wrongsecrets icon indicating copy to clipboard operation
wrongsecrets copied to clipboard

Add misconfiguration of docker secret in code (See for docker compose: https://docs.docker.com/engine/swarm/secrets/)

Open commjoen opened this issue 2 years ago • 3 comments

Create a challenge for docker compose setup, where the compose secret is hardcoded inside teh docker compose yml

TODO:

  • [ ] Implement a docker-compose setup for wrongsecrets with the secret as an env var, add the compose file to the repo
  • [ ] implement the challenge according to contributing.md, but make sure we read the challenge from the file so we can play the challenge without the need to actually use teh docker-compose setup.

commjoen avatar May 08 '23 06:05 commjoen

HI @commjoen, I want to work on this issue Please assign this one to me 😁

Shubham-Patel07 avatar Jul 08 '24 18:07 Shubham-Patel07

it;s all yours :D .

commjoen avatar Jul 08 '24 19:07 commjoen

note: the docker-compose file and its env should only be used to showcase that the problem is real ;-), we should just make it work from a docker perspective. The .env file will have to be copied into the container to "Fake" it i guess. (And we need to explain in the code as a doc why we do it)

commjoen avatar Jul 08 '24 19:07 commjoen