Skip to content

Commit bbb74e2

Browse files
anthony-nhsanthony-nhs
committed
add regression test project
1 parent 0468d86 commit bbb74e2

File tree

7 files changed

+147
-0
lines changed

7 files changed

+147
-0
lines changed

‎src/projects/regression_tests/.devcontainer/.tool-versions‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
allure 2.37.0

‎src/projects/regression_tests/.devcontainer/Dockerfile‎

Lines changed: 39 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,39 @@
1+
ARG BASE_VERSION_TAG=latest
2+
ARG BASE_IMAGE=ghcr.io/nhsdigital/eps-devcontainers/node_24_python_3_13:${BASE_VERSION_TAG}
3+
4+
FROM ${BASE_IMAGE}
5+
6+
ARG SCRIPTS_DIR=/usr/local/share/eps
7+
ARG CONTAINER_NAME
8+
ARG MULTI_ARCH_TAG
9+
ARG BASE_VERSION_TAG
10+
ARG IMAGE_TAG
11+
ARG TARGETARCH
12+
13+
ENV SCRIPTS_DIR=${SCRIPTS_DIR}
14+
ENV CONTAINER_NAME=${CONTAINER_NAME}
15+
ENV MULTI_ARCH_TAG=${MULTI_ARCH_TAG}
16+
ENV BASE_VERSION_TAG=${BASE_VERSION_TAG}
17+
ENV IMAGE_TAG=${IMAGE_TAG}
18+
ENV TARGETARCH=${TARGETARCH}
19+
20+
LABEL org.opencontainers.image.description="EPS devcontainer ${CONTAINER_NAME}:${IMAGE_TAG}"
21+
LABEL org.opencontainers.image.version=${IMAGE_TAG}
22+
LABEL org.opencontainers.image.base.name=${BASE_IMAGE}
23+
LABEL org.opencontainers.image.containerName=${CONTAINER_NAME}
24+
25+
USER root
26+
COPY --chmod=755 scripts ${SCRIPTS_DIR}/${CONTAINER_NAME}
27+
WORKDIR ${SCRIPTS_DIR}/${CONTAINER_NAME}
28+
RUN ./root_install.sh
29+
30+
USER vscode
31+
32+
WORKDIR ${SCRIPTS_DIR}/${CONTAINER_NAME}
33+
COPY .tool-versions /tmp/.tool-versions
34+
RUN cat /tmp/.tool-versions >> /home/vscode/.tool-versions
35+
36+
RUN ./vscode_install.sh
37+
38+
# Switch back to root to install the devcontainer CLI globally
39+
USER root

‎src/projects/regression_tests/.devcontainer/devcontainer.json‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,18 @@
1+
// For format details, see https://aka.ms/devcontainer.json. For config options, see the
2+
// README at: https://github.com/devcontainers/templates/tree/main/src/ubuntu
3+
{
4+
"name": "EPS Devcontainer node_24 python_3.13",
5+
// Or use a Dockerfile or Docker Compose file. More info: https://containers.dev/guide/dockerfile
6+
"build": {
7+
"dockerfile": "Dockerfile",
8+
"args": {
9+
"CONTAINER_NAME": "eps_devcontainer_${localEnv:CONTAINER_NAME}",
10+
"MULTI_ARCH_TAG": "${localEnv:MULTI_ARCH_TAG}",
11+
"BASE_VERSION_TAG": "${localEnv:BASE_VERSION_TAG}",
12+
"IMAGE_TAG": "${localEnv:IMAGE_TAG}"
13+
},
14+
"context": "."
15+
},
16+
"features": {}
17+
}
18+

‎src/projects/regression_tests/.devcontainer/scripts/root_install.sh‎

Lines changed: 7 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,7 @@
1+
#!/usr/bin/env bash
2+
3+
set -e
4+
5+
# clean up
6+
apt-get clean
7+
rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*

‎src/projects/regression_tests/.devcontainer/scripts/vscode_install.sh‎

Lines changed: 6 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,6 @@
1+
#!/usr/bin/env bash
2+
set -e
3+
4+
# install allure using asdf
5+
asdf plugin add allure
6+
asdf install

