From 4dbbee1991a5eecbd9361f902ff8f65de234e2da Mon Sep 17 00:00:00 2001 From: Ivan Ilyichev Date: Wed, 4 Feb 2026 18:11:55 +0300 Subject: [PATCH 1/6] docs: add PR template --- .github/pull_request_template.md | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) create mode 100644 .github/pull_request_template.md diff --git a/.github/pull_request_template.md b/.github/pull_request_template.md new file mode 100644 index 00000000..3e631f65 --- /dev/null +++ b/.github/pull_request_template.md @@ -0,0 +1,17 @@ +## Goal +Briefly describe what this PR accomplishes. + +## Changes +- List the main changes made +- Include any new files, modifications, or deletions + +## Testing +Describe how these changes are tested. + +## Artifacts & Screemshots +Provide list if artifacts and screenshots + +## Checklist +- [ ] Title is clear and descriptive +- [ ] Documentation/README updated if needed +- [ ] No secrets or large temporary files included \ No newline at end of file From 24a7107c1342f8102a1d9e63fec27d9c98e41ad3 Mon Sep 17 00:00:00 2001 From: Ivan Ilyichev Date: Wed, 4 Feb 2026 19:04:16 +0300 Subject: [PATCH 2/6] docs(lab1): add submission1 triage report --- labs/submission1.md | 143 ++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 143 insertions(+) create mode 100644 labs/submission1.md diff --git a/labs/submission1.md b/labs/submission1.md new file mode 100644 index 00000000..206d7e24 --- /dev/null +++ b/labs/submission1.md @@ -0,0 +1,143 @@ +# Triage Report — OWASP Juice Shop + +## Scope & Asset +- Asset: OWASP Juice Shop (local lab instance) +- Image: `bkimminich/juice-shop:v19.0.0` +- Release link/date: https://github.com/juice-shop/juice-shop/releases/tag/v19.0.0 — Released approximately 4 months ago (October 2025) +- Image digest (optional): sha256:2a95df217ff812f173a6ee032816172e401f641d2a9cf526011d62b9734b503c + +## Environment +- Host OS: macOS 26.2 +- Docker Version: 28.0.4 (Docker Desktop 4.40.0) + +## Deployment Details + +- Run command used: + + ```bash + docker run -d --name juice-shop -p 127.0.0.1:3000:3000 bkimminich/juice-shop:v19.0.0 + ``` + +- Accessed URL: `http://127.0.0.1:3000` +- Network exposure: 127.0.0.1 only [x] Yes [ ] No + - Explanation: The `-p 127.0.0.1:3000:3000` flag binds the container port only to localhost (127.0.0.1), preventing external network access. This is a security best practice for lab environments. + +## Health Check Evidence + +- Page load (screenshot of home page): + + Example embed format: + + ![Juice Shop home](/DevSecOps-Intro/labs/lab_images/lab1_owasp.png) + + +- API check — first 10 lines from: + + ```bash + curl -s http://127.0.0.1:3000/rest/products | head + ``` + + Output: + + ```html + + + + Error: Unexpected path: /rest/products +