Prepare release 1.8.1

OWASP · Jan 13, 2024 · c7c1c0a · c7c1c0a
1 parent 1889483
commit c7c1c0a
Show file tree

Hide file tree

Showing 13 changed files with 21 additions and 19 deletions.
diff --git a/Dockerfile b/Dockerfile
@@ -1,7 +1,7 @@
 FROM amazoncorretto:21.0.1-alpine
 
 ARG argBasedPassword="default"
-ARG argBasedVersion="1.8.0"
+ARG argBasedVersion="1.8.1"
 ARG spring_profile=""
 ENV SPRING_PROFILES_ACTIVE=$spring_profile
 ENV ARG_BASED_PASSWORD=$argBasedPassword

diff --git a/Dockerfile.web b/Dockerfile.web
@@ -1,5 +1,5 @@
-FROM jeroenwillemsen/wrongsecrets:1.8.0-no-vault
-ARG argBasedVersion="1.8.0-no-vault"
+FROM jeroenwillemsen/wrongsecrets:1.8.1-no-vault
+ARG argBasedVersion="1.8.1-no-vault"
 ARG CANARY_URLS="http://canarytokens.com/terms/about/s7cfbdakys13246ewd8ivuvku/post.jsp,http://canarytokens.com/terms/about/y0all60b627gzp19ahqh7rl6j/post.jsp"
 ARG CTF_ENABLED=false
 ARG HINTS_ENABLED=true

diff --git a/README.md b/README.md
@@ -15,7 +15,7 @@
 
 Welcome to the OWASP WrongSecrets game! The game is packed with real life examples of how to _not_ store secrets in your software. Each of these examples is captured in a challenge, which you need to solve using various tools and techniques. Solving these challenges will help you recognize common mistakes & can help you to reflect on your own secrets management strategy.
 
-Can you solve all the 42 challenges?
+Can you solve all the 43 challenges?
 
 Try some of them on [our Heroku demo environment](https://wrongsecrets.herokuapp.com/).
 
@@ -284,16 +284,16 @@ Contributors:
 - [Diamond Rivero @diamant3](https://www.github.com/diamant3)
 - [Adarsh A @adarsh-a-tw](https://www.github.com/adarsh-a-tw)
 - [Filip Chyla @fchyla](https://www.github.com/fchyla)
-- [Dmitry Litosh @Dlitosh](https://www.github.com/Dlitosh)
-- [Turjo Chowdhury @turjoc120](https://www.github.com/turjoc120)
 - [Norbert Wolniak @nwolniak](https://www.github.com/nwolniak)
+- [Turjo Chowdhury @turjoc120](https://www.github.com/turjoc120)
+- [Vineeth Jagadeesh @djvinnie](https://www.github.com/djvinnie)
+- [Dmitry Litosh @Dlitosh](https://www.github.com/Dlitosh)
 - [Josh Grossman @tghosth](https://www.github.com/tghosth)
 - [alphasec @alphasecio](https://www.github.com/alphasecio)
 - [CaduRoriz @CaduRoriz](https://www.github.com/CaduRoriz)
 - [Madhu Akula @madhuakula](https://www.github.com/madhuakula)
 - [Mike Woudenberg @mikewoudenberg](https://www.github.com/mikewoudenberg)
 - [Spyros @northdpole](https://www.github.com/northdpole)
-- [Vineeth Jagadeesh @djvinnie](https://www.github.com/djvinnie)
 - [RubenAtBinx @RubenAtBinx](https://www.github.com/RubenAtBinx)
 - [za @za](https://www.github.com/za)
 - [Alex Bender @alex-bender](https://www.github.com/alex-bender)
@@ -312,6 +312,7 @@ Testers:
 Special thanks:
 
 - [Madhu Akula @madhuakula @madhuakula](https://www.github.com/madhuakula)
+- [Nanne Baars @nbaars @nbaars](https://www.github.com/nbaars)
 - [Björn Kimminich @bkimminich](https://www.github.com/bkimminich)
 - [Dan Gora @devsecops](https://www.github.com/devsecops)
 - [Xiaolu Dai @saragluna](https://www.github.com/saragluna)

diff --git a/aws/k8s/secret-challenge-vault-deployment.yml b/aws/k8s/secret-challenge-vault-deployment.yml
@@ -41,7 +41,7 @@ spec:
             volumeAttributes:
               secretProviderClass: "wrongsecrets-aws-secretsmanager"
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.8.0-k8s-vault
+        - image: jeroenwillemsen/wrongsecrets:1.8.1-k8s-vault
           imagePullPolicy: IfNotPresent
           name: secret-challenge
           securityContext:

diff --git a/azure/k8s/secret-challenge-vault-deployment.yml.tpl b/azure/k8s/secret-challenge-vault-deployment.yml.tpl
@@ -41,7 +41,7 @@ spec:
             volumeAttributes:
               secretProviderClass: "azure-wrongsecrets-vault"
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.8.0-k8s-vault
+        - image: jeroenwillemsen/wrongsecrets:1.8.1-k8s-vault
           imagePullPolicy: IfNotPresent
           name: secret-challenge
           securityContext:

diff --git a/fly.toml b/fly.toml
@@ -8,7 +8,7 @@ app = "wrongsecrets"
 primary_region = "ams"
 
 [build]
-  image = "docker.io/jeroenwillemsen/wrongsecrets:1.8.0-no-vault"
+  image = "docker.io/jeroenwillemsen/wrongsecrets:1.8.1-no-vault"
 
