn5mGJoDNjC7C64ug20ADsRDGrA85bN3uK3MaKbeRkRuuIEAR5N33Jr1pbm411/PA==", "dev": true, "license": "Apache-2.0", "dependencies": { - "@eslint/object-schema": "^2.1.4", + "@eslint/object-schema": "^2.1.5", "debug": "^4.3.1", "minimatch": "^3.1.2" }, @@ -1609,11 +1610,14 @@ } }, "node_modules/@eslint/core": { - "version": "0.7.0", - "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.7.0.tgz", - "integrity": "sha512-xp5Jirz5DyPYlPiKat8jaq0EmYvDXKKpzTbxXMpT9eqlRJkRKIz9AGMdlvYjih+im+QlhWrpvVjl8IPC/lHlUw==", + "version": "0.10.0", + "resolved": "https://registry.npmjs.org/@eslint/core/-/core-0.10.0.tgz", + "integrity": "sha512-gFHJ+xBOo4G3WRlR1e/3G8A6/KZAH6zcE/hkLRCZTi/B9avAG365QhFA8uOGzTMqgTghpn7/fSnscW++dpMSAw==", "dev": true, "license": "Apache-2.0", + "dependencies": { + "@types/json-schema": "^7.0.15" + }, "engines": { "node": "^18.18.0 || ^20.9.0 || >=21.1.0" } @@ -1656,9 +1660,9 @@ } }, "node_modules/@eslint/js": { - "version": "9.14.0", - "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.14.0.tgz", - "integrity": "sha512-pFoEtFWCPyDOl+C6Ift+wC7Ro89otjigCf5vcuWqWgqNSQbRrpjSvdeE6ofLz4dHmyxD5f7gIdGT4+p36L6Twg==", + "version": "9.18.0", + "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.18.0.tgz", + "integrity": "sha512-fK6L7rxcq6/z+AaQMtiFTkvbHkBLNlwyRxHpKawP0x3u9+NC6MQTnFW+AdpwC6gfHTW0051cokQgtTN2FqlxQA==", "dev": true, "license": "MIT", "engines": { @@ -1666,9 +1670,9 @@ } }, "node_modules/@eslint/object-schema": { - "version": "2.1.4", - "resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-2.1.4.tgz", - "integrity": "sha512-BsWiH1yFGjXXS2yvrf5LyuoSIIbPrGUWob917o+BTKuZ7qJdxX8aJLRxs1fS9n6r7vESrq1OUqb68dANcFXuQQ==", + "version": "2.1.5", + "resolved": "https://registry.npmjs.org/@eslint/object-schema/-/object-schema-2.1.5.tgz", + "integrity": "sha512-o0bhxnL89h5Bae5T318nFoFzGy+YE5i/gGkoPAgkmTVdRKTiv3p8JHevPiPaMwoloKfEiiaHlawCqaZMqRm+XQ==", "dev": true, "license": "Apache-2.0", "engines": { @@ -1676,12 +1680,13 @@ } }, "node_modules/@eslint/plugin-kit": { - "version": "0.2.1", - "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.2.1.tgz", - "integrity": "sha512-HFZ4Mp26nbWk9d/BpvP0YNL6W4UoZF0VFcTw/aPPA8RpOxeFQgK+ClABGgAUXs9Y/RGX/l1vOmrqz1MQt9MNuw==", + "version": "0.2.5", + "resolved": "https://registry.npmjs.org/@eslint/plugin-kit/-/plugin-kit-0.2.5.tgz", + "integrity": "sha512-lB05FkqEdUg2AA0xEbUz0SnkXT1LcCTa438W4IWTUh4hdOnVbQyOJ81OrDXsJk/LSiJHubgGEFoR5EHq1NsH1A==", "dev": true, "license": "Apache-2.0", "dependencies": { + "@eslint/core": "^0.10.0", "levn": "^0.4.1" }, "engines": { @@ -2122,9 +2127,9 @@ } }, "node_modules/cross-spawn": { - "version": "7.0.3", - "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.3.tgz", - "integrity": "sha512-iRDPJKUPVEND7dHPO8rkbOnPpyDygcDFtWjpeWNCgy8WP2rXcxXL8TskReQl6OrB2G7+UJrags1q15Fudc7G6w==", + "version": "7.0.6", + "resolved": "https://registry.npmjs.org/cross-spawn/-/cross-spawn-7.0.6.tgz", + "integrity": "sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==", "dev": true, "license": "MIT", "dependencies": { @@ -2205,27 +2210,27 @@ } }, "node_modules/eslint": { - "version": "9.14.0", - "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.14.0.tgz", - "integrity": "sha512-c2FHsVBr87lnUtjP4Yhvk4yEhKrQavGafRA/Se1ouse8PfbfC/Qh9Mxa00yWsZRlqeUB9raXip0aiiUZkgnr9g==", + "version": "9.18.0", + "resolved": "https://registry.npmjs.org/eslint/-/eslint-9.18.0.tgz", + "integrity": "sha512-+waTfRWQlSbpt3KWE+CjrPPYnbq9kfZIYUqapc0uBXyjTp8aYXZDsUH16m39Ryq3NjAVP4tjuF7KaukeqoCoaA==", "dev": true, "license": "MIT", "dependencies": { "@eslint-community/eslint-utils": "^4.2.0", "@eslint-community/regexpp": "^4.12.1", - "@eslint/config-array": "^0.18.0", - "@eslint/core": "^0.7.0", - "@eslint/eslintrc": "^3.1.0", - "@eslint/js": "9.14.0", - "@eslint/plugin-kit": "^0.2.0", + "@eslint/config-array": "^0.19.0", + "@eslint/core": "^0.10.0", + "@eslint/eslintrc": "^3.2.0", + "@eslint/js": "9.18.0", + "@eslint/plugin-kit": "^0.2.5", "@humanfs/node": "^0.16.6", "@humanwhocodes/module-importer": "^1.0.1", - "@humanwhocodes/retry": "^0.4.0", + "@humanwhocodes/retry": "^0.4.1", "@types/estree": "^1.0.6", "@types/json-schema": "^7.0.15", "ajv": "^6.12.4", "chalk": "^4.0.0", - "cross-spawn": "^7.0.2", + "cross-spawn": "^7.0.6", "debug": "^4.3.2", "escape-string-regexp": "^4.0.0", "eslint-scope": "^8.2.0", @@ -2244,8 +2249,7 @@ "lodash.merge": "^4.6.2", "minimatch": "^3.1.2", "natural-compare": "^1.4.0", - "optionator": "^0.9.3", - "text-table": "^0.2.0" + "optionator": "^0.9.3" }, "bin": { "eslint": "bin/eslint.js" @@ -2625,9 +2629,9 @@ } }, "node_modules/globals": { - "version": "15.12.0", - "resolved": "https://registry.npmjs.org/globals/-/globals-15.12.0.tgz", - "integrity": "sha512-1+gLErljJFhbOVyaetcwJiJ4+eLe45S2E7P5UiZ9xGfeq3ATQf5DOv9G7MH3gGbKQLkzmNh2DxfZwLdw+j6oTQ==", + "version": "15.14.0", + "resolved": "https://registry.npmjs.org/globals/-/globals-15.14.0.tgz", + "integrity": "sha512-OkToC372DtlQeje9/zHIo5CT8lRP/FUgEOKBEhU4e0abL7J7CD24fD9ohiLN5hagG/kWCYj4K5oaxxtj2Z0Dig==", "dev": true, "license": "MIT", "engines": { @@ -3215,13 +3219,6 @@ "url": "https://github.com/sponsors/ljharb" } }, - "node_modules/text-table": { - "version": "0.2.0", - "resolved": "https://registry.npmjs.org/text-table/-/text-table-0.2.0.tgz", - "integrity": "sha512-N+8UisAXDGk8PFXP4HAzVR9nbfmVJ3zYLAWiTIoqC5v5isinhr+r5uaO8+7r3BMfuNIufIsA7RdpVgacC2cSpw==", - "dev": true, - "license": "MIT" - }, "node_modules/type-check": { "version": "0.4.0", "resolved": "https://registry.npmjs.org/type-check/-/type-check-0.4.0.tgz", diff --git a/pom.xml b/pom.xml index d8f93a01f..282f80b08 100644 --- a/pom.xml +++ b/pom.xml @@ -11,7 +11,7 @@ org.owasp wrongsecrets - 1.9.2-SNAPSHOT + 1.10.2-SNAPSHOT OWASP WrongSecrets Examples with how to not use secrets @@ -43,16 +43,16 @@ - 2.2.2 + 2.2.3 3.1.1 3.0.0 - 2.29.15 + 2.30.4 5.3.3 - 5.18.0 + 5.19.0 9.1.0 - 2.1.0 - 11.1.0 - 4.10.2 + 2.1.8 + 11.1.1 + 4.12.2 3.13.1 5.8.0 2.14.1 @@ -63,10 +63,10 @@ 3.13.0 full 23 - 2023.0.3 + 2023.0.5 6.2.3 2.1.7 - 3.1.2.RELEASE + 3.1.3.RELEASE 3.3.0 @@ -323,7 +323,7 @@ com.puppycrawl.tools checkstyle - 10.20.2 + 10.21.1 @@ -536,7 +536,7 @@ com.diffplug.spotless spotless-maven-plugin - 2.43.0 + 2.44.2 diff --git a/renovate.json b/renovate.json index 86c870091..9595b3d2d 100644 --- a/renovate.json +++ b/renovate.json @@ -28,9 +28,9 @@ { "customType": "regex", "fileMatch": ".github/workflows/pre-commit.yml", - "depNameTemplate": "aquasecurity/tfsec", + "depNameTemplate": "aquasecurity/trivy", "matchStrings": [ - "TFSEC_VERSION=\"(?.*?)\"" + "TRIVY_VERSION=\"(?.*?)\"" ], "datasourceTemplate": "github-releases" }, diff --git a/scripts/apply-and-portforward.sh b/scripts/apply-and-portforward.sh index 3ebac4a78..7344c3683 100644 --- a/scripts/apply-and-portforward.sh +++ b/scripts/apply-and-portforward.sh @@ -1,3 +1,4 @@ +#!/usr/bin/env bash kubectl apply -f./k8s/secret-challenge-vault-deployment.yml while [[ $(kubectl get pods -l app=secret-challenge -o 'jsonpath={..status.conditions[?(@.type=="Ready")].status}') != "True" ]]; do echo "waiting for secret-challenge" && sleep 2; done #kubectl expose deployment secret-challenge --type=LoadBalancer --port=8080 diff --git a/scripts/check-available-commands.sh b/scripts/check-available-commands.sh index d70477f88..6b4a40bb2 100644 --- a/scripts/check-available-commands.sh +++ b/scripts/check-available-commands.sh @@ -1,3 +1,4 @@ +#!/usr/bin/env bash function checkCommandsAvailable() { for var in "$@" do diff --git a/scripts/install-consul.sh b/scripts/install-consul.sh index 952953567..f0f56d67f 100644 --- a/scripts/install-consul.sh +++ b/scripts/install-consul.sh @@ -1,3 +1,4 @@ +#!/usr/bin/env bash helm list | grep 'consul' &>/dev/null if [ $? == 0 ]; then echo "Consul is already installed" diff --git a/scripts/install-vault.sh b/scripts/install-vault.sh index 3083958e6..6a22364c4 100644 --- a/scripts/install-vault.sh +++ b/scripts/install-vault.sh @@ -1,3 +1,4 @@ +#!/usr/bin/env bash helm list | grep 'vault' &>/dev/null if [ $? == 0 ]; then echo "Vault is already installed" diff --git a/scripts/sort_contibutors/Pipfile b/scripts/sort_contibutors/Pipfile index f59e539f0..0757494bb 100644 --- a/scripts/sort_contibutors/Pipfile +++ b/scripts/sort_contibutors/Pipfile @@ -4,7 +4,6 @@ verify_ssl = true name = "pypi" [packages] -requests = "*" [dev-packages] diff --git a/src/main/resources/challenges/challenge-51/Dockerfile_challenge51 b/src/main/resources/challenges/challenge-51/Dockerfile_challenge51 index ec6037cc2..ae9b2d668 100644 --- a/src/main/resources/challenges/challenge-51/Dockerfile_challenge51 +++ b/src/main/resources/challenges/challenge-51/Dockerfile_challenge51 @@ -1,4 +1,4 @@ -# syntax=docker/dockerfile:1.11 +# syntax=docker/dockerfile:1.12 FROM debian:stable-slim RUN --mount=type=secret,id=db_user \ diff --git a/src/main/resources/templates/about.html b/src/main/resources/templates/about.html index c4e488209..fe09f0433 100644 --- a/src/main/resources/templates/about.html +++ b/src/main/resources/templates/about.html @@ -24,7 +24,7 @@

If you like WrongSecrets and its mission, please consider supporting OWASP in our name!

