This application is an intentionally vulnerable Spring Boot application. The intent is to demonstrate the capabilities of Contrast Security's Maven plugin when used with continuous integration (such as TravisCI or CircleCI).

mvn install

java -jar target/provider-search-0.0.1-SNAPSHOT.jar

• Go to http://localhost:8080/
• Search for zip 21230

mvn clean test

You will need an account with Contrast https://www.contrastsecurity.com

• Review the run-with-contrast profile settings in pom.xml

• Set the following environment variables

CONTRAST_MAVEN_USERNAME
CONTRAST_MAVEN_ORGUUID
CONTRAST_MAVEN_TEAMSERVERURL
CONTRAST_MAVEN_APIKEY
CONTRAST_MAVEN_SERVICEKEY

• mvn install -P run-with-contrast

The application runs using an in-memory H2 database. Schema and sample data should load on boot.