feat: Add Challenge 60 — insecure MCP server with prompt injection leaking env var secrets #8692
Workflow file for this run
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| name: Javadoc and Swaggerdoc generator | |
| on: | |
| repository_dispatch: | |
| workflow_dispatch: | |
| push: | |
| branches: [ master ] | |
| pull_request: | |
| branches: [ master ] | |
| permissions: | |
| contents: read | |
| jobs: | |
| javaDocGenerator: | |
| runs-on: ubuntu-latest | |
| steps: | |
| - uses: actions/checkout@v5 | |
| - name: Set up JDK 25 | |
| uses: actions/setup-java@v5 | |
| with: | |
| java-version: "25" | |
| distribution: "temurin" | |
| - name: Clean install | |
| run: ./mvnw --no-transfer-progress clean install -DskipTests -Ddependency-check.skip -Dcyclonedx.skip=true -Dexec.skip | |
| - name: Compile javadoc | |
| run: ./mvnw --no-transfer-progress compile javadoc:javadoc | |
| - name: Start wrongsecrets | |
| run: nohup ./mvnw --no-transfer-progress spring-boot:run -Dspring-boot.run.profiles=without-vault & | |
| - name: Compile javadocs | |
| run: ./mvnw --no-transfer-progress compile javadoc:javadoc | |
| - name: Generate swaggerdoc | |
| run: ./mvnw --no-transfer-progress springdoc-openapi:generate | |
| - name: Upload swagger api doc | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: apidocs | |
| path: target/openapi.json | |
| - name: Upload javadoc | |
| uses: actions/upload-artifact@v4 | |
| with: | |
| name: javadoc | |
| path: target/site |