Ecosyste.ms: Repos
An open API service providing repository metadata for many open source software ecosystems.
GitHub / cider-security-research / cicd-goat
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
JSON API: https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cider-security-research%2Fcicd-goat
Stars: 1,812
Forks: 266
Open Issues: 3
License: apache-2.0
Language: Python
Repo Size: 67.1 MB
Dependencies:
3,189
Created: about 2 years ago
Updated: 1 day ago
Last pushed: 1 day ago
Last synced: 1 day ago
Topics: appsec, cicd, ctf, devops, devsecops, gitlab, infosec, jenkins, security
Files
Loading...
Readme
Loading...
Dependencies
- @types/jest 24.0.14
- @types/node 12.0.8
- @types/react 16.8.20
- @types/react-dom 16.8.4
- react ^16.8.6
- react-dom ^16.8.6
- react-scripts ^3.4.1
- typescript 3.4.5
- electron ^7.2.4 development
- uuid file:../../.local/uuid
- @rollup/plugin-node-resolve ^13.0.6 development
- rollup ^2.60.2 development
- rollup-plugin-terser ^7.0.2 development
- uuid file:../../.local/uuid
- uuid file:../../.local/uuid
- webpack ^5.64.4 development
- webpack-cli ^4.9.1 development
- uuid file:../../.local/uuid
- uuid file:../../.local/uuid
- uuid file:../../.local/uuid
- webpack ^5.64.4 development
- webpack-cli ^4.9.1 development
- uuid file:../../.local/uuid
- chai ^4.2.0 development
- mocha ^5.2.0 development
- twiddledee git+http://gitea:3000/Wonderland/twiddledee#semver:^1.1.0
Pipfile
pypi
- gitpython *
- jenkinsapi *
- pytest *
- requests *
- Flask ==1.1.2
- Flask-Caching ==1.8.0
- Flask-Migrate ==2.5.3
- Flask-SQLAlchemy ==2.4.3
- Flask-Script ==2.0.6
- Jinja2 ==2.11.3
- PyMySQL ==0.9.3
- SQLAlchemy ==1.3.17
- SQLAlchemy-Utils ==0.36.6
- WTForms ==2.3.1
- Werkzeug ==1.0.1
- bcrypt ==3.1.7
- boto3 ==1.13.9
- cmarkgfm ==0.4.2
- dataset ==1.3.1
- flask-marshmallow ==0.10.1
- flask-restx ==0.2.0
- gevent ==20.9.0
- gunicorn ==20.0.4
- itsdangerous ==1.1.0
- marshmallow ==2.20.2
- marshmallow-sqlalchemy ==0.17.0
- maxminddb ==1.5.4
- passlib ==1.7.2
- pybluemonday ==0.0.7
- pydantic ==1.6.2
- python-dotenv ==0.13.0
- python-geoacumen-city *
- redis ==3.5.2
- requests ==2.23.0
- tenacity ==6.2.0
gitea/Pipfile
pypi
- aiocontextvars >=0.2.0
- colorama >=0.3.4
- win32-setctime >=1.0.0
- Flask >=0.9
- Flask-Meld >=0.7.0
- python-dotenv >=0.17.0
- Flask >=0.9
- beautifulsoup4 >=4
- click ==7.1.2
- flask-socketio >=5
- gevent-websocket >=0.10.1
- jinja2-simple-tags ==0.3.1
- orjson >=3.4.6
- Flask-WTF *
- email_validator *
- playwright ==1.17.0
- pytest ==6.2.5
- pytest-flask ==1.2.0
- pytest-playwright ==0.2.2
- tox >=3.15.2
- tox-gh-actions ==1.3.0
- tox-pyenv ==1.1.0
- virtualenv >=16.7.10
- psutil ==5.7.0
- pytest ==5.4.3
- pytest-timeout ==1.4.1
- selenium ==3.141.0
- bottle ==0.12.13
- bottle-websocket ==0.2.9
- gevent ==1.3.6
- gevent-websocket ==0.10.1
- greenlet ==0.4.15
- pyparsing ==2.4.7
- whichcraft ==0.4.1
- bottle *
- bottle-websocket *
- future *
- pyparsing *
- whichcraft *
- pip >=19.1.1
- setuptools >=18.0.1
- six >=1.14.0
