luisneighbur/my-secure-api repository overview

Educational repository showing the evolution of security fixes across versions:

v1.1.0: Base implementation with known vulnerabilities

• Outdated dependencies
• Insecure JWT implementation
• Base image vulnerabilities

v1.1.1: First security improvements

• Updated some critical dependencies
• Basic JWT security improvements
• Remains vulnerable for educational purposes

v1.1.2: Enhanced security measures

• Improved secret management
• Updated more dependencies
• Some vulnerabilities remain intentionally

v1.1.3: Further security hardening

• Updated base image
• Additional dependency updates
• Few remaining intentional vulnerabilities

v1.1.4: Most secure version

• All critical vulnerabilities fixed
• Latest secure dependencies
• Secure base image
• Best practices implemented

Perfect for:

• Security training
• Vulnerability scanning workshops
• DevSecOps demonstrations
• Trivy scanning practice

Environment Variables:

• SECRET_NAME: Secret key name
• PORT: Application port (default: 8000)

Note: This image is designed specifically for security scanning education with Trivy.