-

Copyright (c) 2020-2024 Jeroen Willemsen and WrongSecrets contributors.

+

Copyright (c) 2020-2025 Jeroen Willemsen and WrongSecrets contributors.

Licensed under AGPLv3

@@ -35,22 +35,22 @@ The list below is generated with `mvn license:add-third-party`
    -
  • Lists of 361 third-party dependencies.
    • -
  • (Eclipse Public License - v 1.0) (GNU Lesser General Public License) Logback Classic Module (ch.qos.logback:logback-classic:1.5.8 - http://logback.qos.ch/logback-classic)
    • -
  • (Eclipse Public License - v 1.0) (GNU Lesser General Public License) Logback Core Module (ch.qos.logback:logback-core:1.5.8 - http://logback.qos.ch/logback-core)
    • -
  • (The MIT License (MIT)) Microsoft Azure Java Core Library (com.azure:azure-core:1.51.0 - https://github.com/Azure/azure-sdk-for-java)
    • -
  • (The MIT License (MIT)) Microsoft Azure Java Core AMQP Library (com.azure:azure-core-amqp:2.9.8 - https://github.com/Azure/azure-sdk-for-java)
    • -
  • (The MIT License (MIT)) Microsoft Azure Netty HTTP Client Library (com.azure:azure-core-http-netty:1.15.3 - https://github.com/Azure/azure-sdk-for-java)
    • -
  • (The MIT License (MIT)) Microsoft Azure Management Java Core Library (com.azure:azure-core-management:1.15.2 - https://github.com/Azure/azure-sdk-for-java)
    • -
  • (The MIT License (MIT)) Microsoft Azure client library for Identity (com.azure:azure-identity:1.13.2 - https://github.com/Azure/azure-sdk-for-java)
    • -
  • (The MIT License (MIT)) Microsoft Azure Java JSON Library (com.azure:azure-json:1.2.0 - https://github.com/Azure/azure-sdk-for-java)
    • -
  • (The MIT License (MIT)) Microsoft Azure client library for KeyVault Secrets (com.azure:azure-security-keyvault-secrets:4.8.6 - https://github.com/Azure/azure-sdk-for-java)
    • +
  • Lists of 357 third-party dependencies.
    • +
  • (Eclipse Public License - v 1.0) (GNU Lesser General Public License) Logback Classic Module (ch.qos.logback:logback-classic:1.5.11 - http://logback.qos.ch/logback-classic)
    • +
  • (Eclipse Public License - v 1.0) (GNU Lesser General Public License) Logback Core Module (ch.qos.logback:logback-core:1.5.11 - http://logback.qos.ch/logback-core)
    • +
  • (The MIT License (MIT)) Microsoft Azure Java Core Library (com.azure:azure-core:1.54.1 - https://github.com/Azure/azure-sdk-for-java)
    • +
  • (The MIT License (MIT)) Microsoft Azure Java Core AMQP Library (com.azure:azure-core-amqp:2.9.12 - https://github.com/Azure/azure-sdk-for-java)
    • +
  • (The MIT License (MIT)) Microsoft Azure Netty HTTP Client Library (com.azure:azure-core-http-netty:1.15.7 - https://github.com/Azure/azure-sdk-for-java)
    • +
  • (The MIT License (MIT)) Microsoft Azure Management Java Core Library (com.azure:azure-core-management:1.15.6 - https://github.com/Azure/azure-sdk-for-java)
    • +
  • (The MIT License (MIT)) Microsoft Azure client library for Identity (com.azure:azure-identity:1.14.2 - https://github.com/Azure/azure-sdk-for-java)
    • +
  • (The MIT License (MIT)) Microsoft Azure Java JSON Library (com.azure:azure-json:1.3.0 - https://github.com/Azure/azure-sdk-for-java)
    • +
  • (The MIT License (MIT)) Microsoft Azure client library for KeyVault Secrets (com.azure:azure-security-keyvault-secrets:4.9.1 - https://github.com/Azure/azure-sdk-for-java)
  • (The MIT License (MIT)) Microsoft Azure Java XML Library (com.azure:azure-xml:1.1.0 - https://github.com/Azure/azure-sdk-for-java)
    • -
  • (The MIT License (MIT)) Spring Cloud Azure AutoConfigure (com.azure.spring:spring-cloud-azure-autoconfigure:5.16.0 - https://microsoft.github.io/spring-cloud-azure)
    • -
  • (The MIT License (MIT)) Spring Cloud Azure Core (com.azure.spring:spring-cloud-azure-core:5.16.0 - https://microsoft.github.io/spring-cloud-azure)
    • -
  • (The MIT License (MIT)) Spring Cloud Azure Service (com.azure.spring:spring-cloud-azure-service:5.16.0 - https://microsoft.github.io/spring-cloud-azure)
    • -
  • (The MIT License (MIT)) Spring Cloud Azure Starter (com.azure.spring:spring-cloud-azure-starter:5.16.0 - https://microsoft.github.io/spring-cloud-azure)
    • -
  • (The MIT License (MIT)) Spring Cloud Azure Starter Key Vault Secrets (com.azure.spring:spring-cloud-azure-starter-keyvault-secrets:5.16.0 - https://microsoft.github.io/spring-cloud-azure)
    • +
  • (The MIT License (MIT)) Spring Cloud Azure AutoConfigure (com.azure.spring:spring-cloud-azure-autoconfigure:5.19.0 - https://microsoft.github.io/spring-cloud-azure)
    • +
  • (The MIT License (MIT)) Spring Cloud Azure Core (com.azure.spring:spring-cloud-azure-core:5.19.0 - https://microsoft.github.io/spring-cloud-azure)
    • +
  • (The MIT License (MIT)) Spring Cloud Azure Service (com.azure.spring:spring-cloud-azure-service:5.19.0 - https://microsoft.github.io/spring-cloud-azure)
    • +
  • (The MIT License (MIT)) Spring Cloud Azure Starter (com.azure.spring:spring-cloud-azure-starter:5.19.0 - https://microsoft.github.io/spring-cloud-azure)
    • +
  • (The MIT License (MIT)) Spring Cloud Azure Starter Key Vault Secrets (com.azure.spring:spring-cloud-azure-starter-keyvault-secrets:5.19.0 - https://microsoft.github.io/spring-cloud-azure)
  • (The Apache Software License, Version 2.0) Simple XML (safe) (com.carrotsearch.thirdparty:simple-xml-safe:2.7.1 - https://github.com/dweiss/simplexml)
  • (3-Clause BSD License) MinLog (com.esotericsoftware:minlog:1.3.1 - https://github.com/EsotericSoftware/minlog)
  • (Apache License, Version 2.0) Internet Time Utility (com.ethlo.time:itu:1.10.2 - https://github.com/ethlo/itu)
    • @@ -80,23 +80,23 @@
  • (Apache License 2.0) compiler (com.github.spullara.mustache.java:compiler:0.9.6 - http://github.com/spullara/mustache.java)
  • (Apache License, Version 2.0) JCIP Annotations under Apache License (com.github.stephenc.jcip:jcip-annotations:1.0-1 - http://stephenc.github.com/jcip-annotations)
  • (Apache 2.0) Google Android Annotations Library (com.google.android:annotations:4.1.1.4 - http://source.android.com/)
    • -
  • (BSD-3-Clause) API Common (com.google.api:api-common:2.37.1 - https://github.com/googleapis/sdk-platform-java)
    • -
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (Core) (com.google.api:gax:2.54.1 - https://github.com/googleapis/sdk-platform-java)
    • -
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (gRPC) (com.google.api:gax-grpc:2.54.1 - https://github.com/googleapis/sdk-platform-java)
    • -
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (HTTP JSON) (com.google.api:gax-httpjson:2.54.1 - https://github.com/googleapis/sdk-platform-java)
    • -
  • (Apache-2.0) proto-google-cloud-secretmanager-v1 (com.google.api.grpc:proto-google-cloud-secretmanager-v1:2.51.0 - https://github.com/googleapis/google-cloud-java)
    • -
  • (Apache-2.0) proto-google-cloud-secretmanager-v1beta2 (com.google.api.grpc:proto-google-cloud-secretmanager-v1beta2:2.51.0 - https://github.com/googleapis/google-cloud-java)
    • -
  • (Apache-2.0) proto-google-common-protos (com.google.api.grpc:proto-google-common-protos:2.45.1 - https://github.com/googleapis/sdk-platform-java)
    • -
  • (Apache-2.0) proto-google-iam-v1 (com.google.api.grpc:proto-google-iam-v1:1.40.1 - https://github.com/googleapis/sdk-platform-java)
    • -
  • (BSD New license) Google Auth Library for Java - Credentials (com.google.auth:google-auth-library-credentials:1.27.0 - https://github.com/googleapis/google-auth-library-java/google-auth-library-credentials)
    • -
  • (BSD New license) Google Auth Library for Java - OAuth2 HTTP (com.google.auth:google-auth-library-oauth2-http:1.27.0 - https://github.com/googleapis/google-auth-library-java/google-auth-library-oauth2-http)
    • +
  • (BSD-3-Clause) API Common (com.google.api:api-common:2.38.0 - https://github.com/googleapis/sdk-platform-java)
    • +
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (Core) (com.google.api:gax:2.55.0 - https://github.com/googleapis/sdk-platform-java)
    • +
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (gRPC) (com.google.api:gax-grpc:2.55.0 - https://github.com/googleapis/sdk-platform-java)
    • +
  • (BSD-3-Clause) GAX (Google Api eXtensions) for Java (HTTP JSON) (com.google.api:gax-httpjson:2.55.0 - https://github.com/googleapis/sdk-platform-java)
    • +
  • (Apache-2.0) proto-google-cloud-secretmanager-v1 (com.google.api.grpc:proto-google-cloud-secretmanager-v1:2.52.0 - https://github.com/googleapis/google-cloud-java)
    • +
  • (Apache-2.0) proto-google-cloud-secretmanager-v1beta2 (com.google.api.grpc:proto-google-cloud-secretmanager-v1beta2:2.52.0 - https://github.com/googleapis/google-cloud-java)
    • +
  • (Apache-2.0) proto-google-common-protos (com.google.api.grpc:proto-google-common-protos:2.46.0 - https://github.com/googleapis/sdk-platform-java)
    • +
  • (Apache-2.0) proto-google-iam-v1 (com.google.api.grpc:proto-google-iam-v1:1.41.0 - https://github.com/googleapis/sdk-platform-java)
    • +
  • (BSD New license) Google Auth Library for Java - Credentials (com.google.auth:google-auth-library-credentials:1.28.0 - https://github.com/googleapis/google-auth-library-java/google-auth-library-credentials)
    • +
  • (BSD New license) Google Auth Library for Java - OAuth2 HTTP (com.google.auth:google-auth-library-oauth2-http:1.28.0 - https://github.com/googleapis/google-auth-library-java/google-auth-library-oauth2-http)
