Skip to content

Commit 2afd644

Browse files
github-actions[bot]github-actions[bot]
committed
Add security scan reports [skip ci]
1 parent deb3dda commit 2afd644

5 files changed

Lines changed: 59 additions & 165 deletions

File tree

‎docs/reports/README.md‎

Lines changed: 30 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,30 @@
1+
# DevSecOps Scan Reports
2+
Generated on Sun Sep 7 16:43:57 UTC 2025
3+
4+
## Available Reports
5+
- **angular-xss-sbom**
6+
- [angular-xss-sbom.json](./angular-xss-sbom.json)
7+
- **codeql-results**
8+
- [codeql-results.sarif](./codeql-results.sarif)
9+
- **sca-results**
10+
- [angular-xss-sbom.json](./angular-xss-sbom.json)
11+
- [codeql-results.sarif](./codeql-results.sarif)
12+
- [dependency-check-report.sarif](./dependency-check-report.sarif)
13+
- [proper-zap-format.xml](./proper-zap-format.xml)
14+
- [report_html.html](./report_html.html)
15+
- [report_json.json](./report_json.json)
16+
- [report_md.md](./report_md.md)
17+
- [trufflehog-results.json](./trufflehog-results.json)
18+
- **trufflehog-results**
19+
- [trufflehog-results.json](./trufflehog-results.json)
20+
- **zap-reports**
21+
- [angular-xss-sbom.json](./angular-xss-sbom.json)
22+
- [codeql-results.sarif](./codeql-results.sarif)
23+
- [dependency-check-report.sarif](./dependency-check-report.sarif)
24+
- [proper-zap-format.xml](./proper-zap-format.xml)
25+
- [report_html.html](./report_html.html)
26+
- [report_json.json](./report_json.json)
27+
- [report_md.md](./report_md.md)
28+
- [trufflehog-results.json](./trufflehog-results.json)
29+
- [zap-baseline-report.json](./zap-baseline-report.json)
30+
- [zap-baseline-report.xml](./zap-baseline-report.xml)

‎docs/reports/report_html.html‎

Lines changed: 9 additions & 133 deletions
Original file line numberDiff line numberDiff line change
@@ -212,7 +212,7 @@ <h2>
212212
</h2>
213213

214214
<h3>
215-
Generated on Sun, 7 Sept 2025 14:38:56
215+
Generated on Sun, 7 Sept 2025 16:43:36
216216
</h3>
217217

218218
<h3>
@@ -363,22 +363,22 @@ <h3>Alerts</h3>
363363
<tr>
364364
<td><a href="#90005">Sec-Fetch-Dest Header is Missing</a></td>
365365
<td align="center" class="risk-0">Informational</td>
366-
<td align="center">3</td>
366+
<td align="center">2</td>
367367
</tr>
368368
<tr>
369369
<td><a href="#90005">Sec-Fetch-Mode Header is Missing</a></td>
370370
<td align="center" class="risk-0">Informational</td>
371-
<td align="center">3</td>
371+
<td align="center">2</td>
372372
</tr>
373373
<tr>
374374
<td><a href="#90005">Sec-Fetch-Site Header is Missing</a></td>
375375
<td align="center" class="risk-0">Informational</td>
376-
<td align="center">3</td>
376+
<td align="center">2</td>
377377
</tr>
378378
<tr>
379379
<td><a href="#90005">Sec-Fetch-User Header is Missing</a></td>
380380
<td align="center" class="risk-0">Informational</td>
381-
<td align="center">3</td>
381+
<td align="center">2</td>
382382
</tr>
383383
<tr>
384384
<td><a href="#10049">Storable and Cacheable Content</a></td>
@@ -3113,37 +3113,6 @@ <h3>Alert Detail</h3>
31133113
<td width="80%"></td>
31143114
</tr>
31153115

3116-
<tr>
3117-
<td width="20%"
3118-
class="indent1">URL</td>
3119-
<td width="80%"><a href="http://localhost:4200/robots.txt">http://localhost:4200/robots.txt</a></td>
3120-
</tr>
3121-
<tr>
3122-
<td width="20%"
3123-
class="indent2">Method</td>
3124-
<td width="80%">GET</td>
3125-
</tr>
3126-
<tr>
3127-
<td width="20%"
3128-
class="indent2">Parameter</td>
3129-
<td width="80%">Sec-Fetch-Dest</td>
3130-
</tr>
3131-
<tr>
3132-
<td width="20%"
3133-
class="indent2">Attack</td>
3134-
<td width="80%"></td>
3135-
</tr>
3136-
<tr>
3137-
<td width="20%"
3138-
class="indent2">Evidence</td>
3139-
<td width="80%"></td>
3140-
</tr>
3141-
<tr>
3142-
<td width="20%"
3143-
class="indent2">Other Info</td>
3144-
<td width="80%"></td>
3145-
</tr>
3146-
31473116
<tr>
31483117
<td width="20%"
31493118
class="indent1">URL</td>
@@ -3177,7 +3146,7 @@ <h3>Alert Detail</h3>
31773146

