Staging Environment and Canary Deployment with AutoDevOps part 1

1. rollout 10%
2. rollout 25%
3. rollout 50%
4. rollout 100%

<link rel="preconnect" href="https://fonts.googleapis.com">
<link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
<link href="https://fonts.googleapis.com/css2?family=Orbitron:wght@900&display=swap" rel="stylesheet">
<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css">

<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Solar System - Sid</title>
<link rel="icon" type="image/x-icon" href="https://gitlab.com/sidd-harth/solar-system/-/raw/main/images/saturn.png">

<style>
#planetImage {
  background: url('https://gitlab.com/sidd-harth/solar-system/-/raw/main/images/solar-system.png') center;
  background-repeat: no-repeat;
  background-size: cover;
  position: static;
  /* animation: spin 25s linear infinite; */
  width: 50vw;
  height: 50vw;
}
@keyframes spin {
  100% { transform: rotate(360deg); }
}
body {
  display: flex;
  align-items: center;
  justify-content: center;
  background: url('images/static-background.png');
}
/*.shadow {
  animation: rainbow 2s linear infinite;
}*/
</style>
</head>
<body>

const path = require('path');
const express = require('express');
const OS = require('os');
const bodyParser = require('body-parser');
const mongoose = require('mongoose');
const cors = require('cors');

const app = express();

app.use(bodyParser.json());
app.use(express.static(path.join(__dirname, '/')));
app.use(cors());

mongoose.connect(process.env.MONGO_URI, {
  user: process.env.MONGO_USERNAME,
  pass: process.env.MONGO_PASSWORD,
  useNewUrlParser: true,
  useUnifiedTopology: true
}, function(err) {
  if (err) {
    console.error("MongoDB connection error:", err);
  } else {
    // Connection successful
  }
});

const Schema = mongoose.Schema;

const dataSchema = new Schema({
  name: String,
  id: Number,
  description: String,
  image: String,
  velocity: String,
  distance: String
});

const planetModel = mongoose.model('Planet', dataSchema);

// Example fallback data used if a DB record isn't found (useful for local testing)
const samplePlanets = {
  1: { id: 1, name: 'Mercury', description: 'Closest planet to the Sun' },
  2: { id: 2, name: 'Venus', description: 'Second planet from the Sun' }
};

planetModel.findOne({ id: 1 }, function(err, planetData) {
  if (err) {
    console.error("Error fetching planet data:", err);
  } else {
    // Example usage
  }
});

app.get('/', async (req, res) => {
  res.sendFile(path.join(__dirname, '/', 'index.html'));
});

app.post('/planet', async (req, res) => {
  const id = parseInt(req.body.id, 10);
  if (isNaN(id)) {
    return res.status(400).json({ error: 'Invalid id' });
  }
  try {
    const planet = await planetModel.findOne({ id: id }).lean().exec();
    if (planet) {
      return res.json(planet);
    }
    // Fallback to sample data if DB not available or record missing
    if (samplePlanets[id]) {
      return res.json(samplePlanets[id]);
    }
    return res.status(404).json({ error: 'Planet not found' });
  } catch (err) {
    console.error('Error fetching planet:', err);
    return res.status(500).json({ error: 'Internal server error' });
  }
});

module.exports = app;

let mongoose = require('mongoose');
let server = require('./app');
let chai = require('chai');
let chaiHttp = require('chai-http');

chai.should();
chai.use(chaiHttp);

describe('Planets API Suite', () => {
  describe('Fetching Planet Details', () => {
    it('should fetch a planet named Mercury', (done) => {
      let payload = { id: 1 };
      chai.request(server)
        .post('/planet')
        .send(payload)
        .end((err, res) => {
          res.should.have.status(200);
          res.body.should.have.property('id').eql(1);
          res.body.should.have.property('name').eql('Mercury');
          done();
        });
    });

    it('should fetch a planet named Venus', (done) => {
      let payload = { id: 2 };
      chai.request(server)
        .post('/planet')
        .send(payload)
        .end((err, res) => {
          res.should.have.status(200);
          res.body.should.have.property('id').eql(2);
          res.body.should.have.property('name').eql('Venus');
          done();
        });
    });
  });
});

2024-02-09 18:16:16 Running DAST v4.0.25 on Python 3.10.12
Starting the ZAP Server
Running ZAP with parameters ['/zap/zap.sh', '-daemon', '-host', '0.0.0.0', '-port', '41596', '-dir', '/app/zap', ...]
looking for ZAP at http://127.0.0.1:41596...
Spider starting with target: http://54762898-review-feature-ca-pqok5f.139.84.208.48.nip.io
Spider complete
The following URLs were scanned:
GET https://54762898-review-feature-ca-pqok5f.139.84.208.48.nip.io/
...
PASS: Vulnerable JS Library (Powered by Retire.js) [10003]
WARN: Content Security Policy (CSP) Header Not Set [10038] x 3
PASS: Content-Type Header Missing [10019]
SUMMARY - PASS: 42 | WARN: 6 | SKIP: 12
Uploading artifacts...
gl-dast-report.json: found 1 matching artifact
Job succeeded