  • (Apache 2.0) AutoValue Annotations (com.google.auto.value:auto-value-annotations:1.11.0 - https://github.com/google/auto/tree/main/value)
    • -
  • (Apache-2.0) Google Cloud Secret Manager (com.google.cloud:google-cloud-secretmanager:2.51.0 - https://github.com/googleapis/google-cloud-java)
    • +
  • (Apache-2.0) Google Cloud Secret Manager (com.google.cloud:google-cloud-secretmanager:2.52.0 - https://github.com/googleapis/google-cloud-java)
  • (The Apache Software License, Version 2.0) FindBugs-jsr305 (com.google.code.findbugs:jsr305:3.0.2 - http://findbugs.sourceforge.net/)
  • (Apache-2.0) Gson (com.google.code.gson:gson:2.10.1 - https://github.com/google/gson/gson)
    • -
  • (Apache 2.0) error-prone annotations (com.google.errorprone:error_prone_annotations:2.32.0 - https://errorprone.info/error_prone_annotations)
    • +
  • (Apache 2.0) error-prone annotations (com.google.errorprone:error_prone_annotations:2.33.0 - https://errorprone.info/error_prone_annotations)
  • (The Apache Software License, Version 2.0) Guava InternalFutureFailureAccess and InternalFutures (com.google.guava:failureaccess:1.0.2 - https://github.com/google/guava/failureaccess)
    • -
  • (Apache License, Version 2.0) Guava: Google Core Libraries for Java (com.google.guava:guava:33.3.0-jre - https://github.com/google/guava)
    • +
  • (Apache License, Version 2.0) Guava: Google Core Libraries for Java (com.google.guava:guava:33.3.1-jre - https://github.com/google/guava)
  • (The Apache Software License, Version 2.0) Guava ListenableFuture only (com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava - https://github.com/google/guava/listenablefuture)
  • (The Apache Software License, Version 2.0) Google HTTP Client Library for Java (com.google.http-client:google-http-client:1.45.0 - https://github.com/googleapis/google-http-java-client/google-http-client)
  • (The Apache Software License, Version 2.0) GSON extensions to the Google HTTP Client Library for Java. (com.google.http-client:google-http-client-gson:1.45.0 - https://github.com/googleapis/google-http-java-client/google-http-client-gson)
    • @@ -110,15 +110,15 @@
  • (The Apache Software License, Version 2.0) backport9 (com.headius:backport9:1.13 - http://nexus.sonatype.org/oss-repository-hosting.html/backport9)
  • (The Apache Software License, Version 2.0) invokebinder (com.headius:invokebinder:1.13 - http://maven.apache.org)
  • (The Apache Software License, Version 2.0) options (com.headius:options:1.6 - https://github.com/headius/options)
    • -
  • (MIT License) msal4j (com.microsoft.azure:msal4j:1.16.2 - https://github.com/AzureAD/microsoft-authentication-library-for-java)
    • +
  • (MIT License) msal4j (com.microsoft.azure:msal4j:1.17.2 - https://github.com/AzureAD/microsoft-authentication-library-for-java)
  • (MIT License) msal4j-persistence-extension (com.microsoft.azure:msal4j-persistence-extension:1.3.0 - https://github.com/AzureAD/microsoft-authentication-library-for-java)
  • (The MIT License (MIT)) Extensions on Apache Proton-J library (com.microsoft.azure:qpid-proton-j-extensions:1.2.5 - https://github.com/Azure/qpid-proton-j-extensions)
  • (The MIT License) toml4j (com.moandjiezana.toml:toml4j:0.7.2 - http://moandjiezana.com/toml/toml4j)
    • -
  • (Apache License Version 2.0) JsonSchemaValidator (com.networknt:json-schema-validator:1.5.1 - https://github.com/networknt/json-schema-validator)
    • +
  • (Apache License Version 2.0) JsonSchemaValidator (com.networknt:json-schema-validator:1.5.2 - https://github.com/networknt/json-schema-validator)
  • (The Apache Software License, Version 2.0) Nimbus Content Type (com.nimbusds:content-type:2.3 - https://bitbucket.org/connect2id/nimbus-content-type)
  • (The Apache Software License, Version 2.0) Nimbus LangTag (com.nimbusds:lang-tag:1.7 - https://bitbucket.org/connect2id/nimbus-language-tags)
    • -
  • (The Apache Software License, Version 2.0) Nimbus JOSE+JWT (com.nimbusds:nimbus-jose-jwt:9.37.3 - https://bitbucket.org/connect2id/nimbus-jose-jwt)
    • -
  • (Apache License, version 2.0) OAuth 2.0 SDK with OpenID Connect extensions (com.nimbusds:oauth2-oidc-sdk:11.9.1 - https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions)
    • +
  • (The Apache Software License, Version 2.0) Nimbus JOSE+JWT (com.nimbusds:nimbus-jose-jwt:9.40 - https://bitbucket.org/connect2id/nimbus-jose-jwt)
    • +
  • (Apache License, version 2.0) OAuth 2.0 SDK with OpenID Connect extensions (com.nimbusds:oauth2-oidc-sdk:11.18 - https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions)
  • (The (New) BSD License) jmustache (com.samskivert:jmustache:1.16 - http://github.com/samskivert/jmustache)
  • (Eclipse Distribution License - v 1.0) Old JAXB Core (com.sun.xml.bind:jaxb-core:4.0.5 - https://eclipse-ee4j.github.io/jaxb-ri/)
  • (Eclipse Distribution License - v 1.0) Old JAXB Runtime (com.sun.xml.bind:jaxb-impl:4.0.5 - https://eclipse-ee4j.github.io/jaxb-ri/)
    • @@ -127,57 +127,57 @@
  • (Apache-2.0) Apache Commons Codec (commons-codec:commons-codec:1.16.1 - https://commons.apache.org/proper/commons-codec/)
  • (Apache License, Version 2.0) Apache Commons Collections (commons-collections:commons-collections:3.2.2 - http://commons.apache.org/collections/)
  • (The Apache Software License, Version 2.0) Commons Digester (commons-digester:commons-digester:2.1 - http://commons.apache.org/digester/)
    • -
  • (Apache-2.0) Apache Commons IO (commons-io:commons-io:2.16.1 - https://commons.apache.org/proper/commons-io/)
    • +
  • (Apache-2.0) Apache Commons IO (commons-io:commons-io:2.17.0 - https://commons.apache.org/proper/commons-io/)
  • (Apache-2.0) Apache Commons Logging (commons-logging:commons-logging:1.3.2 - https://commons.apache.org/proper/commons-logging/)
  • (Apache-2.0) Apache Commons Validator (commons-validator:commons-validator:1.9.0 - http://commons.apache.org/proper/commons-validator/)
  • (The Apache License, Version 2.0) jcs3-slf4j (io.github.jeremylong:jcs3-slf4j:1.0.5 - https://github.com/jeremylong/jcs3-slf4j/)
    • -
  • (The Apache License, Version 2.0) open-vulnerability-clients (io.github.jeremylong:open-vulnerability-clients:6.1.2 - https://github.com/jeremylong/vuln-tools/)
    • -
  • (Apache 2.0) io.grpc:grpc-alts (io.grpc:grpc-alts:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-api (io.grpc:grpc-api:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-auth (io.grpc:grpc-auth:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-context (io.grpc:grpc-context:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-core (io.grpc:grpc-core:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-googleapis (io.grpc:grpc-googleapis:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-grpclb (io.grpc:grpc-grpclb:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-inprocess (io.grpc:grpc-inprocess:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-netty-shaded (io.grpc:grpc-netty-shaded:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-protobuf (io.grpc:grpc-protobuf:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-protobuf-lite (io.grpc:grpc-protobuf-lite:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-services (io.grpc:grpc-services:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-stub (io.grpc:grpc-stub:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-util (io.grpc:grpc-util:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (Apache 2.0) io.grpc:grpc-xds (io.grpc:grpc-xds:1.68.0 - https://github.com/grpc/grpc-java)
    • -
  • (The Apache Software License, Version 2.0) micrometer-commons (io.micrometer:micrometer-commons:1.13.4 - https://github.com/micrometer-metrics/micrometer)
    • -
  • (The Apache Software License, Version 2.0) micrometer-core (io.micrometer:micrometer-core:1.13.4 - https://github.com/micrometer-metrics/micrometer)
    • -
  • (The Apache Software License, Version 2.0) micrometer-jakarta9 (io.micrometer:micrometer-jakarta9:1.13.4 - https://github.com/micrometer-metrics/micrometer)
    • -
  • (The Apache Software License, Version 2.0) micrometer-observation (io.micrometer:micrometer-observation:1.13.4 - https://github.com/micrometer-metrics/micrometer)
    • -
  • (Apache License, Version 2.0) Netty/Buffer (io.netty:netty-buffer:4.1.113.Final - https://netty.io/netty-buffer/)
    • -
  • (Apache License, Version 2.0) Netty/Codec (io.netty:netty-codec:4.1.113.Final - https://netty.io/netty-codec/)
    • -
  • (Apache License, Version 2.0) Netty/Codec/DNS (io.netty:netty-codec-dns:4.1.113.Final - https://netty.io/netty-codec-dns/)
    • -
  • (Apache License, Version 2.0) Netty/Codec/HTTP (io.netty:netty-codec-http:4.1.113.Final - https://netty.io/netty-codec-http/)
    • -
  • (Apache License, Version 2.0) Netty/Codec/HTTP2 (io.netty:netty-codec-http2:4.1.113.Final - https://netty.io/netty-codec-http2/)
    • -
  • (Apache License, Version 2.0) Netty/Codec/Socks (io.netty:netty-codec-socks:4.1.113.Final - https://netty.io/netty-codec-socks/)
    • -
  • (Apache License, Version 2.0) Netty/Common (io.netty:netty-common:4.1.113.Final - https://netty.io/netty-common/)
    • -
  • (Apache License, Version 2.0) Netty/Handler (io.netty:netty-handler:4.1.113.Final - https://netty.io/netty-handler/)
    • -
  • (Apache License, Version 2.0) Netty/Handler/Proxy (io.netty:netty-handler-proxy:4.1.113.Final - https://netty.io/netty-handler-proxy/)
