How vipin171/sample-vulnerable-app works
This repository is a deliberately vulnerable security-scanning test corpus, not a scanner or deployable application workflow. Its principal workflow is for an external tool to inspect the supplied targets and identify the documented SAST, SCA, IaC, and Dockerfile findings. The README documents these scan targets, while the sampled Python source shows local SQLite operations and risky functions; no scanner, orchestration, or findings-output implementation is present.
Main entry points: main.py Python Samples · requirements.txt Dependencies · template.yaml CloudFormation · main.tf Terraform
Components 7
SAST Targets
- Python Samples
main.py
SCA Target
- Dependencies
requirements.txt
IaC Targets
- CloudFormation
cloudformation/template.yaml - Terraform
terraform/main.tf
Container Target
- Dockerfile
Dockerfile
Other components
- Security Scanner
- Scan Findings
Connections 6
- Security Scanner → Python Samples: scans
- Security Scanner → Dependencies: scans
- Security Scanner → CloudFormation: scans
- Security Scanner → Terraform: scans
- Security Scanner → Dockerfile: scans
- Security Scanner → Scan Findings: reports