‎src/projects/regression_tests/.trivyignore.yaml‎

Lines changed: 75 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,75 @@
1+
vulnerabilities:
2+
- id: GHSA-72hv-8253-57qq
3+
statement: "jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition"
4+
purls:
5+
- "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.21.0"
6+
expired_at: 2026-09-12
7+
- id: CVE-2026-25547
8+
statement: "brace-expansion: brace-expansion: Denial of Service via unbounded brace range expansion"
9+
purls:
10+
- "pkg:npm/%40isaacs/brace-expansion@5.0.0"
11+
expired_at: 2026-09-12
12+
- id: CVE-2025-64756
13+
statement: "glob: glob: Command Injection Vulnerability via Malicious Filenames"
14+
purls:
15+
- "pkg:npm/glob@10.4.5"
16+
- "pkg:npm/glob@11.0.3"
17+
expired_at: 2026-09-12
18+
- id: CVE-2026-26996
19+
statement: "minimatch: minimatch: Denial of Service via specially crafted glob patterns"
20+
purls:
21+
- "pkg:npm/minimatch@10.0.3"
22+
- "pkg:npm/minimatch@9.0.5"
23+
expired_at: 2026-09-12
24+
- id: CVE-2026-27903
25+
statement: "minimatch: minimatch: Denial of Service due to unbounded recursive backtracking via crafted glob patterns"
26+
purls:
27+
- "pkg:npm/minimatch@10.0.3"
28+
- "pkg:npm/minimatch@9.0.5"
29+
expired_at: 2026-09-12
30+
- id: CVE-2026-27904
31+
statement: "minimatch: Minimatch: Denial of Service via catastrophic backtracking in glob expressions"
32+
purls:
33+
- "pkg:npm/minimatch@10.0.3"
34+
- "pkg:npm/minimatch@9.0.5"
35+
expired_at: 2026-09-12
36+
- id: CVE-2026-23745
37+
statement: "node-tar: tar: node-tar: Arbitrary file overwrite and symlink poisoning via unsanitized linkpaths in archives"
38+
purls:
39+
- "pkg:npm/tar@7.5.1"
40+
expired_at: 2026-09-12
41+
- id: CVE-2026-23950
42+
statement: "node-tar: tar: node-tar: Arbitrary file overwrite via Unicode path collision race condition"
43+
purls:
44+
- "pkg:npm/tar@7.5.1"
45+
expired_at: 2026-09-12
46+
- id: CVE-2026-24842
47+
statement: "node-tar: tar: node-tar: Arbitrary file creation via path traversal bypass in hardlink security check"
48+
purls:
49+
- "pkg:npm/tar@7.5.1"
50+
expired_at: 2026-09-12
51+
- id: CVE-2026-26960
52+
statement: "tar: node-tar: node-tar: Arbitrary file read/write via malicious archive hardlink creation"
53+
purls:
54+
- "pkg:npm/tar@7.5.1"
55+
expired_at: 2026-09-12
56+
- id: CVE-2026-29786
57+
statement: "node-tar: hardlink path traversal via drive-relative linkpath"
58+
purls:
59+
- "pkg:npm/tar@7.5.1"
60+
expired_at: 2026-09-12
61+
- id: CVE-2026-31802
62+
statement: "node-tar Symlink Path Traversal via Drive-Relative Linkpath"
63+
purls:
64+
- "pkg:npm/tar@7.5.1"
65+
expired_at: 2026-09-12
66+
- id: CVE-2026-25679
67+
statement: "url.Parse insufficiently validated the host/authority component and ac ..."
68+
purls:
69+
- "pkg:golang/stdlib@v1.25.6"
70+
expired_at: 2026-09-12
71+
- id: CVE-2026-27142
72+
statement: "Actions which insert URLs into the content attribute of HTML meta tags ..."
73+
purls:
74+
- "pkg:golang/stdlib@v1.25.6"
75+
expired_at: 2026-09-12

‎src/projects/regression_tests/trivy.yaml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1 @@
1+
ignorefile: "src/projects/regression_tests/.trivyignore_combined.yaml"

0 commit comments

Comments
 (0)