    • -
  • (Apache License, Version 2.0) Netty/Resolver (io.netty:netty-resolver:4.1.113.Final - https://netty.io/netty-resolver/)
    • -
  • (Apache License, Version 2.0) Netty/Resolver/DNS (io.netty:netty-resolver-dns:4.1.113.Final - https://netty.io/netty-resolver-dns/)
    • -
  • (Apache License, Version 2.0) Netty/Resolver/DNS/Classes/MacOS (io.netty:netty-resolver-dns-classes-macos:4.1.113.Final - https://netty.io/netty-resolver-dns-classes-macos/)
    • -
  • (Apache License, Version 2.0) Netty/Resolver/DNS/Native/MacOS (io.netty:netty-resolver-dns-native-macos:4.1.113.Final - https://netty.io/netty-resolver-dns-native-macos/)
    • +
  • (The Apache License, Version 2.0) open-vulnerability-clients (io.github.jeremylong:open-vulnerability-clients:7.0.1 - https://github.com/jeremylong/vuln-tools/)
    • +
  • (Apache 2.0) io.grpc:grpc-alts (io.grpc:grpc-alts:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-api (io.grpc:grpc-api:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-auth (io.grpc:grpc-auth:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-context (io.grpc:grpc-context:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-core (io.grpc:grpc-core:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-googleapis (io.grpc:grpc-googleapis:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-grpclb (io.grpc:grpc-grpclb:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-inprocess (io.grpc:grpc-inprocess:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-netty-shaded (io.grpc:grpc-netty-shaded:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-protobuf (io.grpc:grpc-protobuf:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-protobuf-lite (io.grpc:grpc-protobuf-lite:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-services (io.grpc:grpc-services:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-stub (io.grpc:grpc-stub:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-util (io.grpc:grpc-util:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (Apache 2.0) io.grpc:grpc-xds (io.grpc:grpc-xds:1.67.1 - https://github.com/grpc/grpc-java)
    • +
  • (The Apache Software License, Version 2.0) micrometer-commons (io.micrometer:micrometer-commons:1.13.6 - https://github.com/micrometer-metrics/micrometer)
    • +
  • (The Apache Software License, Version 2.0) micrometer-core (io.micrometer:micrometer-core:1.13.6 - https://github.com/micrometer-metrics/micrometer)
    • +
  • (The Apache Software License, Version 2.0) micrometer-jakarta9 (io.micrometer:micrometer-jakarta9:1.13.6 - https://github.com/micrometer-metrics/micrometer)
    • +
  • (The Apache Software License, Version 2.0) micrometer-observation (io.micrometer:micrometer-observation:1.13.6 - https://github.com/micrometer-metrics/micrometer)
    • +
  • (Apache License, Version 2.0) Netty/Buffer (io.netty:netty-buffer:4.1.114.Final - https://netty.io/netty-buffer/)
    • +
  • (Apache License, Version 2.0) Netty/Codec (io.netty:netty-codec:4.1.114.Final - https://netty.io/netty-codec/)
    • +
  • (Apache License, Version 2.0) Netty/Codec/DNS (io.netty:netty-codec-dns:4.1.114.Final - https://netty.io/netty-codec-dns/)
    • +
  • (Apache License, Version 2.0) Netty/Codec/HTTP (io.netty:netty-codec-http:4.1.114.Final - https://netty.io/netty-codec-http/)
    • +
  • (Apache License, Version 2.0) Netty/Codec/HTTP2 (io.netty:netty-codec-http2:4.1.114.Final - https://netty.io/netty-codec-http2/)
    • +
  • (Apache License, Version 2.0) Netty/Codec/Socks (io.netty:netty-codec-socks:4.1.114.Final - https://netty.io/netty-codec-socks/)
    • +
  • (Apache License, Version 2.0) Netty/Common (io.netty:netty-common:4.1.114.Final - https://netty.io/netty-common/)
    • +
  • (Apache License, Version 2.0) Netty/Handler (io.netty:netty-handler:4.1.114.Final - https://netty.io/netty-handler/)
    • +
  • (Apache License, Version 2.0) Netty/Handler/Proxy (io.netty:netty-handler-proxy:4.1.114.Final - https://netty.io/netty-handler-proxy/)
    • +
  • (Apache License, Version 2.0) Netty/Resolver (io.netty:netty-resolver:4.1.114.Final - https://netty.io/netty-resolver/)
    • +
  • (Apache License, Version 2.0) Netty/Resolver/DNS (io.netty:netty-resolver-dns:4.1.114.Final - https://netty.io/netty-resolver-dns/)
    • +
  • (Apache License, Version 2.0) Netty/Resolver/DNS/Classes/MacOS (io.netty:netty-resolver-dns-classes-macos:4.1.114.Final - https://netty.io/netty-resolver-dns-classes-macos/)
    • +
  • (Apache License, Version 2.0) Netty/Resolver/DNS/Native/MacOS (io.netty:netty-resolver-dns-native-macos:4.1.114.Final - https://netty.io/netty-resolver-dns-native-macos/)
  • (The Apache Software License, Version 2.0) Netty/TomcatNative [BoringSSL - Static] (io.netty:netty-tcnative-boringssl-static:2.0.66.Final - https://github.com/netty/netty-tcnative/netty-tcnative-boringssl-static/)
  • (The Apache Software License, Version 2.0) Netty/TomcatNative [OpenSSL - Classes] (io.netty:netty-tcnative-classes:2.0.66.Final - https://github.com/netty/netty-tcnative/netty-tcnative-classes/)
    • -
  • (Apache License, Version 2.0) Netty/Transport (io.netty:netty-transport:4.1.113.Final - https://netty.io/netty-transport/)
    • -
  • (Apache License, Version 2.0) Netty/Transport/Classes/Epoll (io.netty:netty-transport-classes-epoll:4.1.113.Final - https://netty.io/netty-transport-classes-epoll/)
    • -
  • (Apache License, Version 2.0) Netty/Transport/Classes/KQueue (io.netty:netty-transport-classes-kqueue:4.1.113.Final - https://netty.io/netty-transport-classes-kqueue/)
    • -
  • (Apache License, Version 2.0) Netty/Transport/Native/Epoll (io.netty:netty-transport-native-epoll:4.1.113.Final - https://netty.io/netty-transport-native-epoll/)
    • -
  • (Apache License, Version 2.0) Netty/Transport/Native/KQueue (io.netty:netty-transport-native-kqueue:4.1.113.Final - https://netty.io/netty-transport-native-kqueue/)
    • -
  • (Apache License, Version 2.0) Netty/Transport/Native/Unix/Common (io.netty:netty-transport-native-unix-common:4.1.113.Final - https://netty.io/netty-transport-native-unix-common/)
    • +
  • (Apache License, Version 2.0) Netty/Transport (io.netty:netty-transport:4.1.114.Final - https://netty.io/netty-transport/)
    • +
  • (Apache License, Version 2.0) Netty/Transport/Classes/Epoll (io.netty:netty-transport-classes-epoll:4.1.114.Final - https://netty.io/netty-transport-classes-epoll/)
    • +
  • (Apache License, Version 2.0) Netty/Transport/Classes/KQueue (io.netty:netty-transport-classes-kqueue:4.1.114.Final - https://netty.io/netty-transport-classes-kqueue/)
    • +
  • (Apache License, Version 2.0) Netty/Transport/Native/Epoll (io.netty:netty-transport-native-epoll:4.1.114.Final - https://netty.io/netty-transport-native-epoll/)
    • +
  • (Apache License, Version 2.0) Netty/Transport/Native/KQueue (io.netty:netty-transport-native-kqueue:4.1.114.Final - https://netty.io/netty-transport-native-kqueue/)
    • +
  • (Apache License, Version 2.0) Netty/Transport/Native/Unix/Common (io.netty:netty-transport-native-unix-common:4.1.114.Final - https://netty.io/netty-transport-native-unix-common/)
  • (The Apache License, Version 2.0) OpenCensus (io.opencensus:opencensus-api:0.31.1 - https://github.com/census-instrumentation/opencensus-java)
  • (The Apache License, Version 2.0) OpenCensus (io.opencensus:opencensus-contrib-http-util:0.31.1 - https://github.com/census-instrumentation/opencensus-java)
  • (Apache 2.0) perfmark:perfmark-api (io.perfmark:perfmark-api:0.27.0 - https://github.com/perfmark/perfmark)
    • -
  • (Apache License, Version 2.0) Non-Blocking Reactive Foundation for the JVM (io.projectreactor:reactor-core:3.6.10 - https://github.com/reactor/reactor-core)
    • -
  • (The Apache Software License, Version 2.0) Core functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-core:1.1.22 - https://github.com/reactor/reactor-netty)
    • -
  • (The Apache Software License, Version 2.0) HTTP functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-http:1.1.22 - https://github.com/reactor/reactor-netty)
    • +
  • (Apache License, Version 2.0) Non-Blocking Reactive Foundation for the JVM (io.projectreactor:reactor-core:3.6.11 - https://github.com/reactor/reactor-core)
    • +
  • (The Apache Software License, Version 2.0) Core functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-core:1.1.23 - https://github.com/reactor/reactor-netty)
    • +
  • (The Apache Software License, Version 2.0) HTTP functionality for the Reactor Netty library (io.projectreactor.netty:reactor-netty-http:1.1.23 - https://github.com/reactor/reactor-netty)
  • (Apache License 2.0) swagger-annotations-jakarta (io.swagger.core.v3:swagger-annotations-jakarta:2.2.22 - https://github.com/swagger-api/swagger-core/modules/swagger-annotations-jakarta)
  • (Apache License 2.0) swagger-core-jakarta (io.swagger.core.v3:swagger-core-jakarta:2.2.22 - https://github.com/swagger-api/swagger-core/modules/swagger-core-jakarta)
  • (Apache License 2.0) swagger-models-jakarta (io.swagger.core.v3:swagger-models-jakarta:2.2.22 - https://github.com/swagger-api/swagger-core/modules/swagger-models-jakarta)
    • @@ -195,7 +195,7 @@
  • (Eclipse Public License 1.0) JUnit (junit:junit:4.13.2 - http://junit.org)
