Jeroen Willemsen

Various github instruction secret challenges

1

- [ ] Have a Github wiki instruction secret as per the Stammtich Hamburg meetup: we should have a secret in the wiki as part of an "instruction" or "example"...

Create a separate repo where you allow actions to run, so you can get the secret out

3

Create a separate repo where you allow actions to run, so you can get the secret out. The idea would be that you have a challenge with a forkable action+Secret,...

Have a github action to compare git-secrets and trufflehog without any configuration update

3

Create a multistage pipelien in which we check the performance of - [ ] git-secrets (https://github.com/awslabs/git-secrets) - [ ] git-leaks (https://github.com/zricethezav/gitleaks) - https://github.com/gitleaks/gitleaks-action (only commercial? will have to ask for...

Create a multi juicer type of setup

5

We need to improve our ctf version from a single instance to a multiuser instance with something like https://github.com/iteratec/multi-juicer . This should result in 1 wrongsecrets desktop and 1 wrongsecrets...

The following items need to be ported back: - [ ] Security context, probes & NSP, ressource limits to okteto - [ ] Security context, probes & NSP, ressource limits...

Currently git/docker/etc. are all over the place! It would be great if we can sort this on the front-end with a simple javascript inclusion as part of the main page.

Add render.com free hosting setup (render.com) : - [ ] Have a multistage build dockerfile - [ ] Use it to host wrongsecrets

Find and fix memory leak

3

after running `hey` twice against `/challenge/1` we see that the amount of sessions build up to 400, and memory consumption goes from 200Mb to 277 MB after which, when all...

We need to mention the OSS support we got from: - [ ] IntelliJ - [ ] Docker - [ ] 1password