b3e8a9a058
Major additions: - Community Next.js app (port 18187) for browsing claims with API docs - stemedb-chaos crate: Fault injection, chaos testing, CRDT properties - Latent ingestion system: Reddit/FDA ingesters with ADK-Go agents - Disputed claims handling: Manual review workflows and validation - Aphoria security scanner: New extractors (SQL injection, command injection, weak crypto, TLS version), policy-based ignores, UAT reports - Docker infrastructure: Dockerfile, docker-compose.yml for full stack - VulnBank demo: Intentionally vulnerable multi-language test corpus SDK & API enhancements: - Source registry handlers for tracking data provenance - Metrics endpoint - Skeptic filtering improvements Code quality: - Split 14 large files (>500 lines) into focused modules - All files now under 500-line limit per project guidelines Documentation: - Chaos testing guide, circuit breakers, observability docs - Phase 7 UAT documentation updates - Martin Kleppmann technical writer agent Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
23 lines
910 B
Plaintext
23 lines
910 B
Plaintext
# VulnBank Environment Configuration
|
|
# DO NOT USE IN PRODUCTION - Contains security vulnerabilities for testing
|
|
|
|
# BLOCK: Hardcoded production secrets in example file
|
|
DATABASE_URL=postgresql://admin:production_password_123@db.vulnbank.com:5432/vulnbank
|
|
REDIS_URL=redis://:redis_secret_password@cache.vulnbank.com:6379
|
|
|
|
# BLOCK: API keys committed to repository
|
|
STRIPE_SECRET_KEY=sk_live_51H7xyz123456789abcdefghijklmnop
|
|
SENDGRID_API_KEY=SG.abcdefghijklmnopqrstuvwxyz123456789
|
|
AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE
|
|
AWS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
|
|
|
|
# BLOCK: JWT secret in environment file
|
|
JWT_SECRET=my_super_secret_jwt_signing_key_12345
|
|
|
|
# Encryption keys (should never be in version control)
|
|
ENCRYPTION_KEY=0123456789abcdef0123456789abcdef
|
|
|
|
# OAuth credentials
|
|
GOOGLE_CLIENT_SECRET=GOCSPX-abcdefghijklmnopqrstuvwxyz
|
|
GITHUB_CLIENT_SECRET=ghp_xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
|