  • (The Apache Software License, Version 2.0) jitescript (me.qmx.jitescript:jitescript:0.4.1 - https://github.com/qmx/jitescript)
  • (Apache-2.0) (LGPL-2.1-or-later) Java Native Access (net.java.dev.jna:jna:5.13.0 - https://github.com/java-native-access/jna)
    • -
  • (Apache License v2.0) (LGPL, version 2.1) Java Native Access Platform (net.java.dev.jna:jna-platform:5.6.0 - https://github.com/java-native-access/jna)
    • +
  • (Apache-2.0) (LGPL-2.1-or-later) Java Native Access Platform (net.java.dev.jna:jna-platform:5.13.0 - https://github.com/java-native-access/jna)
  • (The Apache Software License, Version 2.0) ASM based accessors helper used by json-smart (net.minidev:accessors-smart:2.5.1 - https://urielch.github.io/)
  • (The Apache Software License, Version 2.0) JSON Small and Fast Parser (net.minidev:json-smart:2.5.1 - https://urielch.github.io/)
  • (The Apache Software License, Version 2.0) groovy-extensions (nz.net.ultraq.groovy:groovy-extensions:2.1.0 - https://github.com/ultraq/groovy-extensions/)
    • @@ -218,14 +218,13 @@
  • (Apache License, Version 2.0) Apache HttpComponents Core HTTP/2 (org.apache.httpcomponents.core5:httpcore5-h2:5.2.5 - https://hc.apache.org/httpcomponents-core-5.2.x/5.2.5/httpcore5-h2/)
  • (Apache-2.0) Apache Log4j API (org.apache.logging.log4j:log4j-api:2.23.1 - https://logging.apache.org/log4j/2.x/log4j/log4j-api/)
  • (Apache-2.0) Apache Log4j to SLF4J Adapter (org.apache.logging.log4j:log4j-to-slf4j:2.23.1 - https://logging.apache.org/log4j/2.x/log4j/log4j-to-slf4j/)
    • -
  • (Apache License, Version 2.0) Lucene Common Analyzers (org.apache.lucene:lucene-analyzers-common:8.11.3 - https://lucene.apache.org/lucene-parent/lucene-analyzers-common)
    • -
  • (Apache License, Version 2.0) Lucene Core (org.apache.lucene:lucene-core:8.11.3 - https://lucene.apache.org/lucene-parent/lucene-core)
    • -
  • (Apache License, Version 2.0) Lucene Queries (org.apache.lucene:lucene-queries:8.11.3 - https://lucene.apache.org/lucene-parent/lucene-queries)
    • -
  • (Apache License, Version 2.0) Lucene QueryParsers (org.apache.lucene:lucene-queryparser:8.11.3 - https://lucene.apache.org/lucene-parent/lucene-queryparser)
    • -
  • (Apache License, Version 2.0) Lucene Sandbox (org.apache.lucene:lucene-sandbox:8.11.3 - https://lucene.apache.org/lucene-parent/lucene-sandbox)
    • +
  • (Apache 2) Apache Lucene (module: common) (org.apache.lucene:lucene-analysis-common:9.12.0 - https://lucene.apache.org/)
    • +
  • (Apache 2) Apache Lucene (module: core) (org.apache.lucene:lucene-core:9.12.0 - https://lucene.apache.org/)
    • +
  • (Apache 2) Apache Lucene (module: facet) (org.apache.lucene:lucene-facet:9.12.0 - https://lucene.apache.org/)
    • +
  • (Apache 2) Apache Lucene (module: queries) (org.apache.lucene:lucene-queries:9.12.0 - https://lucene.apache.org/)
    • +
  • (Apache 2) Apache Lucene (module: queryparser) (org.apache.lucene:lucene-queryparser:9.12.0 - https://lucene.apache.org/)
    • +
  • (Apache 2) Apache Lucene (module: sandbox) (org.apache.lucene:lucene-sandbox:9.12.0 - https://lucene.apache.org/)
  • (The Apache Software License, Version 2.0) Maven Aether Provider (org.apache.maven:maven-aether-provider:3.0 - http://maven.apache.org/maven-aether-provider/)
    • -
  • (Apache-2.0) Maven 4 API :: Meta annotations (org.apache.maven:maven-api-meta:4.0.0-alpha-9 - https://maven.apache.org/ref/4.0.0-alpha-9/api/maven-api-meta/)
    • -
  • (Apache-2.0) Maven 4 API :: XML (org.apache.maven:maven-api-xml:4.0.0-alpha-9 - https://maven.apache.org/ref/4.0.0-alpha-9/api/maven-api-xml/)
  • (The Apache Software License, Version 2.0) Maven Artifact (org.apache.maven:maven-artifact:3.0 - http://maven.apache.org/maven-artifact/)
  • (The Apache Software License, Version 2.0) Maven Core (org.apache.maven:maven-core:3.0 - http://maven.apache.org/maven-core/)
  • (The Apache Software License, Version 2.0) Maven Model (org.apache.maven:maven-model:3.0 - http://maven.apache.org/maven-model/)
    • @@ -234,10 +233,8 @@
  • (The Apache Software License, Version 2.0) Maven Repository Metadata Model (org.apache.maven:maven-repository-metadata:3.0 - http://maven.apache.org/maven-repository-metadata/)
  • (The Apache Software License, Version 2.0) Maven Settings (org.apache.maven:maven-settings:3.0 - http://maven.apache.org/maven-settings/)
  • (The Apache Software License, Version 2.0) Maven Settings Builder (org.apache.maven:maven-settings-builder:3.0 - http://maven.apache.org/maven-settings-builder/)
    • -
  • (Apache-2.0) Implementation of Maven API XML (org.apache.maven:maven-xml-impl:4.0.0-alpha-9 - https://maven.apache.org/ref/4.0.0-alpha-9/maven-xml-impl/)
    • -
  • (Apache License, Version 2.0) Doxia :: Logging API (org.apache.maven.doxia:doxia-logging-api:1.11.1 - https://maven.apache.org/doxia/doxia/doxia-logging-api/)
    • -
  • (Apache License, Version 2.0) Doxia :: Sink API (org.apache.maven.doxia:doxia-sink-api:1.11.1 - https://maven.apache.org/doxia/doxia/doxia-sink-api/)
    • -
  • (Apache License, Version 2.0) Apache Maven Reporting API (org.apache.maven.reporting:maven-reporting-api:3.1.1 - https://maven.apache.org/shared/maven-reporting-api/)
    • +
  • (Apache-2.0) Doxia :: Sink API (org.apache.maven.doxia:doxia-sink-api:2.0.0 - https://maven.apache.org/doxia/doxia/doxia-sink-api/)
    • +
  • (Apache-2.0) Apache Maven Reporting API (org.apache.maven.reporting:maven-reporting-api:4.0.0 - https://maven.apache.org/shared/maven-reporting-api/)
  • (Apache License, Version 2.0) Maven Artifact Resolver API (org.apache.maven.resolver:maven-resolver-api:1.4.1 - https://maven.apache.org/resolver/maven-resolver-api/)
  • (Apache License, Version 2.0) Maven Artifact Resolver Utilities (org.apache.maven.resolver:maven-resolver-util:1.4.1 - https://maven.apache.org/resolver/maven-resolver-util/)
  • (Apache License, Version 2.0) Apache Maven File Management API (org.apache.maven.shared:file-management:3.1.0 - https://maven.apache.org/shared/file-management/)
    • @@ -246,14 +243,14 @@
  • (Apache-2.0) Apache Maven Dependency Tree (org.apache.maven.shared:maven-dependency-tree:3.3.0 - https://maven.apache.org/shared/maven-dependency-tree/)
  • (Apache License, Version 2.0) Apache Maven Shared Utils (org.apache.maven.shared:maven-shared-utils:3.1.0 - https://maven.apache.org/shared/maven-shared-utils/)
  • (Apache License, Version 2.0) Proton-J (org.apache.qpid:proton-j:0.34.1 - https://qpid.apache.org/proton/proton-j)
    • -
  • (Apache License, Version 2.0) tomcat-embed-core (org.apache.tomcat.embed:tomcat-embed-core:10.1.30 - https://tomcat.apache.org/)
    • -
  • (Apache License, Version 2.0) tomcat-embed-el (org.apache.tomcat.embed:tomcat-embed-el:10.1.30 - https://tomcat.apache.org/)
    • -
  • (Apache License, Version 2.0) tomcat-embed-websocket (org.apache.tomcat.embed:tomcat-embed-websocket:10.1.30 - https://tomcat.apache.org/)
    • -
  • (Apache License, Version 2.0) Apache Velocity - Engine (org.apache.velocity:velocity-engine-core:2.3 - http://velocity.apache.org/engine/devel/velocity-engine-core/)
    • +
  • (Apache License, Version 2.0) tomcat-embed-core (org.apache.tomcat.embed:tomcat-embed-core:10.1.31 - https://tomcat.apache.org/)
    • +
  • (Apache License, Version 2.0) tomcat-embed-el (org.apache.tomcat.embed:tomcat-embed-el:10.1.31 - https://tomcat.apache.org/)
    • +
  • (Apache License, Version 2.0) tomcat-embed-websocket (org.apache.tomcat.embed:tomcat-embed-websocket:10.1.31 - https://tomcat.apache.org/)
    • +
  • (Apache-2.0) Apache Velocity - Engine (org.apache.velocity:velocity-engine-core:2.4.1 - http://velocity.apache.org/engine/devel/velocity-engine-core/)
  • (The Apache Software License, Version 2.0) asciidoctorj (org.asciidoctor:asciidoctorj:3.0.0 - https://github.com/asciidoctor/asciidoctorj)
  • (The Apache Software License, Version 2.0) asciidoctorj-api (org.asciidoctor:asciidoctorj-api:3.0.0 - https://github.com/asciidoctor/asciidoctorj)
  • (The Apache Software License, Version 2.0) attoparser (org.attoparser:attoparser:2.0.7.RELEASE - https://www.attoparser.org)
    • -
  • (Apache Software License, Version 1.1) (Bouncy Castle Licence) Bouncy Castle OpenPGP API (org.bouncycastle:bcpg-jdk18on:1.71 - https://www.bouncycastle.org/java.html)
    • +
  • (Apache Software License, Version 2.0) (Bouncy Castle Licence) Bouncy Castle OpenPGP API (org.bouncycastle:bcpg-jdk18on:1.78 - https://www.bouncycastle.org/java.html)
  • (Bouncy Castle Licence) Bouncy Castle PKIX, CMS, EAC, TSP, PKCS, OCSP, CMP, and CRMF APIs (org.bouncycastle:bcpkix-jdk18on:1.78.1 - https://www.bouncycastle.org/java.html)
  • (Bouncy Castle Licence) Bouncy Castle Provider (org.bouncycastle:bcprov-jdk18on:1.78 - https://www.bouncycastle.org/java.html)
  • (Bouncy Castle Licence) Bouncy Castle ASN.1 Extension and Utility APIs (org.bouncycastle:bcutil-jdk18on:1.78.1 - https://www.bouncycastle.org/java.html)
    • @@ -262,50 +259,49 @@
  • (The Apache Software License, Version 2.0) Plexus Classworlds (org.codehaus.plexus:plexus-classworlds:2.2.3 - http://plexus.codehaus.org/plexus-classworlds/)
  • (Apache License, Version 2.0) Plexus :: Component Annotations (org.codehaus.plexus:plexus-component-annotations:2.0.0 - http://codehaus-plexus.github.io/plexus-containers/plexus-component-annotations/)
