Hi! In this repo is a slightly insecure IIS web.config file, and an automated CICD Workflow configured to:
- Check for insecure options
- Validate them against the SafeStack platform
To get started, you have to perform the following:
- Fork this repo
- Enable actions
- Set a valid
LABS_AUTH
repository secret - Update and commit a change to this readme - this will kick off the first action which you can track by clicking "Actions" above
- Look at the output of the "Labs Validator" job step, and see what issues are being reported, and then try and address it by committing fixes to this repo!
- After the fixes are in place, they will be validated against the SafeStack platform, and you will receive a result token which you must supply to complete the challenge.
Don't forget, you have to enable actions, then make a preliminary commit to start the CI/CD process.
Feel free to update this file and let us know how you're feeling.
Today I'm feeling: like future-ruth