31783147
<tr>
31793148
<td width="20%">Instances</td>
3180-
<td width="80%">3</td>
3149+
<td width="80%">2</td>
31813150
</tr>
31823151
<tr>
31833152
<td width="20%">Solution</td>
@@ -3259,37 +3228,6 @@ <h3>Alert Detail</h3>
32593228
<td width="80%"></td>
32603229
</tr>
32613230

3262-
<tr>
3263-
<td width="20%"
3264-
class="indent1">URL</td>
3265-
<td width="80%"><a href="http://localhost:4200/robots.txt">http://localhost:4200/robots.txt</a></td>
3266-
</tr>
3267-
<tr>
3268-
<td width="20%"
3269-
class="indent2">Method</td>
3270-
<td width="80%">GET</td>
3271-
</tr>
3272-
<tr>
3273-
<td width="20%"
3274-
class="indent2">Parameter</td>
3275-
<td width="80%">Sec-Fetch-Mode</td>
3276-
</tr>
3277-
<tr>
3278-
<td width="20%"
3279-
class="indent2">Attack</td>
3280-
<td width="80%"></td>
3281-
</tr>
3282-
<tr>
3283-
<td width="20%"
3284-
class="indent2">Evidence</td>
3285-
<td width="80%"></td>
3286-
</tr>
3287-
<tr>
3288-
<td width="20%"
3289-
class="indent2">Other Info</td>
3290-
<td width="80%"></td>
3291-
</tr>
3292-
32933231
<tr>
32943232
<td width="20%"
32953233
class="indent1">URL</td>
@@ -3323,7 +3261,7 @@ <h3>Alert Detail</h3>
33233261

33243262
<tr>
33253263
<td width="20%">Instances</td>
3326-
<td width="80%">3</td>
3264+
<td width="80%">2</td>
33273265
</tr>
33283266
<tr>
33293267
<td width="20%">Solution</td>
@@ -3405,37 +3343,6 @@ <h3>Alert Detail</h3>
34053343
<td width="80%"></td>
34063344
</tr>
34073345

3408-
<tr>
3409-
<td width="20%"
3410-
class="indent1">URL</td>
3411-
<td width="80%"><a href="http://localhost:4200/robots.txt">http://localhost:4200/robots.txt</a></td>
3412-
</tr>
3413-
<tr>
3414-
<td width="20%"
3415-
class="indent2">Method</td>
3416-
<td width="80%">GET</td>
3417-
</tr>
3418-
<tr>
3419-
<td width="20%"
3420-
class="indent2">Parameter</td>
3421-
<td width="80%">Sec-Fetch-Site</td>
3422-
</tr>
3423-
<tr>
3424-
<td width="20%"
3425-
class="indent2">Attack</td>
3426-
<td width="80%"></td>
3427-
</tr>
3428-
<tr>
3429-
<td width="20%"
3430-
class="indent2">Evidence</td>
3431-
<td width="80%"></td>
3432-
</tr>
3433-
<tr>
3434-
<td width="20%"
3435-
class="indent2">Other Info</td>
3436-
<td width="80%"></td>
3437-
</tr>
3438-
34393346
<tr>
34403347
<td width="20%"
34413348
class="indent1">URL</td>
@@ -3469,7 +3376,7 @@ <h3>Alert Detail</h3>
34693376

34703377
<tr>
34713378
<td width="20%">Instances</td>
3472-
<td width="80%">3</td>
3379+
<td width="80%">2</td>
34733380
</tr>
34743381
<tr>
34753382
<td width="20%">Solution</td>
@@ -3551,37 +3458,6 @@ <h3>Alert Detail</h3>
35513458
<td width="80%"></td>
35523459
</tr>
35533460

3554-
<tr>
3555-
<td width="20%"
3556-
class="indent1">URL</td>
3557-
<td width="80%"><a href="http://localhost:4200/robots.txt">http://localhost:4200/robots.txt</a></td>
3558-
</tr>
3559-
<tr>
3560-
<td width="20%"
3561-
class="indent2">Method</td>
3562-
<td width="80%">GET</td>
3563-
</tr>
3564-
<tr>
3565-
<td width="20%"
3566-
class="indent2">Parameter</td>
3567-
<td width="80%">Sec-Fetch-User</td>
3568-
</tr>
3569-
<tr>
3570-
<td width="20%"
3571-
class="indent2">Attack</td>
3572-
<td width="80%"></td>
3573-
</tr>
3574-
<tr>
3575-
<td width="20%"
3576-
class="indent2">Evidence</td>
3577-
<td width="80%"></td>
3578-
</tr>
3579-
<tr>
3580-
<td width="20%"
3581-
class="indent2">Other Info</td>
3582-
<td width="80%"></td>
3583-
</tr>
3584-
35853461
<tr>
35863462
<td width="20%"
35873463
class="indent1">URL</td>
@@ -3615,7 +3491,7 @@ <h3>Alert Detail</h3>
36153491

