OWASP / wrongsecrets

Vulnerable app with examples showing how to not use secrets

Home Page:https://owasp.org/www-project-wrongsecrets/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Extend terratests to ensure no challenge is disabled in the environment

commjoen opened this issue · comments

Currently the Terratests only check the cloud challenges, but there are no checks on whether any challenges are disabled in the home page, while all of the challenges should be enabled. Given #1130 it would be good if we can check that all challenges are usable.

I'll work on this

The issue is all yours sir!

@commjoen Hi, AFAIU I need to extend:

  • wrongsecrets_aws_test.go
  • wrongsecrets_azure_test.go
  • wrongsecrets_gcp_test.go

to make sure all challenges are enabled in each cloud platform, right?

for now, isntead of cypress: we need to make sure that no challenge is disabled in the cloud env :) .