- virtualenv >=16.6.0
- docutils ==0.16
- sphinx ==3.0.3
- sphinx-py3doc-enhanced-theme ==2.4.0
- PySocks ==1.7.1
- backports.zoneinfo ==0.2.1
- coverage ==6.0
- cryptography ==35.0.0
- flaky ==3.7.0
- pytest ==6.2.5
- pytest-freezegun ==0.4.2
- pytest-timeout ==1.4.2
- tornado ==6.1
- trustme ==0.9.0
- furo *
- requests >=2,<2.16
- sphinx >3.0.0
- sphinx-copybutton *
- cryptography >=1.3.4
- idna >=2.0.0
- mypy ==0.910
- nox *
- pytest >=6.2
- tornado >=6.1
- trustme ==0.9.0
- types-backports *
- types-requests *
- Dockerfile * docker
- Dockerfile * docker
ctfd/Dockerfile
docker
- ctfd/ctfd mark-3.3.1 build
ctfd/data/CTFd/Dockerfile
docker
- python 3.7-slim-buster build
gitea/Dockerfile
docker
- gitea/gitea 1.16.5 build
- sanicframework/sanic-build ${BASE_IMAGE_TAG} build
- sanicframework/sanic LTS build
- python 3.7 build
- python 3.7 build
- python 3.7 build
gitlab/Dockerfile
docker
- gitlab/gitlab-ee 15.6.2-ee.0 build
- python 3.8-slim-buster build
- gitlab 5050/wonderland/nest-of-gold/python build
gitlab-runner/Dockerfile
docker
- docker 20.10.21-dind build
jenkins-agent/Dockerfile
docker
- jenkins/ssh-agent 4.1.0-jdk11 build
jenkins-server/Dockerfile
docker
- jenkins/jenkins 2.332.1-jdk11 build
prod/Dockerfile
docker
- docker 20.10.21-dind build
- matplotlib *
- numpy *
- scipy *
- seaborn *
- pip-compile-multi * development
- tox * development
- alabaster ==0.7.12
- babel ==2.9.1
- certifi ==2021.10.8
- charset-normalizer ==2.0.12
- docutils ==0.17.1
- idna ==3.3
- imagesize ==1.3.0
- jinja2 ==3.1.1
- markupsafe ==2.1.1
- packaging ==21.3
- pygments ==2.11.2
- pyparsing ==3.0.7
- pytz ==2022.1
- requests ==2.27.1
- snowballstemmer ==2.2.0
- sphinx ==4.5.0
- sphinxcontrib-applehelp ==1.0.2
- sphinxcontrib-devhelp ==1.0.2
- sphinxcontrib-htmlhelp ==2.0.0
- sphinxcontrib-jsmath ==1.0.1
- sphinxcontrib-qthelp ==1.0.3
- sphinxcontrib-serializinghtml ==1.1.5
- urllib3 ==1.26.9
- click ==7.1.2 test
- flask ==1.0.4 test
- itsdangerous ==1.1.0 test
- jinja2 ==2.10.3 test
- markupsafe ==1.1.1 test
- werkzeug ==1.0.1 test
- asgiref * test
- blinker * test
- coverage * test
- pytest * test
- semantic_version * test
- flask ==2.2.2
- flask-login ==0.6.2
- pytest ==7.2.0
.github/workflows/release.yaml
actions
- @babel/core ^7.11.6 development
- @babel/preset-env ^7.11.5 development
- @fortawesome/fontawesome-free ^5.14.0 development
- babel-loader ^8.1.0 development
- bootstrap ~4.3.1 development
- bootstrap-multimodal ~1.0.4 development
- codemirror ~5.58.2 development
- css-loader ^3.6.0 development
- dayjs ^1.9.6 development
- easymde ^2.10.1 development
- echarts ^4.8.0 development
- eslint ~5.12.0 development
- event-source-polyfill ~1.0.7 development
- file-loader ~3.0.1 development
- highlight.js ^10.4.1 development
- howler ~2.1.2 development
- jquery ~3.5.1 development
- markdown-it ~10.0.0 development
- mini-css-extract-plugin ~0.7.0 development
- node-sass ^4.12.0 development
- nunjucks ~3.2.0 development
- optimize-css-assets-webpack-plugin ~5.0.1 development
