diff --git a/README.md b/README.md
index 3e7f873..eda33eb 100644
--- a/README.md
+++ b/README.md
@@ -1,2 +1,3 @@
 # Instance
 # test
+# done
diff --git a/aws_access_key_id b/aws_access_key_id
new file mode 100644
index 0000000..a600ed5
--- /dev/null
+++ b/aws_access_key_id
@@ -0,0 +1 @@
+AKIAEXAMPLE1234567890
diff --git a/pom.xml b/pom.xml
new file mode 100644
index 0000000..b3aa926
--- /dev/null
+++ b/pom.xml
@@ -0,0 +1,39 @@
+<project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+  xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/maven-v4_0_0.xsd">
+  <modelVersion>4.0.0</modelVersion>
+
+  <groupId>com.dept.app</groupId>
+  <artifactId>MyWebApp</artifactId>
+  <packaging>war</packaging>
+  <version>1.0-SNAPSHOT</version>
+  <name>MyWebApp Maven Webapp</name>
+  <url>http://maven.apache.org</url>
+
+  <dependencies>
+    <!-- JUnit (Test Dependency) -->
+    <dependency>
+      <groupId>junit</groupId>
+      <artifactId>junit</artifactId>
+      <version>3.8.1</version>
+      <scope>test</scope>
+    </dependency>
+
+    <!-- Vulnerable Dependency (Triggers Dependency Review Failure) -->
+    <dependency>
+      <groupId>com.fasterxml.jackson.core</groupId>
+      <artifactId>jackson-databind</artifactId>
+      <version>2.9.9</version> <!-- Known security vulnerabilities -->
+    </dependency>
+
+   <dependency>
+    <groupId>org.apache.struts</groupId>
+    <artifactId>struts2-core</artifactId>
+    <version>2.3.1</version>
+   </dependency>
+
+  </dependencies>
+
+  <build>
+    <finalName>MyWebApp</finalName>
+  </build>
+</project>