  • (The Apache Software License, Version 2.0) Plexus Interpolation API (org.codehaus.plexus:plexus-interpolation:1.14 - http://plexus.codehaus.org/plexus-components/plexus-interpolation)
    • -
  • (Apache License, Version 2.0) Plexus Common Utilities (org.codehaus.plexus:plexus-utils:4.0.1 - https://codehaus-plexus.github.io/plexus-utils/)
    • -
  • (Apache License, Version 2.0) Plexus XML Utilities (org.codehaus.plexus:plexus-xml:4.0.4 - https://codehaus-plexus.github.io/plexus-xml/)
    • +
  • (Apache License, Version 2.0) Plexus Common Utilities (org.codehaus.plexus:plexus-utils:4.0.2 - https://codehaus-plexus.github.io/plexus-utils/)
    • +
  • (Apache License, Version 2.0) Plexus XML Utilities (org.codehaus.plexus:plexus-xml:3.0.1 - https://codehaus-plexus.github.io/plexus-xml/)
  • (The BSD 2-Clause License) Stax2 API (org.codehaus.woodstox:stax2-api:4.2.2 - http://github.com/FasterXML/stax2-api)
  • (Apache 2) org.conscrypt:conscrypt-openjdk-uber (org.conscrypt:conscrypt-openjdk-uber:2.5.2 - https://conscrypt.org/)
    • -
  • (Apache-2.0) CycloneDX Core (Java) (org.cyclonedx:cyclonedx-core-java:9.0.5 - https://github.com/CycloneDX/cyclonedx-core-java)
    • +
  • (Apache-2.0) CycloneDX Core (Java) (org.cyclonedx:cyclonedx-core-java:9.1.0 - https://github.com/CycloneDX/cyclonedx-core-java)
  • (EDL 1.0) Angus Activation Registries (org.eclipse.angus:angus-activation:2.0.2 - https://github.com/eclipse-ee4j/angus-activation/angus-activation)
    • -
  • (Eclipse Public License - Version 2.0) Eclipse Packager :: Core (org.eclipse.packager:packager-core:0.19.0 - https://eclipse.org/packager/packager-core)
    • -
  • (Eclipse Public License - Version 2.0) Eclipse Packager :: RPM (org.eclipse.packager:packager-rpm:0.19.0 - https://eclipse.org/packager/packager-rpm)
    • +
  • (Eclipse Public License - Version 2.0) Eclipse Packager :: Core (org.eclipse.packager:packager-core:0.21.0 - https://eclipse.org/packager/packager-core)
    • +
  • (Eclipse Public License - Version 2.0) Eclipse Packager :: RPM (org.eclipse.packager:packager-rpm:0.21.0 - https://eclipse.org/packager/packager-rpm)
  • (Dual license consisting of the CDDL v1.1 and GPL v2) JSR 374 (JSON Processing) Default Provider (org.glassfish:javax.json:1.1.4 - https://javaee.github.io/jsonp)
  • (BSD License 3) Hamcrest (org.hamcrest:hamcrest:2.2 - http://hamcrest.org/JavaHamcrest/)
  • (BSD License 3) Hamcrest Core (org.hamcrest:hamcrest-core:2.2 - http://hamcrest.org/JavaHamcrest/)
  • (BSD-2-Clause) (Public Domain, per Creative Commons CC0) HdrHistogram (org.hdrhistogram:HdrHistogram:2.2.2 - http://hdrhistogram.github.io/HdrHistogram/)
  • (Apache License 2.0) (LGPL 2.1) (MPL 1.1) Javassist (org.javassist:javassist:3.29.0-GA - http://www.javassist.org/)
    • -
  • (The Apache Software License, Version 2.0) JetBrains Java Annotations (org.jetbrains:annotations:17.0.0 - https://github.com/JetBrains/java-annotations)
  • (EPL) Dirgra (org.jruby:dirgra:0.3 - https://github.com/jruby/dirgra)
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Main Maven Artifact (org.jruby:jruby:9.4.8.0 - https://github.com/jruby/jruby/jruby-artifacts/jruby)
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Base (org.jruby:jruby-base:9.4.8.0 - https://github.com/jruby/jruby/jruby-base)
    • -
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Complete (org.jruby:jruby-complete:9.4.8.0 - https://github.com/jruby/jruby/jruby-artifacts/jruby-complete)
    • +
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Complete (org.jruby:jruby-complete:9.4.9.0 - https://github.com/jruby/jruby/jruby-artifacts/jruby-complete)
  • (EPL-2.0) (GPL-2.0) (LGPL-2.1) JRuby Lib Setup (org.jruby:jruby-stdlib:9.4.8.0 - https://github.com/jruby/jruby/jruby-stdlib)
  • (BSD) JZlib (org.jruby:jzlib:1.1.5 - http://www.jcraft.com/jzlib/)
  • (MIT License) JCodings (org.jruby.jcodings:jcodings:1.0.58 - http://nexus.sonatype.org/oss-repository-hosting.html/jcodings)
  • (MIT License) Joni (org.jruby.joni:joni:2.2.1 - http://nexus.sonatype.org/oss-repository-hosting.html/joni)
    • -
  • (The MIT License) jsoup Java HTML Parser (org.jsoup:jsoup:1.17.2 - https://jsoup.org/)
    • +
  • (The MIT License) jsoup Java HTML Parser (org.jsoup:jsoup:1.18.3 - https://jsoup.org/)
  • (Public Domain, per Creative Commons CC0) LatencyUtils (org.latencyutils:LatencyUtils:2.0.3 - http://latencyutils.github.io/LatencyUtils/)
    • -
  • (Apache License, Version 2.0) KeePassJava2 :: All (org.linguafranca.pwdb:KeePassJava2:2.2.2 - https://github.com/jorabin/KeePassJava2/KeePassJava2)
    • -
  • (Apache License, Version 2.0) KeePassJava2 :: DOM (org.linguafranca.pwdb:KeePassJava2-dom:2.2.2 - https://github.com/jorabin/KeePassJava2/KeePassJava2-dom)
    • -
  • (Apache License, Version 2.0) KeePassJava2 :: Jackson (org.linguafranca.pwdb:KeePassJava2-jackson:2.2.2 - https://github.com/jorabin/KeePassJava2/KeePassJava2-jackson)
    • -
  • (Apache License, Version 2.0) KeePassJava2 :: JAXB (org.linguafranca.pwdb:KeePassJava2-jaxb:2.2.2 - https://github.com/jorabin/KeePassJava2/KeePassJava2-jaxb)
    • -
  • (Apache License, Version 2.0) KeePassJava2 :: KDB (org.linguafranca.pwdb:KeePassJava2-kdb:2.2.2 - https://github.com/jorabin/KeePassJava2/KeePassJava2-kdb)
    • -
  • (Apache License, Version 2.0) KeePassJava2 :: KDBX (org.linguafranca.pwdb:KeePassJava2-kdbx:2.2.2 - https://github.com/jorabin/KeePassJava2/KeePassJava2-kdbx)
    • -
  • (Apache License, Version 2.0) KeePassJava2 :: Simple (org.linguafranca.pwdb:KeePassJava2-simple:2.2.2 - https://github.com/jorabin/KeePassJava2/KeePassJava2-simple)
    • -
  • (Apache License, Version 2.0) PWDB :: Database (org.linguafranca.pwdb:database:2.2.2 - https://github.com/jorabin/KeePassJava2/database)
    • +
  • (Apache License, Version 2.0) KeePassJava2 :: All (org.linguafranca.pwdb:KeePassJava2:2.2.3 - https://github.com/jorabin/KeePassJava2/KeePassJava2)
    • +
  • (Apache License, Version 2.0) KeePassJava2 :: DOM (org.linguafranca.pwdb:KeePassJava2-dom:2.2.3 - https://github.com/jorabin/KeePassJava2/KeePassJava2-dom)
    • +
  • (Apache License, Version 2.0) KeePassJava2 :: Jackson (org.linguafranca.pwdb:KeePassJava2-jackson:2.2.3 - https://github.com/jorabin/KeePassJava2/KeePassJava2-jackson)
    • +
  • (Apache License, Version 2.0) KeePassJava2 :: JAXB (org.linguafranca.pwdb:KeePassJava2-jaxb:2.2.3 - https://github.com/jorabin/KeePassJava2/KeePassJava2-jaxb)
    • +
  • (Apache License, Version 2.0) KeePassJava2 :: KDB (org.linguafranca.pwdb:KeePassJava2-kdb:2.2.3 - https://github.com/jorabin/KeePassJava2/KeePassJava2-kdb)
    • +
  • (Apache License, Version 2.0) KeePassJava2 :: KDBX (org.linguafranca.pwdb:KeePassJava2-kdbx:2.2.3 - https://github.com/jorabin/KeePassJava2/KeePassJava2-kdbx)
    • +
  • (Apache License, Version 2.0) KeePassJava2 :: Simple (org.linguafranca.pwdb:KeePassJava2-simple:2.2.3 - https://github.com/jorabin/KeePassJava2/KeePassJava2-simple)
    • +
  • (Apache License, Version 2.0) PWDB :: Database (org.linguafranca.pwdb:database:2.2.3 - https://github.com/jorabin/KeePassJava2/database)
    • +
  • (Apache License, Version 2.0) PWDB :: Util (org.linguafranca.pwdb:util:2.2.3 - https://github.com/jorabin/KeePassJava2/util)
  • (BSD-3-Clause) asm (org.ow2.asm:asm:9.2 - http://asm.ow2.io/)
  • (BSD-3-Clause) asm-analysis (org.ow2.asm:asm-analysis:9.2 - http://asm.ow2.io/)
  • (BSD-3-Clause) asm-commons (org.ow2.asm:asm-commons:9.2 - http://asm.ow2.io/)
  • (BSD-3-Clause) asm-tree (org.ow2.asm:asm-tree:9.2 - http://asm.ow2.io/)
  • (BSD-3-Clause) asm-util (org.ow2.asm:asm-util:9.2 - http://asm.ow2.io/)
    • -
  • (The Apache Software License, Version 2.0) Dependency-Check Core (org.owasp:dependency-check-core:10.0.2 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-core)
    • -
  • (The Apache Software License, Version 2.0) Dependency-Check Maven Plugin (org.owasp:dependency-check-maven:10.0.2 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-maven)
    • -
  • (The Apache Software License, Version 2.0) Dependency-Check Utils (org.owasp:dependency-check-utils:10.0.2 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-utils)
    • -
  • (The MIT License) Project Lombok (org.projectlombok:lombok:1.18.34 - https://projectlombok.org)
    • +
  • (The Apache Software License, Version 2.0) Dependency-Check Core (org.owasp:dependency-check-core:11.1.1 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-core)
    • +
  • (The Apache Software License, Version 2.0) Dependency-Check Maven Plugin (org.owasp:dependency-check-maven:11.1.1 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-maven)
    • +
  • (The Apache Software License, Version 2.0) Dependency-Check Utils (org.owasp:dependency-check-utils:11.1.1 - https://github.com/jeremylong/DependencyCheck.git/dependency-check-utils)
    • +
  • (The MIT License) Project Lombok (org.projectlombok:lombok:1.18.36 - https://projectlombok.org)
  • (MIT-0) reactive-streams (org.reactivestreams:reactive-streams:1.0.4 - http://www.reactive-streams.org/)
    • -
  • (The MIT License) semver4j (org.semver4j:semver4j:5.3.0 - https://github.com/semver4j/semver4j)
    • -
  • (Apache License, Version 2.0) JCL 1.2 implemented over SLF4J (org.slf4j:jcl-over-slf4j:2.0.16 - http://www.slf4j.org)
    • +
  • (The MIT License) semver4j (org.semver4j:semver4j:5.4.1 - https://github.com/semver4j/semver4j)
