├── .gitattributes
├── .github
├── FUNDING.yml
├── dependabot.yml
└── workflows
│ └── validate.yml
├── .gitignore
├── LICENSE
├── README.md
├── schema.json
└── src
└── data
└── collection.json
/.gitattributes:
--------------------------------------------------------------------------------
1 | * text=auto eol=lf
2 |
3 | *.css text
4 | *.htm text
5 | *.html text
6 | *.js text
7 | *.md text
8 | *.svg text
9 | *.txt text
10 | *.xml text
11 | *.xsl text
12 | *.yml text
13 | *.yaml text
14 | *.json text
15 | *.sh text
16 | *.nav text
17 |
18 | *.pdf binary
19 | *.png binary
20 | *.gif binary
21 | *.jpg binary
22 |
--------------------------------------------------------------------------------
/.github/FUNDING.yml:
--------------------------------------------------------------------------------
1 | custom: https://owasp.org/donate/?reponame=www-project-vulnerable-web-applications-directory&title=OWASP+Vulnerable+Web+Applications+Directory
2 |
--------------------------------------------------------------------------------
/.github/dependabot.yml:
--------------------------------------------------------------------------------
1 | # Please see the documentation for all configuration options:
2 | # https://docs.github.com/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file
3 |
4 | version: 2
5 | updates:
6 | - package-ecosystem: "github-actions" # See documentation for possible values
7 | directory: "/" # Location of package manifests
8 | schedule:
9 | interval: "weekly"
10 | groups:
11 | dependencies:
12 | applies-to: version-updates
13 | patterns:
14 | - "*"
15 |
--------------------------------------------------------------------------------
/.github/workflows/validate.yml:
--------------------------------------------------------------------------------
1 | name: Validate JSONs
2 |
3 | on:
4 | pull_request_target:
5 | paths:
6 | - '**.json'
7 | workflow_dispatch:
8 |
9 | permissions:
10 | contents: read
11 | pull-requests: write
12 |
13 | jobs:
14 | schema-check:
15 | runs-on: ubuntu-latest
16 | steps:
17 | - name: Checkout
18 | uses: actions/checkout@v4
19 | with:
20 | ref: ${{github.event.pull_request.head.ref}}
21 | repository: ${{github.event.pull_request.head.repo.full_name}}
22 | - name: Setup Node
23 | uses: actions/setup-node@v4
24 | with:
25 | node-version: '20.x'
26 | - name: Install dependencies
27 | run: |
28 | npm install -g ajv-formats
29 | npm install -g ajv-cli
30 | - name: Run schema check
31 | run: |
32 | ajv validate -s schema.json -d src/data/collection.json --all-errors --errors=text --verbose=true -c=ajv-formats 1>> log.txt 2>&1
33 | - name: Show Validation Issues
34 | if: failure()
35 | run: cat log.txt
36 | - name: Attach Log
37 | uses: actions/upload-artifact@v4
38 | if: failure()
39 | with:
40 | name: JSONValidationLog
41 | path: log.txt
42 | - name: Comment Validation Issues
43 | if: failure()
44 | uses: actions/github-script@v7
45 | with:
46 | github-token: ${{secrets.GITHUB_TOKEN}}
47 | script: |
48 | const fs = require("fs");
49 | const logPath = `${process.env.GITHUB_WORKSPACE}/log.txt`;
50 | const logString = fs.readFileSync(logPath).toString().trimEnd();
51 | github.issues.createComment({
52 | issue_number: ${{ github.event.number }},
53 | owner: context.repo.owner,
54 | repo: context.repo.repo,
55 | body: `**The following issues were identified:**\n\nSummary
\n\n\`\`\`\n${logString}\n\`\`\`\n\n