Refactor real world apps to include unit/functional tests
Our real world apps directory, used to demonstrate actual vulnerabilities to be identified by SAST could benefit from having proper unit testing and ci/cd workflows. Right now only the Java real world app(s) have a build ci job to ensure the applications even build.
Implementation
For all real world apps: (csharp, ruby, java, python, javascript etc)
- Enable unit testing coverage of each real world test case
- Enable semgrep to scan using the --test feature.
- Update CI job to build and run tests commit
Edited by Isaac Dawson