Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update react-scripts #6

Open
wants to merge 31 commits into
base: master
Choose a base branch
from
Open
Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
31 commits
Select commit Hold shift + click to select a range
088a006
First steps for adding new game mode 'cumulus'
ChristophNiehoff Nov 16, 2022
d6f599a
Added preliminary version of cumulus cards
ChristophNiehoff Nov 17, 2022
aa71e63
Update to cumulus v0.1.1
ChristophNiehoff Dec 12, 2022
1bbb51a
Fix failing test after updating to latest cumulus cards
ChristophNiehoff Dec 12, 2022
7053eea
Update to latest cumulus version
ChristophNiehoff Jan 30, 2023
7486b40
Added latest version of cumulus cards
ChristophNiehoff Feb 7, 2023
d8230c7
Change trump suit of cumulus
ChristophNiehoff Feb 7, 2023
390da09
bump version
ChristophNiehoff Feb 10, 2023
bad110c
Updated Readme with news about Cumulus
ChristophNiehoff Feb 21, 2023
90d6026
Added dependabot config
ChristophNiehoff Mar 15, 2023
ac5d634
Bump @fortawesome/react-fontawesome from 0.1.18 to 0.2.0
dependabot[bot] Mar 16, 2023
d83d6b5
Bump eslint-plugin-react from 7.31.11 to 7.32.2
dependabot[bot] Mar 16, 2023
ab55f00
Merge pull request #3 from TNG/dependabot/npm_and_yarn/eslint-plugin-…
ChristophNiehoff Mar 21, 2023
d03f27c
Merge pull request #2 from TNG/dependabot/npm_and_yarn/fortawesome/re…
ChristophNiehoff Mar 21, 2023
8fcc9f3
Convert CopyButton to TypeScript
ghost91- Mar 24, 2023
9f3cee5
Convert Timer component to TypeScript
ghost91- Mar 24, 2023
1cde1f1
Merge pull request #17 from TNG/convert-copybutton-to-ts
ChristophNiehoff Mar 31, 2023
e76f555
Merge pull request #16 from TNG/convert-timer-to-ts
ChristophNiehoff Mar 31, 2023
c0ddf99
Convert ImageModel to TypeScript
ghost91- Apr 14, 2023
4abaee4
Merge pull request #22 from TNG/convert-image-model-to-ts
ChristophNiehoff Apr 18, 2023
727b65a
Bump glob-parent and react-scripts
dependabot[bot] Feb 7, 2023
17cd553
Rename components .js -> .jsx
ChristophNiehoff Mar 11, 2023
deb26c8
Fix properties in test case
ChristophNiehoff Mar 11, 2023
c0d4a70
Fix error in autoprefixer dependency, See https://stackoverflow.com/q…
ChristophNiehoff Mar 11, 2023
62ca2d3
Update eslint
ChristophNiehoff Mar 11, 2023
0862585
Make Docker build working again
ChristophNiehoff Mar 11, 2023
eb16efd
Switch base64 encoding from Buffer.from(...).toString('base64') to bt…
ChristophNiehoff Mar 24, 2023
e08a42a
Move threat-bar sligthly to left
ChristophNiehoff Mar 24, 2023
b4687ea
Fix error when trying to load threat models
ghost91- Apr 14, 2023
84d25f1
Change order of docker layers for faster rebuild if there are only co…
ChristophNiehoff Apr 18, 2023
abd12e6
Added missing library. (Probably got lost during resolving merge conf…
ChristophNiehoff Apr 18, 2023
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions .eslintrc.cjs
Original file line number Diff line number Diff line change
Expand Up @@ -10,6 +10,10 @@ module.exports = {

extends: ['eslint:recommended', 'plugin:prettier/recommended'],

rules: {
'prettier/prettier': 0,
},

overrides: [
{
// all typescript files
Expand Down
11 changes: 11 additions & 0 deletions .github/dependabot.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,11 @@
# To get started with Dependabot version updates, you'll need to specify which
# package ecosystems to update and where the package manifests are located.
# Please see the documentation for all configuration options:
# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates

version: 2
updates:
- package-ecosystem: "npm" # See documentation for possible values
directory: "/" # Location of package manifests
schedule:
interval: "daily"
23 changes: 20 additions & 3 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
Elevation of Privilege
======================
[![Tests](https://github.com/dehydr8/elevation-of-privilege/actions/workflows/checks.yml/badge.svg)](https://github.com/dehydr8/elevation-of-privilege/actions/workflows/checks.yml)
[![Tests](https://github.com/tng/elevation-of-privilege/actions/workflows/checks.yml/badge.svg)](https://github.com/tng/elevation-of-privilege/actions/workflows/checks.yml)
[![Maintainability](https://api.codeclimate.com/v1/badges/5449a4d61cdfed258204/maintainability)](https://codeclimate.com/github/dehydr8/elevation-of-privilege/maintainability)
[![Test Coverage](https://api.codeclimate.com/v1/badges/5449a4d61cdfed258204/test_coverage)](https://codeclimate.com/github/dehydr8/elevation-of-privilege/test_coverage)

