Patrick.Sy/spring-petclinic
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-petclinic.git synced 2025-07-21 23:35:50 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Update readme

Browse source
This commit is contained in:
Navaneeth Mysore Govindarajan 2024-02-12 11:46:32 -05:00
parent 6d0237da18
commit 11107aa4d7
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
readme.md
View file

@ -13,9 +13,18 @@ Spring Petclinic is a [Spring Boot](https://spring.io/guides/gs/spring-boot) app
```bash ```bash
git clone https://github.com/spring-projects/spring-petclinic.git git clone https://github.com/spring-projects/spring-petclinic.git
cd spring-petclinic cd spring-petclinic
# This runs the integration tests which invoke vulnerable methods and the runtime labels set in IQ on:
# - ch.qos.logback : logback-core : 1.4.11
# - ch.qos.logback : logback-classic : 1.4.11
# - org.springframework : spring-core : 6.1.1
./mvnw package ./mvnw package
# Note: Change the path the runtime-agent-1.0.7.jar as necessary # Note: Change the path the runtime-agent-1.0.7.jar as necessary
# After starting the app, by navigating to http://localhost:8080/vets.html invokes vulnerable method call.
# This will log the method call and set the runtime labels in IQ.
# If the label is already set due to integration tests, it will log as such.
# If needed, the labels can be deleted manually in IQ before starting the app.
java -javaagent:../runtime-agent-1.0.7.jar \ java -javaagent:../runtime-agent-1.0.7.jar \
-Dsonatype.runtime.agent.enabled=true \ -Dsonatype.runtime.agent.enabled=true \
-Dsonatype.runtime.agent.debugMode=false \ -Dsonatype.runtime.agent.debugMode=false \