 [env]
   K8S_ENV = "Fly(Docker)"

diff --git a/gcp/k8s/secret-challenge-vault-deployment.yml.tpl b/gcp/k8s/secret-challenge-vault-deployment.yml.tpl
@@ -39,7 +39,7 @@ spec:
             volumeAttributes:
               secretProviderClass: "wrongsecrets-gcp-secretsmanager"
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.8.0-k8s-vault
+        - image: jeroenwillemsen/wrongsecrets:1.8.1-k8s-vault
           imagePullPolicy: IfNotPresent
           name: secret-challenge
           ports:

diff --git a/k8s/secret-challenge-deployment.yml b/k8s/secret-challenge-deployment.yml
@@ -28,7 +28,7 @@ spec:
         runAsGroup: 2000
         fsGroup: 2000
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.8.0-no-vault
+        - image: jeroenwillemsen/wrongsecrets:1.8.1-no-vault
           imagePullPolicy: IfNotPresent
           name: secret-challenge
           ports:

diff --git a/k8s/secret-challenge-vault-deployment.yml b/k8s/secret-challenge-vault-deployment.yml
@@ -30,7 +30,7 @@ spec:
         runAsNonRoot: true
       serviceAccountName: vault
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.8.0-k8s-vault
+        - image: jeroenwillemsen/wrongsecrets:1.8.1-k8s-vault
           imagePullPolicy: IfNotPresent
           name: secret-challenge
           securityContext:

diff --git a/okteto/k8s/secret-challenge-ctf-deployment.yml b/okteto/k8s/secret-challenge-ctf-deployment.yml
@@ -28,7 +28,7 @@ spec:
         runAsGroup: 2000
         fsGroup: 2000
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.8.0-no-vault
+        - image: jeroenwillemsen/wrongsecrets:1.8.1-no-vault
           name: secret-challenge-ctf
           imagePullPolicy: IfNotPresent
           securityContext:

diff --git a/okteto/k8s/secret-challenge-deployment.yml b/okteto/k8s/secret-challenge-deployment.yml
@@ -28,7 +28,7 @@ spec:
         runAsGroup: 2000
         fsGroup: 2000
       containers:
-        - image: jeroenwillemsen/wrongsecrets:1.8.0-no-vault
+        - image: jeroenwillemsen/wrongsecrets:1.8.1-no-vault
           name: secret-challenge
           imagePullPolicy: IfNotPresent
           securityContext:

diff --git a/pom.xml b/pom.xml
@@ -11,7 +11,7 @@
 
   <groupId>org.owasp</groupId>
   <artifactId>wrongsecrets</artifactId>
-  <version>1.8.0-SNAPSHOT</version>
+  <version>1.8.1-SNAPSHOT</version>
 
   <name>OWASP WrongSecrets</name>
   <description>Examples with how to not use secrets</description>

diff --git a/src/main/resources/templates/welcome.html b/src/main/resources/templates/welcome.html
@@ -116,16 +116,16 @@
                         <li><a href='https://www.github.com/diamant3'>Diamond Rivero @diamant3</a></li>
                         <li><a href='https://www.github.com/adarsh-a-tw'>Adarsh A @adarsh-a-tw</a></li>
                         <li><a href='https://www.github.com/fchyla'>Filip Chyla @fchyla</a></li>
-                        <li><a href='https://www.github.com/Dlitosh'>Dmitry Litosh @Dlitosh</a></li>
-                        <li><a href='https://www.github.com/turjoc120'>Turjo Chowdhury @turjoc120</a></li>
                         <li><a href='https://www.github.com/nwolniak'>Norbert Wolniak @nwolniak</a></li>
+                        <li><a href='https://www.github.com/turjoc120'>Turjo Chowdhury @turjoc120</a></li>
+                        <li><a href='https://www.github.com/djvinnie'>Vineeth Jagadeesh @djvinnie</a></li>
+                        <li><a href='https://www.github.com/Dlitosh'>Dmitry Litosh @Dlitosh</a></li>
                         <li><a href='https://www.github.com/tghosth'>Josh Grossman @tghosth</a></li>
                         <li><a href='https://www.github.com/alphasecio'>alphasec @alphasecio</a></li>
                         <li><a href='https://www.github.com/CaduRoriz'>CaduRoriz @CaduRoriz</a></li>
                         <li><a href='https://www.github.com/madhuakula'>Madhu Akula @madhuakula</a></li>
                         <li><a href='https://www.github.com/mikewoudenberg'>Mike Woudenberg @mikewoudenberg</a></li>
                         <li><a href='https://www.github.com/northdpole'>Spyros @northdpole</a></li>
-                        <li><a href='https://www.github.com/djvinnie'>Vineeth Jagadeesh @djvinnie</a></li>
                         <li><a href='https://www.github.com/RubenAtBinx'>RubenAtBinx @RubenAtBinx</a></li>
                         <li><a href='https://www.github.com/za'>za @za</a></li>
                         <li><a href='https://www.github.com/alex-bender'>Alex Bender @alex-bender</a></li>
@@ -140,6 +140,7 @@
                     Special mentions for helping out:
                     <ul>
                         <li><a href='https://www.github.com/madhuakula'>Madhu Akula @madhuakula @madhuakula</a></li>
+                        <li><a href='https://www.github.com/nbaars'>Nanne Baars @nbaars @nbaars</a></li>
                         <li><a href='https://www.github.com/bkimminich'>Björn Kimminich @bkimminich</a></li>
                         <li><a href='https://www.github.com/devsecops'>Dan Gora @devsecops</a></li>
                         <li><a href='https://www.github.com/saragluna'>Xiaolu Dai @saragluna</a></li>