36163492
<tr>
36173493
<td width="20%">Instances</td>
3618-
<td width="80%">3</td>
3494+
<td width="80%">2</td>
36193495
</tr>
36203496
<tr>
36213497
<td width="20%">Solution</td>

‎docs/reports/report_md.md‎

Lines changed: 8 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -32,10 +32,10 @@ ZAP by [Checkmarx](https://checkmarx.com/).
3232
| Base64 Disclosure | Informational | 4 |
3333
| Information Disclosure - Suspicious Comments | Informational | 4 |
3434
| Modern Web Application | Informational | 2 |
35-
| Sec-Fetch-Dest Header is Missing | Informational | 3 |
36-
| Sec-Fetch-Mode Header is Missing | Informational | 3 |
37-
| Sec-Fetch-Site Header is Missing | Informational | 3 |
38-
| Sec-Fetch-User Header is Missing | Informational | 3 |
35+
| Sec-Fetch-Dest Header is Missing | Informational | 2 |
36+
| Sec-Fetch-Mode Header is Missing | Informational | 2 |
37+
| Sec-Fetch-Site Header is Missing | Informational | 2 |
38+
| Sec-Fetch-User Header is Missing | Informational | 2 |
3939
| Storable and Cacheable Content | Informational | 10 |
4040

4141

@@ -841,20 +841,14 @@ Specifies how and where the data would be used. For instance, if the value is au
841841
* Attack: ``
842842
* Evidence: ``
843843
* Other Info: ``
844-
* URL: http://localhost:4200/robots.txt
845-
* Method: `GET`
846-
* Parameter: `Sec-Fetch-Dest`
847-
* Attack: ``
848-
* Evidence: ``
849-
* Other Info: ``
850844
* URL: http://localhost:4200/sitemap.xml
851845
* Method: `GET`
852846
* Parameter: `Sec-Fetch-Dest`
853847
* Attack: ``
854848
* Evidence: ``
855849
* Other Info: ``
856850

857-
Instances: 3
851+
Instances: 2
858852

859853
### Solution
860854

@@ -889,20 +883,14 @@ Allows to differentiate between requests for navigating between HTML pages and r
889883
* Attack: ``
890884
* Evidence: ``
891885
* Other Info: ``
892-
* URL: http://localhost:4200/robots.txt
893-
* Method: `GET`
894-
* Parameter: `Sec-Fetch-Mode`
895-
* Attack: ``
896-
* Evidence: ``
897-
* Other Info: ``
898886
* URL: http://localhost:4200/sitemap.xml
899887
* Method: `GET`
900888
* Parameter: `Sec-Fetch-Mode`
901889
* Attack: ``
902890
* Evidence: ``
903891
* Other Info: ``
904892

905-
Instances: 3
893+
Instances: 2
906894

907895
### Solution
908896

@@ -937,20 +925,14 @@ Specifies the relationship between request initiator's origin and target's origi
937925
* Attack: ``
938926
* Evidence: ``
939927
* Other Info: ``
940-
* URL: http://localhost:4200/robots.txt
941-
* Method: `GET`
942-
* Parameter: `Sec-Fetch-Site`
943-
* Attack: ``
944-
* Evidence: ``
945-
* Other Info: ``
946928
* URL: http://localhost:4200/sitemap.xml
947929
* Method: `GET`
948930
* Parameter: `Sec-Fetch-Site`
949931
* Attack: ``
950932
* Evidence: ``
951933
* Other Info: ``
952934

953-
Instances: 3
935+
Instances: 2
954936

955937
### Solution
956938

@@ -985,20 +967,14 @@ Specifies if a navigation request was initiated by a user.
985967
* Attack: ``
986968
* Evidence: ``
987969
* Other Info: ``
988-
* URL: http://localhost:4200/robots.txt
989-
* Method: `GET`
990-
* Parameter: `Sec-Fetch-User`
991-
* Attack: ``
992-
* Evidence: ``
993-
* Other Info: ``
994970
* URL: http://localhost:4200/sitemap.xml
995971
* Method: `GET`
996972
* Parameter: `Sec-Fetch-User`
997973
* Attack: ``
998974
* Evidence: ``
999975
* Other Info: ``
1000976

1001-
Instances: 3
977+
Instances: 2
1002978

1003979
### Solution
1004980

‎docs/reports/zap-baseline-report.json‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
{
2+
"site": "http://localhost:4200",
3+
"generated": "2025-09-07T12:00:00",
4+
"version": "2.11.0",
5+
"alerts": []
6+
}

‎docs/reports/zap-baseline-report.xml‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
<?xml version="1.0" encoding="UTF-8"?>
2+
<OWASPZAPReport version="2.11.0" generated="2025-09-07T12:00:00">
3+
<site name="http://localhost:4200">
4+
<alerts></alerts>
5+
</site>
6+
</OWASPZAPReport>

0 commit comments

Comments
 (0)