Expand Down Expand Up @@ -28,11 +28,28 @@ But most important the game will teach the developers to look at the system with

### How is this done?

In [Elevation of Privilege](https://download.microsoft.com/download/F/A/E/FAE1434F-6D22-4581-9804-8B60C04354E4/EoP_Whitepaper.pdf), the game invented by Microsoft, each card represents a particular attack on the system. The cards are meant as a starting point for brainstorming and discussions, if and where such an attack can be used on the system. During its flow the game guides the players through these threats in a structured manner. As a result a list of possible security weaknesses is generated.
In [Elevation of Privilege](https://download.microsoft.com/download/F/A/E/FAE1434F-6D22-4581-9804-8B60C04354E4/EoP_Whitepaper.pdf), the game invented by Microsoft, each card represents a particular attack on the system. The cards are meant as a starting point for brainstorming and discussions, if and where such an attack can be used on the system. During its flow the game guides the players through these threats in a structured manner. As a result a list of possible security weaknesses is generated.

## Card decks

Currently, three game modes are supported, reflecting different aspects of modern software development projects:

### Elevation of Privilege

This is the classic [Elevation of Privilege](https://shostack.org/games/elevation-of-privilege) game, developed by [Adam Shostack](https://github.com/adamshostack).
![card EoP](docs/EoP_cards_attributed.png)

### OWASP Cornucopia

Inspired by this, the game [Cornucopia](https://owasp.org/www-project-cornucopia/) has been developed by the [Open Web Application Security Project](https://owasp.org/) (OWASP). It specifically targets threat modeling of web application and might be an easy starting point for beginning threat modeling.

![card decks](docs/eop_cornucopia.png)
![card Cornucopia](docs/Cornucopia_cards_attributed.png)

### Cumulus

[Cumulus](https://github.com/TNG/cumulus), developed at [TNG Technology Consulting](https://www.tngtech.com/en/index.html), is a threat modeling game targeting cloud and DevOps setups.

![card Cumulus](docs/Cumulus_cards_attributed.png)

## For users

Expand Down
4 changes: 2 additions & 2 deletions cornucopiaCards/style.css
Original file line number Diff line number Diff line change
@@ -1,3 +1,3 @@
.cornucopiacard {
.cornucopia-card {
background-image: url("cornucopia.png");
}
}
8 changes: 6 additions & 2 deletions docker/client.dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -2,11 +2,15 @@ FROM node:16.13.1-alpine3.14 AS builder
WORKDIR /usr/src/app
COPY package.json ./
COPY package-lock.json ./
RUN npm ci
COPY tsconfig.json ./
COPY ./public ./public
COPY ./src ./src
COPY ./cornucopiaCards ./cornucopiaCards
RUN npm ci
COPY ./.eslintignore ./.eslintignore
COPY ./.eslintrc.cjs ./.eslintrc.cjs
COPY ./.prettierignore ./.prettierignore
COPY ./.prettierrc.cjs ./.prettierc.cjs
COPY ./src ./src
RUN npm run build:client

FROM nginxinc/nginx-unprivileged:1.20.1-alpine
Expand Down
2 changes: 1 addition & 1 deletion docker/server.dockerfile
Original file line number Diff line number Diff line change
Expand Up @@ -2,9 +2,9 @@ FROM node:16.13.1-alpine3.14 AS builder
WORKDIR /usr/src/app
COPY package.json ./
COPY package-lock.json ./
RUN npm ci
COPY tsconfig.server.json ./
COPY ./src ./src
RUN npm ci
RUN npm run build:server

FROM node:16.13.1-alpine3.14 AS dependency-installer
Expand Down
Binary file added docs/Cornucopia_cards_attributed.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added docs/Cumulus_cards_attributed.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file added docs/EoP_cards_attributed.png
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
Binary file removed docs/eop_cornucopia.png
Binary file not shown.
Loading