Merge branch 'devopsshield:main' into main

Author: emmanuel-knafo

labs/lab04.md

@@ -4,7 +4,7 @@ In this lab you will reuse workflow templates.
 
 References:
 - [Gitleaks.io](https://gitleaks.io/)
-- [OWASP Dependency-Check](https://owasp.org/www-project-dependency-check/)
+- [OWASP Dependency-Review GitHub Action](https://github.com/actions/dependency-review-action)
 - [CodeQL](https://codeql.github.com/)
 
 ## 4.1 Secret Scanning with Gitleaks
@@ -14,10 +14,12 @@ References:
 1. Run the pipeline to see
 ![image](https://github.com/devopsshield/devsecops-workshop/assets/112144174/db223fc0-ce46-422a-a564-04aa9573dc4a)
 
-## 4.2 Software Composition Analysis with OWASP Dependency Check
+## 4.2 Software Composition Analysis with OWASP Dependency Review
 
-1. Uncomment the actions ```dependency-check/Dependency-Check_Action@main```
-![image](https://github.com/devopsshield/devsecops-workshop/assets/112144174/69843416-215b-440f-ba3a-b5c83f393ae5)
+1. prerequisite
+![image](https://github.com/devopsshield/devsecops-workshop/assets/112144174/6a37ed61-fb3e-4a64-adc6-1d9d64e1b51b)
+1. Uncomment the actions ```actions/dependency-review-action```
+![image](https://github.com/devopsshield/devsecops-workshop/assets/112144174/8b01c834-a9a5-4316-b2f8-0575828b5dc4)
 1. See the pipeline run
 ![image](https://github.com/devopsshield/devsecops-workshop/assets/112144174/5a573256-dd04-4783-b91d-18e3016595da)
 

labs/lab05.md

@@ -29,6 +29,6 @@ docker run -d -p 8080:8080 devopsshield/devopsshield
 ![image](https://github.com/devopsshield/devsecops-workshop/assets/112144174/8c6a22ab-a0e9-4030-8091-1fe23678becc)
 ![image](https://github.com/devopsshield/devsecops-workshop/assets/112144174/bb2f72d3-bf3e-4be8-9fa9-5bd196e4f346)
 8. Look at also the DevSecOps Controls
-![image](https://github.com/devopsshield/devsecops-workshop/assets/112144174/187f70ef-8c5d-47dc-9bfa-89d4d816fd15)
+![image](https://github.com/devopsshield/devsecops-workshop/assets/112144174/3c6f8dd0-8085-4613-b75b-45da49f7aea0)
 9. Explore the various Policies and Libraries
 ![image](https://github.com/devopsshield/devsecops-workshop/assets/112144174/06ae39ce-0903-428e-850f-0e6f83a08d93)