test

.github/workflows/Owaspmain.yml

@@ -0,0 +1,33 @@
+name: Full OWASP Security Scan
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  security-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: OWASP Full Vulnerability Scan
+        uses: dependency-check/Dependency-Check_Action@main
+        with:
+          project: 'My-App-Security-Report'
+          format: 'HTML JSON'  # Generates both formats
+          fail_on_cvss: 0      # Shows ALL vulnerabilities (0 = don't fail)
+          additional_args: '--disableYarnAudit --disableNodeAudit'  # Focus on OWASP data
+
+      - name: Upload HTML Report
+        uses: actions/upload-artifact@v3
+        with:
+          name: security-report-html
+          path: dependency-check-report.html
+
+      - name: Upload JSON Report
+        uses: actions/upload-artifact@v3
+        with:
+          name: security-report-json
+          path: dependency-check-report.json

.github/workflows/SNYK.yml

@@ -0,0 +1,30 @@
+name: Security Scan with OWASP
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  security-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      # Run OWASP Dependency-Check
+      - name: OWASP Dependency-Check Scan
+        uses: dependency-check/Dependency-Check_Action@main
+        with:
+          project: 'Your-Project-Name'
+          format: 'HTML'  # Also supports XML, JSON, CSV
+          fail_on_cvss: 7  # Fails if vulnerabilities >= 7.0 CVSS score found
+          scan_dir: '.'   # Scans your entire repo
+
+      # Upload report as artifact (optional)
+      - name: Upload Report
+        if: always()
+        uses: actions/upload-artifact@v3
+        with:
+          name: dependency-check-report
+          path: dependency-check-report.html

.github/workflows/sy.yml

@@ -0,0 +1,40 @@
+name: Full OWASP Security Scan
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  security-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: OWASP Full Vulnerability Scan
+        uses: dependency-check/Dependency-Check_Action@main
+        with:
+          project: 'My-App-Security-Report'
+          format: 'HTML JSON CSV'  # Multiple report formats
+          fail_on_cvss: 0          # Show ALL vulnerabilities (0 = display but don't fail)
+          scan_dir: '.'            # Scan entire repository
+          additional_args: |
+            --log ./dc.log
+            --disableBundleAudit
+            --disableNodeAudit
+
+      - name: Upload Security Reports
+        uses: actions/upload-artifact@v4
+        with:
+          name: security-reports
+          path: |
+            dependency-check-report.*
+            dc.log
+          retention-days: 7  # Automatically delete after 1 week
+
+      - name: Show Vulnerability Count (Preview)
+        run: |
+          echo "Vulnerability Summary:"
+          jq '.dependencies[] | select(.vulnerabilities != null) | .vulnerabilities[] | .name' dependency-check-report.json | sort | uniq -c | sort -nr
+        if: always()

.github/workflows/test.yml

@@ -0,0 +1,17 @@
+name: Node.js CI
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+      - run: npm install

.github/workflows/vuln scan.yml

@@ -0,0 +1,60 @@
+name: OWASP Security Scan with PDF Report
+
+on:
+  push:
+    branches: [ "main" ]
+  pull_request:
+    branches: [ "main" ]
+
+jobs:
+  security-scan:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      # Install wkhtmltopdf for PDF conversion
+      - name: Install PDF tools
+        run: |
+          sudo apt-get update
+          sudo apt-get install -y wkhtmltopdf
+
+      # Run OWASP Scan with multiple report formats
+      - name: OWASP Dependency Check
+        uses: dependency-check/Dependency-Check_Action@main
+        with:
+          project: 'Security-Report'
+          path: '.'
+          format: 'HTML JSON'  # Generate both formats
+          out: './reports'
+          args: '--disableBundleAudit'
+
+      # Convert HTML report to PDF
+      - name: Generate PDF Report
+        run: |
+          wkhtmltopdf --enable-local-file-access \
+          reports/dependency-check-report.html \
+          reports/security-report.pdf
+
+      # Package all reports
+      - name: Package Reports
+        run: |
+          zip -r reports.zip reports/
+
+      # Upload all formats (PDF, HTML, JSON)
+      - name: Upload Security Reports
+        uses: actions/upload-artifact@v4
+        with:
+          name: security-reports
+          path: |
+            reports.zip
+            reports/security-report.pdf
+            reports/dependency-check-report.*
+          retention-days: 7
+
+      # Download link preview
+      - name: Show Download Info
+        run: |
+          echo "📥 Download these files from GitHub Actions artifacts:"
+          echo "- security-report.pdf (PDF version)"
+          echo "- dependency-check-report.html (Interactive HTML)"
+          echo "- dependency-check-report.json (Machine-readable)"