Node Agent Test Benches

This repository contains our library of test bench applications for testing the Contrast Security Node agent with various supported frameworks.

Vulnerabilities are implemented in a shared module, test-bench-utils, which is then installed and used by each application.

Using lerna

lerna is a tool for managing multiple packages within a single repository. We use lerna to handle the installation and version management of test-bench-utils during development.

By default, when running npm install in the root of this repo, lerna bootstrap will also be executed. This will install dependencies within each of the specified package directories, as well as npm link shared dependencies.

When bumping a package version, we will use lerna publish <patch | minor | major> instead of npm version inside test-bench-utils. This will keep versions in sync between packages.

Outside of these two commands, development on each application or the test-bench-utils package itself should remain unchanged for the most part.

Adding new sample app to lerna

• Add folder name in lerna.json and re-run lerna bootstrap
• Add the app(folder name) to jobs.build-and-push.strategy.matrix.apps .github/workflows/build.yml
• Add repository into ecr aws ecr create-repository --repository-name <app>