feat(docker): introduce Java 26 dev/build container and build-secret challenge 71 by sandeshkuldharme1 · Pull Request #2650 · OWASP/wrongsecrets

sandeshkuldharme1 · 2026-09-06T17:22:16Z

This PR introduces a standardized JDK 22 development/build container bundling wrongsecrets-binaries, and adds a new challenge demonstrating secret leakage in build container layers and intermediate stages.

Motivation

Environment Parity: Standardizes the build environment using JDK 22 and wrongsecrets-binaries, preventing local JDK version mismatches across contributor machines.
Security Education: Illustrates risks of passing sensitive credentials via ARG or intermediate build layers in multi-stage Docker builds.

Proposed Changes

Dev Container: Added .devcontainer/devcontainer.json configured with JDK 22 and docker-in-docker.
New Challenge: Created ChallengeBuildContainer.java under Docker challenges.
Unit Tests: Added unit tests in ChallengeBuildContainerTest.java.
Educational Content: Added challenge_build_container.html with remediation guidance.

Testing Done

Unit tests passed with ./mvnw clean test
Container image built and verified locally

Checklist

My code follows the project's style guidelines.
I have performed a self-review of my code.
I have added unit tests.

sandeshkuldharme1 · 2026-09-07T05:58:35Z

Hi @commjoen, I've updated the devcontainer to Java 26 (eclipse-temurin:26-jdk-jammy), added the missing components (forwarded ports, docker-in-docker, Maven postCreate setup), and fixed the UTF-8 BOM encoding issue. Thanks!

commjoen · 2026-09-07T12:03:11Z

just to make sure: how can we now use the devcontainer to build the app completely :) ?

sandeshkuldharme1 · 2026-09-07T13:20:02Z

Hi @commjoen,

Here is how you can use the Dev Container to build and run the entire application completely:

1. Open in Dev Container

In VS Code: Press Ctrl+Shift+P (or Cmd+Shift+P on macOS) $\rightarrow$ select "Dev Containers: Reopen in Container" (or click the green prompt in the bottom-left corner).
In GitHub Codespaces: Select Code $\rightarrow$ Codespaces $\rightarrow$ Create codespace on this branch.

(The container will automatically set up Java, Docker-in-Docker, forwarded ports, and run the Maven setup).

2. Build the Complete App

Inside the integrated Dev Container terminal, run:

./mvnw clean install

commjoen · 2026-09-07T19:14:46Z

Hi @commjoen,

Here is how you can use the Dev Container to build and run the entire application completely:

1. Open in Dev Container

In VS Code: Press Ctrl+Shift+P (or Cmd+Shift+P on macOS)
→
select "Dev Containers: Reopen in Container" (or click the green prompt in the bottom-left corner).

In GitHub Codespaces: Select Code
→
Codespaces
→
Create codespace on this branch.

(The container will automatically set up Java, Docker-in-Docker, forwarded ports, and run the Maven setup).

2. Build the Complete App

Inside the integrated Dev Container terminal, run:
./mvnw clean install

Can you add this to the contributing.md please?

commjoen · 2026-09-08T07:19:20Z

#2646 (comment) shows an example of the components needed for a challenge :)

sandeshkuldharme1 · 2026-09-08T09:56:12Z

Hi @commjoen,

Thanks for the feedback! I have updated the PR with all the requested changes:

Dev Container in CONTRIBUTING.md: Added instructions on how to use the Dev Container (in VS Code & GitHub Codespaces) and run ./mvnw clean install in the contributor environment guide.
Completed Challenge Components: Converted the challenge to standard Challenge 67 following the pattern in #2646:
Challenge67.java extending FixedAnswerChallenge
AsciiDoc files: challenge67.adoc, challenge67_hint.adoc, and challenge67_reason.adoc
Challenge registration in wrong-secrets-configuration.yaml
Unit tests in Challenge67Test.java
Applied ./mvnw spotless:apply formatting
Could you please review when you have a moment? Thanks!

commjoen · 2026-09-08T21:19:13Z

can you instead make the challenge about the dev ocntainer itself and add the missing dependencies? maven-wrapper, nodejs26, etc.? best would be if we don't need any local dependencies anymore i thnk.

