Skip to content

Refactor real world apps to include unit/functional tests

Our real world apps directory, used to demonstrate actual vulnerabilities to be identified by SAST could benefit from having proper unit testing and ci/cd workflows. Right now only the Java real world app(s) have a build ci job to ensure the applications even build.

Implementation

For all real world apps: (csharp, ruby, java, python, javascript etc)

  • Enable unit testing coverage of each real world test case
  • Enable semgrep to scan using the --test feature.
  • Update CI job to build and run tests commit
Edited by Isaac Dawson