- popper.js ^1.15.0 development
- remove-strict-webpack-plugin ~0.1.2 development
- sass-loader ^8.0.0 development
- string-replace-loader ^2.2.0 development
- swagger-js-codegen ~1.12.0 development
- to-string-loader ^1.1.5 development
- typeface-lato ~0.0.54 development
- typeface-raleway ~0.0.54 development
- uglifyjs-webpack-plugin ~2.1.1 development
- vue ^2.6.11 development
- vue-loader 15.9.3 development
- vue-style-loader ^4.1.2 development
- vue-template-compiler ^2.6.11 development
- webpack ~4.28.1 development
- webpack-cli ~3.2.1 development
- webpack-fix-style-only-entries ~0.3.0 development
- webpack-shell-plugin ^0.5.0 development
- whatwg-fetch ~3.0.0 development
- @babel/polyfill ^7.11.5
- assertion-error 1.1.0 development
- balanced-match 1.0.2 development
- brace-expansion 1.1.11 development
- browser-stdout 1.3.1 development
- chai 4.3.6 development
- check-error 1.0.2 development
- commander 2.15.1 development
- concat-map 0.0.1 development
- debug 3.1.0 development
- deep-eql 3.0.1 development
- diff 3.5.0 development
- escape-string-regexp 1.0.5 development
- fs.realpath 1.0.0 development
- get-func-name 2.0.0 development
- glob 7.1.2 development
- growl 1.10.5 development
- has-flag 3.0.0 development
- he 1.1.1 development
- inflight 1.0.6 development
- inherits 2.0.4 development
- loupe 2.3.4 development
- minimatch 3.0.4 development
- minimist 0.0.8 development
- mkdirp 0.5.1 development
- mocha 5.2.0 development
- ms 2.0.0 development
- once 1.4.0 development
- path-is-absolute 1.0.1 development
- pathval 1.1.1 development
- supports-color 5.4.0 development
- type-detect 4.0.8 development
- wrappy 1.0.2 development
- twiddledee 63982d6e193af6ba229de1cc63776e7c09857896
- @electron/get 1.12.2 development
- @sindresorhus/is 0.14.0 development
- @szmarczak/http-timer 1.1.2 development
- @types/node 12.12.48 development
- boolean 3.0.1 development
- buffer-crc32 0.2.13 development
- buffer-from 1.1.1 development
- cacheable-request 6.1.0 development
- clone-response 1.0.2 development
- concat-stream 1.6.2 development
- config-chain 1.1.12 development
- core-js 3.6.5 development
- core-util-is 1.0.2 development
- debug 2.6.9 development
- debug 4.1.1 development
- decompress-response 3.3.0 development
- defer-to-connect 1.1.3 development
- define-properties 1.1.3 development
- detect-node 2.0.4 development
- duplexer3 0.1.4 development
- electron 7.2.4 development
- encodeurl 1.0.2 development
- end-of-stream 1.4.4 development
- env-paths 2.2.0 development
- es6-error 4.1.1 development
- escape-string-regexp 4.0.0 development
- extract-zip 1.7.0 development
- fd-slicer 1.1.0 development
- fs-extra 8.1.0 development
- get-stream 5.1.0 development
- get-stream 4.1.0 development
- global-agent 2.1.12 development
- global-tunnel-ng 2.7.1 development
- globalthis 1.0.1 development
- got 9.6.0 development
- graceful-fs 4.2.4 development
- http-cache-semantics 4.1.0 development
- inherits 2.0.4 development
- ini 1.3.5 development
- isarray 1.0.0 development
