Skip to content
Draft
43 changes: 43 additions & 0 deletions apps/docs/docs/intro.md
Original file line number Diff line number Diff line change
Expand Up @@ -104,6 +104,49 @@ pnpm run snyk:iac # IaC - scan Bicep templates for misconfigurations

> **Note**: Only use the npm scripts listed above. Other Snyk scripts (`snyk:monitor`, `snyk:code:report`) are reserved for CI/CD pipeline use only.

## Local EdgeScan Setup

EdgeScan is a **Dynamic Application Security Testing (DAST)** platform. Unlike Snyk or SonarCloud, which analyze source code, EdgeScan scans **live, running applications** to provide deep security intelligence and continuous vulnerability profiling for our serverless architecture.

**How to use:**
- Use `pnpm run edgescan:dev` to run local security validation scans.
- **DO NOT use** `edgescan:agent` - this script is strictly reserved for the **GitHub Copilot AI Coding Agent** and CI/CD automation.

### Prerequisites

This setup is required for the `edgescan:dev` script.

#### 1. Apple Native Containers

This is a one-time setup for macOS developers.

1. Download the `container-installer-signed.pkg` from the [Apple Native Containers releases](https://github.com/apple/container/releases).
2. Run the installer.
3. Once finished, start the container system:
```bash
container system start
```
Input `Y` when prompted.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

security (generic-api-key): Detected a Generic API Key, potentially exposing access to various services and sensitive operations.

Source: gitleaks

4. Confirm it is working as expected:
```bash
container system status
```
Expected output:
```text
❯ container system status
apiserver is running
...
```

#### 2. EdgeScan API Token

1. Log in to [intealth.edgescan.com](https://intealth.edgescan.com).
2. Go to your **Profile Settings** and generate an API token for your account.
3. Export the token in your terminal (consider adding this to your `~/.zshrc` or `~/.bashrc`):
```bash
export ES_API_TOKEN="<your token here>"
```

## Start Development

Run the development environment:
Expand Down
16 changes: 8 additions & 8 deletions apps/ui-community/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -7,13 +7,13 @@
"prebuild": "biome lint",
"build": "tsc --build && vite build",
"start": "vite",
"lint": "biome lint",
"preview": "vite preview",
"test": "vitest run --silent --reporter=dot",
"test:coverage": "vitest run --coverage --silent --reporter=dot",
"test:watch": "vitest",
"storybook": "storybook dev -p 6008",
"build-storybook": "storybook build"
"lint": "biome lint",
"preview": "vite preview",
"test": "vitest run --silent --reporter=dot",
"test:coverage": "vitest run --coverage --silent --reporter=dot",
"test:watch": "vitest",
"storybook": "storybook dev -p 6008",
"build-storybook": "storybook build"
},
"dependencies": {
"@ant-design/icons": "^6.0.2",
Expand All @@ -30,7 +30,7 @@
"react": "^19.1.0",
"react-dom": "^19.1.0",
"react-oidc-context": "^3.3.0",
"react-router-dom": "^7.0.2"
"react-router-dom": "^7.12.0"
},
"devDependencies": {
"@cellix/typescript-config": "workspace:*",
Expand Down
2 changes: 1 addition & 1 deletion knip.json
Original file line number Diff line number Diff line change
Expand Up @@ -79,5 +79,5 @@
"@graphql-typed-document-node/core",
"ts-scope-trimmer-plugin"
],
"ignoreBinaries": ["func"]
"ignoreBinaries": ["func", "container"]
}
3 changes: 2 additions & 1 deletion package.json
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,8 @@
"snyk:iac:report": "snyk iac test iac/build/**/*.json --org=cellixjs --remote-repo-url=https://github.com/CellixJs/cellixjs --target-reference=main --target-name=cellixjs-iac --report",
"analyze": "pnpm -r exec -- pnpm dlx @e18e/cli analyze",
"prepare": "husky",
"edgescan:run": "docker run --tty --rm edgescan/cicd-integration:latest --api-token $ES_API_TOKEN --asset-id $ES_ASSET_ID --start-scan --max-risk-threshold 3 --wait --color"
"edgescan:agent": "docker run --tty --rm edgescan/cicd-integration:latest --api-token $ES_API_TOKEN --asset-id $ES_ASSET_ID --start-scan --max-risk-threshold 3 --wait --color",
"edgescan:dev": "container run --tty --rm --platform linux/amd64 edgescan/cicd-integration:latest --api-token $ES_API_TOKEN --asset-id 74096 --start-scan --max-risk-threshold 3 --wait --color"
},
"devDependencies": {
"@amiceli/vitest-cucumber": "^5.1.2",
Expand Down
2 changes: 1 addition & 1 deletion packages/ocom/ui-components/package.json
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,7 @@
"react": "^19.1.1",
"react-dom": "^19.1.1",
"react-oidc-context": "^3.3.0",
"react-router-dom": "^7.8.2"
"react-router-dom": "^7.12.0"
},
"devDependencies": {
"@cellix/typescript-config": "workspace:*",
Expand Down
51 changes: 44 additions & 7 deletions pnpm-lock.yaml

Some generated files are not rendered by default. Learn more about how customized files appear on GitHub.