• A docker-containerized micro-service for https://cyber-dojo.org.
• An http service (rack based) for running cyber-dojo.sh inside a docker container for at most 20 seconds and returning [stdout,stderr,status,timed_out,colour]
• Demonstrates a Kosli instrumented GitHub CI workflow deploying, with Continuous Compliance, to staging and production AWS environments.
• Uses compliance reporting patterns from https://www.kosli.com/blog/using-kosli-attest-in-github-action-workflows-some-tips/

Development

There are two sets of tests:

• server: these run from inside the runner container
• client: these run from outside the runner container, making api calls only

# Build the images
$ make {image_server|image_client}

# Run all tests
$ make {test_server|test_client}

# Run only specific tests
$ ./bin/run_tests.sh {-h|--help}
$ ./bin/run_tests.sh server C5a

# Check coverage metrics
$ make {coverage_server|coverage_client}

# Check image for snyk vulnerabilities
$ make snyk_container_scan

# Run demo
$ make demo

API

• GET alive
• GET ready
• GET sha
• GET base_image
• POST run_cyber_dojo_sh(id,files,manifest)
• POST pull_image(id,image_name)

Screenshots