- json-buffer 3.0.0 development
- json-stringify-safe 5.0.1 development
- jsonfile 4.0.0 development
- keyv 3.1.0 development
- lodash 4.17.19 development
- lowercase-keys 2.0.0 development
- lowercase-keys 1.0.1 development
- matcher 3.0.0 development
- mimic-response 1.0.1 development
- minimist 1.2.5 development
- mkdirp 0.5.5 development
- ms 2.0.0 development
- ms 2.1.2 development
- normalize-url 4.5.0 development
- npm-conf 1.1.3 development
- object-keys 1.1.1 development
- once 1.4.0 development
- p-cancelable 1.1.0 development
- pend 1.2.0 development
- pify 3.0.0 development
- prepend-http 2.0.0 development
- process-nextick-args 2.0.1 development
- progress 2.0.3 development
- proto-list 1.2.4 development
- pump 3.0.0 development
- readable-stream 2.3.7 development
- responselike 1.0.2 development
- roarr 2.15.3 development
- safe-buffer 5.1.2 development
- sanitize-filename 1.6.3 development
- semver 7.3.2 development
- semver-compare 1.0.0 development
- serialize-error 7.0.1 development
- sprintf-js 1.1.2 development
- string_decoder 1.1.1 development
- sumchecker 3.0.1 development
- to-readable-stream 1.0.0 development
- truncate-utf8-bytes 1.0.2 development
- tunnel 0.0.6 development
- type-fest 0.13.1 development
- typedarray 0.0.6 development
- universalify 0.1.2 development
- url-parse-lax 3.0.0 development
- utf8-byte-length 1.0.4 development
- util-deprecate 1.0.2 development
- wrappy 1.0.2 development
- yauzl 2.10.0 development
- cfgv ==3.3.1
- distlib ==0.3.4
- filelock ==3.6.0
- identify ==2.4.12
- nodeenv ==1.6.0
- platformdirs ==2.5.1
- pre-commit ==2.17.0
- pyyaml ==6.0
- six ==1.16.0
- toml ==0.10.2
- virtualenv ==20.14.0
- uuid file:../../.local/uuid
Pipfile.lock
pypi
- attrs ==21.4.0
- certifi ==2021.10.8
- charset-normalizer ==2.0.12
- gitdb ==4.0.9
- gitpython ==3.1.27
- idna ==3.3
- iniconfig ==1.1.1
- jenkinsapi ==0.3.11
- packaging ==21.3
- pluggy ==1.0.0
- py ==1.11.0
- pyparsing ==3.0.7
- pytest ==7.1.1
- pytz ==2022.1
- requests ==2.27.1
- six ==1.16.0
- smmap ==5.0.0
- tomli ==2.0.1
- urllib3 ==1.26.9
- @babel/code-frame 7.16.0 development
- @babel/helper-validator-identifier 7.15.7 development
- @babel/highlight 7.16.0 development
- @rollup/plugin-node-resolve 13.0.6 development
- @rollup/pluginutils 3.1.0 development
- @types/estree 0.0.39 development
- @types/node 16.11.11 development
- @types/resolve 1.17.1 development
- ansi-styles 3.2.1 development
- buffer-from 1.1.2 development
- builtin-modules 3.2.0 development
- chalk 2.4.2 development
- color-convert 1.9.3 development
- color-name 1.1.3 development
- commander 2.20.3 development
- deepmerge 4.2.2 development
- escape-string-regexp 1.0.5 development
- estree-walker 1.0.1 development
- fsevents 2.3.2 development
- function-bind 1.1.1 development
- has 1.0.3 development
- has-flag 3.0.0 development
- has-flag 4.0.0 development
- is-core-module 2.8.0 development
- is-module 1.0.0 development
- jest-worker 26.6.2 development
- js-tokens 4.0.0 development
- merge-stream 2.0.0 development