…ev containers

…lete devcontainer dependencies

sandeshkuldharme1 · 2026-09-09T06:30:07Z

Hi @commjoen,

Thanks for the feedback! I have updated the PR with all the requested changes:

Refactored Challenge 67 to Dev Container Secret Leak:
- The challenge now specifically demonstrates the risk of hardcoding secrets or API tokens inside .devcontainer/devcontainer.json and container environment variables.
- Added Challenge67.java, unit tests in Challenge67Test.java, AsciiDoc explanation/hint/reason files, and a UI snippet in src/main/resources/challenges/challenge-67/challenge-67.snippet.
- Registered Challenge 67 in wrong-secrets-configuration.yaml.
Self-Contained Dev Container (Zero Local Dependencies):
- Added all missing dependencies to .devcontainer/devcontainer.json:
  - Java 26 runtime (eclipse-temurin:26-jdk-jammy)
  - Node.js 26 feature for npm & commitlint/ESLint
  - Python 3.12 feature for pre-commit & formatting tools
  - Terraform, tflint, and terraform-docs features
  - Docker-in-Docker feature
- Configured postCreateCommand to automatically run npm install, ./mvnw dependency:resolve, and install pre-commit hooks upon launch.
- Updated CONTRIBUTING.md with instructions for the self-contained Dev Container workflow.
Rebased on Upstream Master:
- Rebased cleanly onto the latest upstream/master to resolve all PR merge conflicts and failing preview checks.

Could you please approve the workflow runs and review when you have a moment? Thanks!

commjoen · 2026-09-09T11:42:11Z

2 more things:

feat: add cloud log secret leakage challenge (#345) #2638 will be challenge 67, can you make this challenge 71? sorry for the hassle, we all of all sudden have a peak in contributions
can you add a github action to push the container to GCR? (otherwise happy to do it myself once this PR is merged :D )

Co-authored-by: Jeroen Willemsen <jeroenwillemsen2001@gmail.com>

sandeshkuldharme1 · 2026-09-09T16:41:26Z

Hi @commjoen,
I have made all the requested changes:
Reverted push back to true in pr-preview.yml.
Renumbered the challenge and all corresponding files/tests/configurations to Challenge 71.
Fixed the pre-commit whitespace issue.
Regarding pushing the container to GCR, I would appreciate it if you could add that action after merge! :D
Could you please approve the workflows and review when you have a moment?
Thank you!

…name resource files

commjoen · 2026-09-09T20:37:56Z

It starts to look pretty complete! If the checks pass, I will start looking into the code once more and do some testing probably next week.

sandeshkuldharme1 · 2026-09-09T20:59:25Z

Hi @commjoen,

All 15 core test and security checks (Java tests, Minikube/Vault, Cypress, Podman, SpotBugs, CodeQL, ZAP, Pre-commit) have passed!

The only 2 failing checks are the preview deployment jobs:

build-preview fails at the Docker push step because GitHub restricts GITHUB_TOKEN to read-only permissions on fork PRs, preventing pushes to ghcr.io/OWASP/wrongsecrets.
generate-static-preview fails at the actions/deploy-pages step because GitHub disallows GitHub Pages environment deployments from fork PRs.
Both are expected GitHub permission constraints for external contributors. Whenever you're ready to review or test, let me know if you need anything else!

commjoen · 2026-09-12T22:14:38Z

Hi @sandeshkuldharme1 ! I just get the following error when trying to use a buildcontainer:

