# vipin171/sample-vulnerable-app architecture

> Architecture diagram of the GitHub repository vipin171/sample-vulnerable-app, generated by GitDiagram from its file tree, README and a sample of source files (last updated 2026-09-29). It is an AI-made overview: check details against the source.

- Interactive diagram: https://gitdiagram.com/vipin171/sample-vulnerable-app
- Repository: https://github.com/vipin171/sample-vulnerable-app

## Overview

This repository is a deliberately vulnerable security-scanning test corpus, not a scanner or deployable application workflow. Its principal workflow is for an external tool to inspect the supplied targets and identify the documented SAST, SCA, IaC, and Dockerfile findings. The README documents these scan targets, while the sampled Python source shows local SQLite operations and risky functions; no scanner, orchestration, or findings-output implementation is present.

Main entry points: [`main.py`](https://github.com/vipin171/sample-vulnerable-app/blob/main/main.py) (Python Samples), [`requirements.txt`](https://github.com/vipin171/sample-vulnerable-app/blob/main/requirements.txt) (Dependencies), [`cloudformation/template.yaml`](https://github.com/vipin171/sample-vulnerable-app/blob/main/cloudformation/template.yaml) (CloudFormation), [`terraform/main.tf`](https://github.com/vipin171/sample-vulnerable-app/blob/main/terraform/main.tf) (Terraform)

## Diagram (Mermaid)

```mermaid
flowchart TD

subgraph group_sast["SAST Targets"]
  node_main["Python Samples<br/>[main.py]"]
end

subgraph group_sca["SCA Target"]
  node_requirements["Dependencies<br/>[requirements.txt]"]
end

subgraph group_iac["IaC Targets"]
  node_cloudformation["CloudFormation<br/>[template.yaml]"]
  node_terraform["Terraform<br/>[main.tf]"]
end

subgraph group_container["Container Target"]
  node_dockerfile["Dockerfile"]
end

node_scanner(("Security Scanner"))
node_findings["Scan Findings"]

node_scanner -->|"scans"| node_main
node_scanner -->|"scans"| node_requirements
node_scanner -->|"scans"| node_cloudformation
node_scanner -->|"scans"| node_terraform
node_scanner -->|"scans"| node_dockerfile
node_scanner -->|"reports"| node_findings

click node_main "https://github.com/vipin171/sample-vulnerable-app/blob/main/main.py"
click node_requirements "https://github.com/vipin171/sample-vulnerable-app/blob/main/requirements.txt"
click node_cloudformation "https://github.com/vipin171/sample-vulnerable-app/blob/main/cloudformation/template.yaml"
click node_terraform "https://github.com/vipin171/sample-vulnerable-app/blob/main/terraform/main.tf"
click node_dockerfile "https://github.com/vipin171/sample-vulnerable-app/blob/main/Dockerfile"

classDef toneNeutral fill:#f8fafc,stroke:#334155,stroke-width:1.5px,color:#0f172a
classDef toneBlue fill:#dbeafe,stroke:#2563eb,stroke-width:1.5px,color:#172554
classDef toneAmber fill:#fef3c7,stroke:#d97706,stroke-width:1.5px,color:#78350f
classDef toneMint fill:#dcfce7,stroke:#16a34a,stroke-width:1.5px,color:#14532d
classDef toneRose fill:#ffe4e6,stroke:#e11d48,stroke-width:1.5px,color:#881337
classDef toneIndigo fill:#e0e7ff,stroke:#4f46e5,stroke-width:1.5px,color:#312e81
classDef toneTeal fill:#ccfbf1,stroke:#0f766e,stroke-width:1.5px,color:#134e4a
class node_main toneBlue
class node_requirements toneAmber
class node_cloudformation,node_terraform toneMint
class node_dockerfile toneRose
class node_scanner,node_findings toneIndigo
```

## Components

### SAST Targets

- [Python Samples](https://github.com/vipin171/sample-vulnerable-app/blob/main/main.py): `main.py`

### SCA Target

- [Dependencies](https://github.com/vipin171/sample-vulnerable-app/blob/main/requirements.txt): `requirements.txt`

### IaC Targets

- [CloudFormation](https://github.com/vipin171/sample-vulnerable-app/blob/main/cloudformation/template.yaml): `cloudformation/template.yaml`
- [Terraform](https://github.com/vipin171/sample-vulnerable-app/blob/main/terraform/main.tf): `terraform/main.tf`

### Container Target

- [Dockerfile](https://github.com/vipin171/sample-vulnerable-app/blob/main/Dockerfile): `Dockerfile`

### Other components

- **Security Scanner**
- **Scan Findings**

## Connections

- Security Scanner → Python Samples: scans
- Security Scanner → Dependencies: scans
- Security Scanner → CloudFormation: scans
- Security Scanner → Terraform: scans
- Security Scanner → Dockerfile: scans
- Security Scanner → Scan Findings: reports