update README file (#21)

* edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow * add sonar-project.properties file + edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow * Revert "edit SonarQube workflow" This reverts commit 47207bc. * edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow + add docker-compose file * edit SonarQube workflow + edit docker-compose file * edit SonarQube workflow + edit docker-compose file * edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow * edit SonarQube workflow + edit docker-compose file * edit SonarQube workflow + edit docker-compose file * edit docker-compose file * remove version attribute from the docker-compose.yml * increase seconds in the sleep attribute * edit workflow, docker-compose and Jenkinsfile files + add Dockerfile * improve CodeQL Scan * improve OWASP Dependency Check workflow * edit OWASP Dependency Check workflow * edit OWASP Dependency Check workflow * edit OWASP Dependency Check workflow * edit OWASP Dependency Check workflow * edit OWASP Dependency Check workflow * edit Semgrep SAST workflow * edit Semgrep SAST workflow * edit Semgrep SAST workflow * edit Semgrep SAST workflow * add SonarCloud workflow + add Quality Gate in the Jenkinsfile * edit the SonarCloud workflow * edit the SonarCloud workflow * add badges to the README file * edit Semgrep workflow * edit Semgrep workflow * edit Semgrep workflow * edit Semgrep workflow * edit Semgrep workflow * edit Semgrep workflow * edit Semgrep workflow * edit Semgrep workflow * edit Semgrep workflow * edit Semgrep workflow * edit Semgrep workflow * edit Semgrep workflow * edit README.md * edit README.md * add release badge * edit release badge * edit release badge * add .gitignore file * edit README file * add GitGuardian Scan * add GitGuardian Scan * update README file
meleksabit · Oct 22, 2024 · fb51f21 · fb51f21
1 parent 5b85686
commit fb51f21
Showing 1 changed file with 12 additions and 0 deletions.
diff --git a/README.md b/README.md
@@ -5,6 +5,18 @@
 
 OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application designed for web-security enthusiasts. It serves as a target for learning and practicing web security skills. Mutillidae can be easily installed on Linux and Windows systems using LAMP, WAMP, and XAMMP stacks. Additionally, it comes pre-installed on SamuraiWTF and OWASP BWA, and the existing version can be updated on these platforms. With dozens of vulnerabilities and hints to guide the user, Mutillidae provides an accessible web hacking environment suitable for labs, security enthusiasts, classrooms, CTFs, and vulnerability assessment tool targets. It has been widely used in graduate security courses, corporate web security training, and as an assessment target for vulnerability assessment software. OWASP Mutillidae II provides a comprehensive platform for learning and practicing web security techniques in a controlled environment.
 
+## 📈🚀💡🏋️💪Enhancements and Additions in This Fork:
+* **README Updates**: Enhanced the **`README.md`** file with improved documentation, ensuring better clarity and usability.
+* **SonarQube Integration**:
+    * Added **SonarQube analysis** to the project, enabling continuous code quality checks.
+    * Included a **`Jenkinsfile`** for SonarQube integration to automate the process.
+* **CodeQL Scan Improvements**: Enhanced the CodeQL scan process for better security analysis and coverage.
+* **OWASP Dependency Check Workflow**: Optimized the **OWASP Dependency Check** workflow to improve the detection of vulnerable dependencies.
+* **Semgrep SAST Workflow Updates**: Updated the **Semgrep SAST workflow** to use the latest versions for improved static analysis capabilities.
+* **SonarCloud Workflow and Quality Gate**:
+    * Introduced a **SonarCloud workflow** for seamless integration with SonarCloud’s continuous analysis tools.
+    * Implemented a **Quality Gate** in the Jenkins pipeline to ensure code meets the required quality standards before deployment.
+
 ## $\color{red}{Project\ Announcements\}$
 
 > [!TIP]