diff --git a/.github/dependabot.yml b/.github/dependabot.yml index 8596bf7..3484add 100644 --- a/.github/dependabot.yml +++ b/.github/dependabot.yml @@ -7,10 +7,11 @@ updates: schedule: interval: "weekly" reviewers: - - "rewindio/devops" + - "rewindio/appsec" labels: - "appsec" open-pull-requests-limit: 10 ignore: - dependency-name: "*" - update-types: ["version-update:semver-minor", "version-update:semver-patch"] + update-types: + ["version-update:semver-minor", "version-update:semver-patch"] diff --git a/.github/workflows/checkov.yml b/.github/workflows/checkov.yml index 2b290cf..50130a9 100644 --- a/.github/workflows/checkov.yml +++ b/.github/workflows/checkov.yml @@ -11,11 +11,11 @@ jobs: runs-on: ubuntu-latest steps: - name: Checkout - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 + uses: actions/checkout@692973e3d937129bcbf40652eb9f2f61becf3332 # v4.1.7 - name: Checkov static analysis id: static-analysis - uses: bridgecrewio/checkov-action@ec5628816328a320ea93470f1d41ce2156b63815 # v12.2555.0 + uses: bridgecrewio/checkov-action@d0e41abbcc8c1103c6ae7e451681d071f05e1c20 # v12.2873.0 with: directory: . framework: terraform diff --git a/README.md b/README.md index 9fe6492..a9ef655 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # Capture the Flag (CTF) Repo -Trust's capture the Flag (CTF) resources for Cybersecurity Awareness month. +Capture the Flag (CTF) resources for Cybersecurity Awareness month. This repository contains the Terraform that can be used to deploy an instance of OWASP Juice Shop on EC2 instance along with CFTd app to help manage the CTF event. @@ -21,7 +21,7 @@ terraform apply ### Step 2: Install applications via Ansible playbooks -- Replace the `s3://bucket-name` with the value of the `s3_bucket_name_ansible_playbooks` output from the Terraform apply. +- Replace the `s3://bucket-name` with the value of the `s3_bucket_name_ansible_playbooks` output from the Terraform apply. - Replace the `--instance-ids` values with the corresponding `ec2_cftd_instance_id` and `ec2_owaspjs_instance_id` output values from the Terraform apply. ``` diff --git a/variables.tf b/variables.tf index e280dda..5851c18 100644 --- a/variables.tf +++ b/variables.tf @@ -9,7 +9,7 @@ variable "ansible_playbook_bucket_name" { description = "The name of the S3 bucket to hold the Ansible playbooks." type = string - default = "trust-ctf-ansible-playbooks" + default = "ctf-ansible-playbooks" } variable "aws_availability_zone_a" {