SonarQube Stackhawk DAST Demo Repo

This application is an intentional vulnerable Java Spring-Boot application with Thymeleaf. It is use for training purposes only! Run the application Go to the root folder of the application and run using Maven mvn spring-boot:run The application fills itself with data at startup wait until you see READY in the console. You can access the application on http://localhost:8081 By default there are two users configured you can access Username Password User type Admin admin ADMIN User user CUSTOMER DAST Scan with StackHawk Run a DAST scan with StackHawk, producing a stackhawk.sarif file as output. This can later be ingested into SonarQube. export SARIF_ARTIFACT=true hawk scan Adding the stackhawk.sarif to the Sonar Scan via - Dsonar.sarifReportPaths=stackhawk.sarif parameter: # Get the current branch name directly using command substitution CURRENT_BRANCH=$(git branch --show-current) # Check if the command was successful and a branch name was found if [ -z "$CURRENT_BRANCH" ]; then echo "Er