  • (MIT License) JUL to SLF4J bridge (org.slf4j:jul-to-slf4j:2.0.16 - http://www.slf4j.org)
  • (MIT License) SLF4J API Module (org.slf4j:slf4j-api:2.0.16 - http://www.slf4j.org)
  • (The Apache Software License, Version 2.0) Aether :: API (org.sonatype.aether:aether-api:1.7 - http://aether.sonatype.org/aether-api/)
    • @@ -323,78 +319,78 @@
  • (The Apache License, Version 2.0) springdoc-openapi-starter-common (org.springdoc:springdoc-openapi-starter-common:2.6.0 - https://springdoc.org/springdoc-openapi-starter-common/)
  • (The Apache License, Version 2.0) springdoc-openapi-starter-webmvc-api (org.springdoc:springdoc-openapi-starter-webmvc-api:2.6.0 - https://springdoc.org/springdoc-openapi-starter-webmvc-api/)
  • (The Apache License, Version 2.0) springdoc-openapi-starter-webmvc-ui (org.springdoc:springdoc-openapi-starter-webmvc-ui:2.6.0 - https://springdoc.org/springdoc-openapi-starter-webmvc-ui/)
    • -
  • (Apache License, Version 2.0) Spring AOP (org.springframework:spring-aop:6.1.13 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Beans (org.springframework:spring-beans:6.1.13 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Context (org.springframework:spring-context:6.1.13 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Core (org.springframework:spring-core:6.1.13 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Expression Language (SpEL) (org.springframework:spring-expression:6.1.13 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Commons Logging Bridge (org.springframework:spring-jcl:6.1.13 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Web (org.springframework:spring-web:6.1.13 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) Spring Web MVC (org.springframework:spring-webmvc:6.1.13 - https://github.com/spring-projects/spring-framework)
    • -
  • (Apache License, Version 2.0) spring-boot (org.springframework.boot:spring-boot:3.3.4 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-actuator (org.springframework.boot:spring-boot-actuator:3.3.4 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-actuator-autoconfigure (org.springframework.boot:spring-boot-actuator-autoconfigure:3.3.4 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-autoconfigure (org.springframework.boot:spring-boot-autoconfigure:3.3.4 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter (org.springframework.boot:spring-boot-starter:3.3.4 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter-actuator (org.springframework.boot:spring-boot-starter-actuator:3.3.4 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter-json (org.springframework.boot:spring-boot-starter-json:3.3.4 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter-logging (org.springframework.boot:spring-boot-starter-logging:3.3.4 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter-thymeleaf (org.springframework.boot:spring-boot-starter-thymeleaf:3.3.4 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter-tomcat (org.springframework.boot:spring-boot-starter-tomcat:3.3.4 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) spring-boot-starter-web (org.springframework.boot:spring-boot-starter-web:3.3.4 - https://spring.io/projects/spring-boot)
    • -
  • (Apache License, Version 2.0) Spring Cloud Commons (org.springframework.cloud:spring-cloud-commons:4.1.4 - https://projects.spring.io/spring-cloud/spring-cloud-commons/)
    • -
  • (Apache License, Version 2.0) Spring Cloud Context (org.springframework.cloud:spring-cloud-context:4.1.4 - https://projects.spring.io/spring-cloud/spring-cloud-context/)
    • -
  • (Apache License, Version 2.0) spring-cloud-starter (org.springframework.cloud:spring-cloud-starter:4.1.4 - https://projects.spring.io/spring-cloud)
    • -
  • (Apache License, Version 2.0) Spring Cloud Starter Vault Config (org.springframework.cloud:spring-cloud-starter-vault-config:4.1.3 - https://cloud.spring.io/spring-cloud-vault/)
    • -
  • (Apache License, Version 2.0) Spring Cloud Vault Configuration Integration (org.springframework.cloud:spring-cloud-vault-config:4.1.3 - https://spring.io/spring-cloud/spring-cloud-vault-parent/spring-cloud-vault-config)
    • -
  • (Apache License, Version 2.0) spring-security-config (org.springframework.security:spring-security-config:6.3.3 - https://spring.io/projects/spring-security)
    • -
  • (Apache License, Version 2.0) spring-security-core (org.springframework.security:spring-security-core:6.3.3 - https://spring.io/projects/spring-security)
    • -
  • (Apache License, Version 2.0) spring-security-crypto (org.springframework.security:spring-security-crypto:6.3.3 - https://spring.io/projects/spring-security)
    • +
  • (Apache License, Version 2.0) Spring AOP (org.springframework:spring-aop:6.1.14 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Beans (org.springframework:spring-beans:6.1.14 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Context (org.springframework:spring-context:6.1.14 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Core (org.springframework:spring-core:6.1.14 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Expression Language (SpEL) (org.springframework:spring-expression:6.1.14 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Commons Logging Bridge (org.springframework:spring-jcl:6.1.14 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Web (org.springframework:spring-web:6.1.14 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) Spring Web MVC (org.springframework:spring-webmvc:6.1.14 - https://github.com/spring-projects/spring-framework)
    • +
  • (Apache License, Version 2.0) spring-boot (org.springframework.boot:spring-boot:3.3.5 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-actuator (org.springframework.boot:spring-boot-actuator:3.3.5 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-actuator-autoconfigure (org.springframework.boot:spring-boot-actuator-autoconfigure:3.3.5 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-autoconfigure (org.springframework.boot:spring-boot-autoconfigure:3.3.5 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter (org.springframework.boot:spring-boot-starter:3.3.5 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter-actuator (org.springframework.boot:spring-boot-starter-actuator:3.3.5 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter-json (org.springframework.boot:spring-boot-starter-json:3.3.5 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter-logging (org.springframework.boot:spring-boot-starter-logging:3.3.5 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter-thymeleaf (org.springframework.boot:spring-boot-starter-thymeleaf:3.3.5 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter-tomcat (org.springframework.boot:spring-boot-starter-tomcat:3.3.5 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) spring-boot-starter-web (org.springframework.boot:spring-boot-starter-web:3.3.5 - https://spring.io/projects/spring-boot)
    • +
  • (Apache License, Version 2.0) Spring Cloud Commons (org.springframework.cloud:spring-cloud-commons:4.1.5 - https://projects.spring.io/spring-cloud/spring-cloud-commons/)
    • +
  • (Apache License, Version 2.0) Spring Cloud Context (org.springframework.cloud:spring-cloud-context:4.1.5 - https://projects.spring.io/spring-cloud/spring-cloud-context/)
    • +
  • (Apache License, Version 2.0) spring-cloud-starter (org.springframework.cloud:spring-cloud-starter:4.1.5 - https://projects.spring.io/spring-cloud)
    • +
  • (Apache License, Version 2.0) Spring Cloud Starter Vault Config (org.springframework.cloud:spring-cloud-starter-vault-config:4.1.4 - https://cloud.spring.io/spring-cloud-vault/)
    • +
  • (Apache License, Version 2.0) Spring Cloud Vault Configuration Integration (org.springframework.cloud:spring-cloud-vault-config:4.1.4 - https://spring.io/spring-cloud/spring-cloud-vault-parent/spring-cloud-vault-config)
    • +
  • (Apache License, Version 2.0) spring-security-config (org.springframework.security:spring-security-config:6.3.4 - https://spring.io/projects/spring-security)
    • +
  • (Apache License, Version 2.0) spring-security-core (org.springframework.security:spring-security-core:6.3.4 - https://spring.io/projects/spring-security)
    • +
  • (Apache License, Version 2.0) spring-security-crypto (org.springframework.security:spring-security-crypto:6.3.4 - https://spring.io/projects/spring-security)
  • (Apache 2.0) spring-security-rsa (org.springframework.security:spring-security-rsa:1.1.3 - http://github.com/spring-projects/spring-security-oauth)
    • -
  • (Apache License, Version 2.0) spring-security-web (org.springframework.security:spring-security-web:6.3.3 - https://spring.io/projects/spring-security)
    • +
  • (Apache License, Version 2.0) spring-security-web (org.springframework.security:spring-security-web:6.3.4 - https://spring.io/projects/spring-security)
  • (Apache License, Version 2.0) Spring Vault Core (org.springframework.vault:spring-vault-core:3.1.2 - https://projects.spring.io/spring-vault/spring-vault-core/)
  • (MIT) Testcontainers :: JUnit Jupiter Extension (org.testcontainers:junit-jupiter:1.19.8 - https://java.testcontainers.org)
  • (BSD-3-Clause) ThreeTen backport (org.threeten:threetenbp:1.7.0 - https://www.threeten.org/threetenbp)
  • (The Apache Software License, Version 2.0) thymeleaf (org.thymeleaf:thymeleaf:3.1.2.RELEASE - http://www.thymeleaf.org/thymeleaf-lib/thymeleaf)