- path-parse 1.0.7 development
- picomatch 2.3.0 development
- randombytes 2.1.0 development
- resolve 1.20.0 development
- rollup 2.60.2 development
- rollup-plugin-terser 7.0.2 development
- safe-buffer 5.2.1 development
- serialize-javascript 4.0.0 development
- source-map 0.6.1 development
- source-map 0.7.3 development
- source-map-support 0.5.21 development
- supports-color 7.2.0 development
- supports-color 5.5.0 development
- terser 5.10.0 development
- uuid file:../../.local/uuid
- bleach ==4.1.0
- build ==0.7.0
- certifi ==2021.10.8
- cffi ==1.15.0
- charset-normalizer ==2.0.12
- colorama ==0.4.4
- cryptography ==36.0.2
- docutils ==0.18.1
- idna ==3.3
- importlib-metadata ==4.11.3
- jeepney ==0.7.1
- keyring ==23.5.0
- packaging ==21.3
- pep517 ==0.12.0
- pkginfo ==1.8.2
- pycparser ==2.21
- pygments ==2.11.2
- pyparsing ==3.0.7
- readme-renderer ==34.0
- requests ==2.27.1
- requests-toolbelt ==0.9.1
- rfc3986 ==2.0.0
- secretstorage ==3.3.1
- six ==1.16.0
- tomli ==2.0.1
- tqdm ==4.63.1
- twine ==3.8.0
- urllib3 ==1.26.9
- webencodings ==0.5.1
- zipp ==3.7.0
- uuid file:../../.local/uuid
- alembic ==1.4.3
- aniso8601 ==8.0.0
- attrs ==20.3.0
- bcrypt ==3.1.7
- boto3 ==1.13.9
- botocore ==1.16.26
- certifi ==2020.11.8
- cffi ==1.14.3
- chardet ==3.0.4
- click ==7.1.2
- cmarkgfm ==0.4.2
- dataset ==1.3.1
- docutils ==0.15.2
- flask ==1.1.2
- flask-caching ==1.8.0
- flask-marshmallow ==0.10.1
- flask-migrate ==2.5.3
- flask-restx ==0.2.0
- flask-script ==2.0.6
- flask-sqlalchemy ==2.4.3
- gevent ==20.9.0
- greenlet ==0.4.17
- gunicorn ==20.0.4
- idna ==2.10
- importlib-metadata ==3.7.3
- itsdangerous ==1.1.0
- jinja2 ==2.11.3
- jmespath ==0.10.0
- jsonschema ==3.2.0
- mako ==1.1.3
- markupsafe ==1.1.1
- marshmallow ==2.20.2
- marshmallow-sqlalchemy ==0.17.0
- maxminddb ==1.5.4
- passlib ==1.7.2
- pybluemonday ==0.0.7
- pycparser ==2.20
- pydantic ==1.6.2
- pymysql ==0.9.3
- pyrsistent ==0.17.3
- python-dateutil ==2.8.1
- python-dotenv ==0.13.0
- python-editor ==1.0.4
- python-geoacumen-city ==0.0.1
- pytz ==2020.4
- redis ==3.5.2
- requests ==2.23.0
- s3transfer ==0.3.3
- six ==1.15.0
- sqlalchemy ==1.3.17
- sqlalchemy-utils ==0.36.6
- tenacity ==6.2.0
- typing-extensions ==3.7.4.3
- urllib3 ==1.25.11
- werkzeug ==1.0.1
- wtforms ==2.3.1
- zipp ==3.4.1
- zope.event ==4.5.0
- zope.interface ==5.2.0
- click ==7.1.2 test
- flask ==1.0.4 test
- itsdangerous ==1.1.0 test
- jinja2 ==2.10.3 test
- markupsafe ==1.1.1 test
- werkzeug ==1.0.1 test
- uuid file:../../.local/uuid
gitea/Pipfile.lock
pypi
- uuid file:../../.local/uuid
- certifi ==2021.10.8 test
- charset-normalizer ==2.0.12 test
- coverage ==6.3.2 test
- coveralls ==3.3.1 test
- distlib ==0.3.4 test
- docopt ==0.6.2 test
- filelock ==3.6.0 test
- idna ==3.3 test
- packaging ==21.3 test
- platformdirs ==2.5.1 test
- pluggy ==1.0.0 test
- py ==1.11.0 test
- pyparsing ==3.0.7 test
- requests ==2.27.1 test
- six ==1.16.0 test
- toml ==0.10.2 test
- tox ==3.24.5 test
- urllib3 ==1.26.9 test
- virtualenv ==20.14.0 test