• A docker-containerized micro-service for https://cyber-dojo.org.
• An HTTP Ruby Sinatra service for diffing two sets of files.
• Demonstrates a Kosli instrumented GitHub CI workflow deploying, with Continuous Compliance, to its staging AWS environment.
• Deployment to its production AWS environment is via a separate promotion workflow.
• Uses Attestation patterns from https://www.kosli.com/blog/using-kosli-attest-in-github-action-workflows-some-tips/

Development

There are two sets of tests:

• server: these run from inside the differ container
• client: these run from outside the differ container, making api calls only

# Build the images
$ make {image_server|image_client}

# Run all tests
$ make {test_server|test_client}

# Run only specific tests
$ ./bin/run_tests.sh {-h|--help}
$ ./bin/run_tests.sh server B56

# Check test metrics
$ make {metrics_test_server|metrics_test_client}

# Check test coverage metrics
$ make {metrics_coverage_server|metrics_coverage_client}

# Check image for snyk vulnerabilities
$ make snyk_container_test 

# Run demo
$ make demo

API

• GET alive
• GET ready
• GET sha
• GET diff_files(id,was_index,now_index)
• GET diff_summary(id,was_index,now_index)

Screenshots