  • (The Apache Software License, Version 2.0) thymeleaf-spring6 (org.thymeleaf:thymeleaf-spring6:3.1.2.RELEASE - http://www.thymeleaf.org/thymeleaf-lib/thymeleaf-spring6)
    • -
  • (The Apache Software License, Version 2.0) thymeleaf-extras-springsecurity6 (org.thymeleaf.extras:thymeleaf-extras-springsecurity6:3.1.2.RELEASE - http://www.thymeleaf.org/thymeleaf-lib/thymeleaf-extras-springsecurity6)
    • +
  • (The Apache Software License, Version 2.0) thymeleaf-extras-springsecurity6 (org.thymeleaf.extras:thymeleaf-extras-springsecurity6:3.1.3.RELEASE - http://www.thymeleaf.org/thymeleaf-lib/thymeleaf-extras-springsecurity6)
  • (Public Domain) XZ for Java (org.tukaani:xz:1.9 - https://tukaani.org/xz/java.html)
  • (The Apache Software License, Version 2.0) unbescape (org.unbescape:unbescape:1.1.6.RELEASE - http://www.unbescape.org)
  • (Apache License, Version 2.0) Bootstrap (org.webjars:bootstrap:5.3.3 - http://webjars.org)
    • -
  • (MIT) DataTables (org.webjars:datatables:2.1.0 - http://webjars.org)
    • +
  • (MIT) DataTables (org.webjars:datatables:2.1.8 - http://webjars.org)
  • (MIT License) jquery (org.webjars:jquery:3.7.1 - http://webjars.org)
  • (Apache-2.0) Swagger UI (org.webjars:swagger-ui:5.17.14 - https://www.webjars.org)
  • (BSD 2-Clause) github-buttons (org.webjars.npm:github-buttons:2.14.1 - https://www.webjars.org)
  • (Common Public 1.0) pecoff4j (org.whitesource:pecoff4j:0.0.2.1 - https://github.com/whitesource/pecoff4j-maven)
  • (Apache License, Version 2.0) SnakeYAML (org.yaml:snakeyaml:2.2 - https://bitbucket.org/snakeyaml/snakeyaml)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Annotations (software.amazon.awssdk:annotations:2.28.13 - https://aws.amazon.com/sdkforjava/core/annotations)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Clients :: Apache (software.amazon.awssdk:apache-client:2.28.13 - https://aws.amazon.com/sdkforjava/http-clients/apache-client)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Auth (software.amazon.awssdk:auth:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: AWS Core (software.amazon.awssdk:aws-core:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: AWS Json Protocol (software.amazon.awssdk:aws-json-protocol:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: AWS Query Protocol (software.amazon.awssdk:aws-query-protocol:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Checksums (software.amazon.awssdk:checksums:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Checksums SPI (software.amazon.awssdk:checksums-spi:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Endpoints SPI (software.amazon.awssdk:endpoints-spi:2.28.13 - https://aws.amazon.com/sdkforjava/core/endpoints-spi)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Auth (software.amazon.awssdk:http-auth:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Auth AWS (software.amazon.awssdk:http-auth-aws:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Auth Event Stream (software.amazon.awssdk:http-auth-aws-eventstream:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Auth SPI (software.amazon.awssdk:http-auth-spi:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Client Interface (software.amazon.awssdk:http-client-spi:2.28.13 - https://aws.amazon.com/sdkforjava/http-client-spi)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Identity SPI (software.amazon.awssdk:identity-spi:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: Json Utils (software.amazon.awssdk:json-utils:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Metrics SPI (software.amazon.awssdk:metrics-spi:2.28.13 - https://aws.amazon.com/sdkforjava/core/metrics-spi)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Clients :: Netty Non-Blocking I/O (software.amazon.awssdk:netty-nio-client:2.28.13 - https://aws.amazon.com/sdkforjava/http-clients/netty-nio-client)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Profiles (software.amazon.awssdk:profiles:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: Protocol Core (software.amazon.awssdk:protocol-core:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Regions (software.amazon.awssdk:regions:2.28.13 - https://aws.amazon.com/sdkforjava/core/regions)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Retries (software.amazon.awssdk:retries:2.28.13 - https://aws.amazon.com/sdkforjava/core/retries)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Retries API (software.amazon.awssdk:retries-spi:2.28.13 - https://aws.amazon.com/sdkforjava/core/retries-spi)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: SDK Core (software.amazon.awssdk:sdk-core:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Services :: AWS Simple Systems Management (SSM) (software.amazon.awssdk:ssm:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Services :: AWS STS (software.amazon.awssdk:sts:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Third Party :: Jackson-core (software.amazon.awssdk:third-party-jackson-core:2.28.13 - https://aws.amazon.com/sdkforjava)
    • -
  • (Apache License, Version 2.0) AWS Java SDK :: Utilities (software.amazon.awssdk:utils:2.28.13 - https://aws.amazon.com/sdkforjava/utils)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Annotations (software.amazon.awssdk:annotations:2.30.4 - https://aws.amazon.com/sdkforjava/core/annotations)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Clients :: Apache (software.amazon.awssdk:apache-client:2.30.4 - https://aws.amazon.com/sdkforjava/http-clients/apache-client)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Auth (software.amazon.awssdk:auth:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: AWS Core (software.amazon.awssdk:aws-core:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: AWS Json Protocol (software.amazon.awssdk:aws-json-protocol:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: AWS Query Protocol (software.amazon.awssdk:aws-query-protocol:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Checksums (software.amazon.awssdk:checksums:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Checksums SPI (software.amazon.awssdk:checksums-spi:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Endpoints SPI (software.amazon.awssdk:endpoints-spi:2.30.4 - https://aws.amazon.com/sdkforjava/core/endpoints-spi)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Auth (software.amazon.awssdk:http-auth:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Auth AWS (software.amazon.awssdk:http-auth-aws:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Auth Event Stream (software.amazon.awssdk:http-auth-aws-eventstream:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Auth SPI (software.amazon.awssdk:http-auth-spi:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Client Interface (software.amazon.awssdk:http-client-spi:2.30.4 - https://aws.amazon.com/sdkforjava/http-client-spi)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Identity SPI (software.amazon.awssdk:identity-spi:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: Json Utils (software.amazon.awssdk:json-utils:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Metrics SPI (software.amazon.awssdk:metrics-spi:2.30.4 - https://aws.amazon.com/sdkforjava/core/metrics-spi)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: HTTP Clients :: Netty Non-Blocking I/O (software.amazon.awssdk:netty-nio-client:2.30.4 - https://aws.amazon.com/sdkforjava/http-clients/netty-nio-client)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Profiles (software.amazon.awssdk:profiles:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Core :: Protocols :: Protocol Core (software.amazon.awssdk:protocol-core:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Regions (software.amazon.awssdk:regions:2.30.4 - https://aws.amazon.com/sdkforjava/core/regions)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Retries (software.amazon.awssdk:retries:2.30.4 - https://aws.amazon.com/sdkforjava/core/retries)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Retries API (software.amazon.awssdk:retries-spi:2.30.4 - https://aws.amazon.com/sdkforjava/core/retries-spi)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: SDK Core (software.amazon.awssdk:sdk-core:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Services :: AWS Simple Systems Management (SSM) (software.amazon.awssdk:ssm:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Services :: AWS STS (software.amazon.awssdk:sts:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Third Party :: Jackson-core (software.amazon.awssdk:third-party-jackson-core:2.30.4 - https://aws.amazon.com/sdkforjava)
    • +
  • (Apache License, Version 2.0) AWS Java SDK :: Utilities (software.amazon.awssdk:utils:2.30.4 - https://aws.amazon.com/sdkforjava/utils)
  • (Apache License, Version 2.0) AWS Event Stream (software.amazon.eventstream:eventstream:1.0.1 - https://github.com/awslabs/aws-eventstream-java)
  • (Apache-2.0) CPE Parser (us.springett:cpe-parser:2.1.0 - https://github.com/stevespringett/CPE-Parser)
    • diff --git a/src/main/resources/templates/index.html b/src/main/resources/templates/index.html index 3fcfb2bf9..db4f6b7ca 100644 --- a/src/main/resources/templates/index.html +++ b/src/main/resources/templates/index.html @@ -5,7 +5,7 @@ Codestin Search App - + @@ -21,8 +21,8 @@ - - + +