Java框架中DevSecOps实践指南

import com.google.cloud.devtools.containeranalysis.v1.ContainerAnalysisClient;
import com.google.cloud.devtools.containeranalysis.v1.Source;
import com.google.cloud.devtools.containeranalysis.v1.Vulnerability;
import com.google.protobuf.Empty;
import java.io.IOException;
import java.util.List;

public class AnalyzeGradleProject {

  public static void main(String[] args) throws IOException {
    // TODO(developer): Replace these variables before running the sample.
    String projectId = "your-project-id";
    String gradlePath = "path/to/gradle/project";
    analyzeGradleProject(projectId, gradlePath);
  }

  public static void analyzeGradleProject(String projectId, String gradlePath) throws IOException {
    // Initialize client that will be used to send requests. This client only needs to be created
    // once, and can be reused for multiple requests. After completing all of your requests, call
    // the `client.close()` method on the client to safely
    // clean up any remaining background resources.
    try (ContainerAnalysisClient client = ContainerAnalysisClient.create()) {

      // Specify project to scan
      String gradleProjectId = String.format("projects/%s", projectId);
      Source source = Source.newBuilder().setGradleProjectId(gradleProjectId).build();

      // Scan for vulnerabilities
      List<Vulnerability> vulnerabilities =
          client.getGrafeasClient().getVulnerabilities(gradleProjectId, source, 50);
      if (vulnerabilities.isEmpty()) {
        System.out.println("No vulnerabilities found");
      } else {
        System.out.println("Found vulnerabilities:");
      }
      for (Vulnerability vulnerability : vulnerabilities) {
        System.out.println(vulnerability.getEffectiveSeverity());
        System.out.println(vulnerability.getPackageIssue().getAffectedCpeUri());
      }

      // Wait for the vulnerability report to be created
      Empty scanReport = client.getGrafeasClient().getGradleScanConfig(gradleProjectId);
      if (scanReport == null) {
        System.out.println("Scan report not found");
      } else {
        System.out.println("Scan report found");
      }
    }
  }
}

import com.crawljax.browser.EmbeddedBrowser;
import com.crawljax.core.CrawljaxController;
import com.crawljax.core.CrawljaxException;
import com.crawljax.core.configuration.BrowserConfiguration;
import com.crawljax.core.configuration.CrawljaxConfiguration;
import com.crawljax.core.configuration.webdriver.FirefoxConfiguration;
import com.crawljax.core.plugin.OnUrlLoadPlugin;
import com.crawljax.forms.FormInput;
import com.crawljax.forms.FormInputs;
import com.crawljax.plugins.webdrivers.webdriver.FireFoxWebDriver;
import java.util.concurrent.TimeUnit;

public class CrawlJaxExample {

  public static void main(String[] args) throws CrawljaxException {
    // Define the target URL of the web application
    String url = "http://example.com";

    // Create a Crawljax configuration object
    CrawljaxConfiguration config = new CrawljaxConfiguration();
    config.addPlugin(new OnUrlLoadPlugin() {

      @Override
      public void onUrlLoad(EmbeddedBrowser browser) {

        // Interact with the web application as desired
        browser.click("submit-button");
        FormInputs formInputs = new FormInputs();
        FormField field = new FormField("#username", "username");
        formInputs.add(field);
        browser.fireEvent(new FormSubmit(formInputs));
      }
    });

    // Create the Crawljax controller object
    CrawljaxController controller = CrawljaxController.newBuilder()
        .setBrowserConfiguration(new FirefoxConfiguration())
        .setWebDriver(new FireFoxWebDriver())
        .setBrowser(config)
        .addPlugin(new OnUrlLoadPlugin())
        .build();

    // Start the crawling process
    controller.run();
  }
}

import org.junit.After;
import org.junit.Before;
import org.junit.Test;
import org.openqa.selenium.By;
import org.openqa.selenium.WebDriver;
import org.openqa.selenium.chrome.ChromeDriver;

public class SeleniumExample {

  private WebDriver driver;

  @Before
  public void setUp() {
    driver = new ChromeDriver();
  }

  @Test
  public void testLogin() {
    // Open the login page
    driver.get("http://example.com/login");

    // Enter the username and password
    driver.findElement(By.id("username")).sendKeys("test");
    driver.findElement(By.id("password")).sendKeys("password");

    // Click the login button
    driver.findElement(By.id("submit")).click();

    // Check whether the login was successful
    driver.findElement(By.id("logged-in-element"));
  }

  @After
  public void tearDown() {
    driver.quit(); 
  }
}