5.916 Now using node v26.8.2
5.989 Creating default alias: default -> 26 (-> v26.8.2 *)
6.033 Failed to install Node.js 26
6.033 => Close and reopen your terminal to start using nvm or run the following to us
[2026-09-12T22:12:38.455Z] e it now:
6.033 
6.033 export NVM_DIR="/usr/local/share/nvm"
6.033 [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"  # This loads nvm
[2026-09-12T22:12:38.455Z] 
6.196 default -> 26 (-> v26.8.2 *)
6.197 Updating /etc/bash.bashrc and /etc/zsh/zshrc...
6.463 Now using node v26.8.2
6.724 Now using node v26.8.2
7.023 Now using node v26.8.2
[2026-09-12T22:12:38.455Z] 7.343 Now using node v26.8.2
7.345 node: error while loading shared libraries: libatomic.so.1: cannot open shared object file: No such file or directory
7.346 ERROR: Feature "Node.js (via nvm), yarn and pnpm." (ghcr.io/devcontainers/features/node) failed to install! Look at the documentation at https://github.com/devcontainers/features/tree/main/src/node for help troubleshooting this error.
------
[2026-09-12T22:12:38.457Z] 
 1 warning found (use docker --debug to expand):
 - SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "DEVCONTAINER_SECRET") (line 121)
[2026-09-12T22:12:38.462Z] Dockerfile.extended:64
--------------------
  63 |     ENV PATH="/usr/local/share/nvm/current/bin:${PATH}"
  64 | >>> RUN --mount=type=bind,from=dev_containers_feature_content_source,source=node_4,target=/tmp/build-features-src/node_4 \
  65 | >>>     cp -ar /tmp/build-features-src/node_4 /tmp/dev-container-features \
  66 | >>>  && chmod -R 0755 /tmp/dev-container-features/node_4 \
  67 | >>>  && cd /tmp/dev-container-features/node_4 \
  68 | >>>  && chmod +x ./devcontainer-features-install.sh \
[2026-09-12T22:12:38.462Z]   69 | >>>  && ./devcontainer-features-install.sh \
  70 | >>>  && rm -rf /tmp/dev-container-features/node_4
  71 |     
--------------------
ERROR: failed to build: failed to solve: process "/bin/sh -c cp -ar /tmp/build-features-src/node_4 /tmp/dev-container-features  && chmod -R 0755 /tmp/dev-container-features/node_4  && cd /tmp/dev-container-features/node_4  && chmod +x ./devcontainer-features-install.sh  && ./devcontainer-features-install.sh  && rm -rf /tmp/dev-container-features/node_4" did not complete successfully: exit code: 127

View build details: �]8;;docker-desktop://dashboard/build/mybuilder/mybuilder0/rk88ijtioturjh11cig76amft�\docker-desktop://dashboard/build/mybuilder/mybuilder0/rk88ijtioturjh11cig76amft�]8;;�\
[2026-09-12T22:12:38.644Z] Stop (8540 ms): Run: docker buildx build --load --build-arg BUILDKIT_INLINE_CACHE=1 --build-context dev_containers_feature_content_source=/var/folders/d7/ygj0fhs52qzcqfd3d9n_5ggh0000gn/T/devcontainercli/container-features/0.89.0-1789251144914 --build-arg _DEV_CONTAINERS_BASE_IMAGE=eclipse-temurin:26-jdk-jammy --build-arg _DEV_CONTAINERS_IMAGE_USER=root --build-arg _DEV_CONTAINERS_FEATURE_CONTENT_SOURCE=dev_container_feature_content_temp --target dev_containers_target_stage -f /var/folders/d7/ygj0fhs52qzcqfd3d9n_5ggh0000gn/T/devcontainercli/container-features/0.89.0-1789251144914/Dockerfile.extended -t vsc-wrongsecrets-0b85f91d689425986c75dc656bc587130881ee42cd0e0da03ac07a1a9201aff8-features /Users/razr/Library/Application Support/Code/User/globalStorage/ms-vscode-remote.remote-containers/data/empty-folder
[2026-09-12T22:12:38.644Z] Error: Command failed: docker buildx build --load --build-arg BUILDKIT_INLINE_CACHE=1 --build-context dev_containers_feature_content_source=/var/folders/d7/ygj0fhs52qzcqfd3d9n_5ggh0000gn/T/devcontainercli/container-features/0.89.0-1789251144914 --build-arg _DEV_CONTAINERS_BASE_IMAGE=eclipse-temurin:26-jdk-jammy --build-arg _DEV_CONTAINERS_IMAGE_USER=root --build-arg _DEV_CONTAINERS_FEATURE_CONTENT_SOURCE=dev_container_feature_content_temp --target dev_containers_target_stage -f /var/folders/d7/ygj0fhs52qzcqfd3d9n_5ggh0000gn/T/devcontainercli/container-features/0.89.0-1789251144914/Dockerfile.extended -t vsc-wrongsecrets-0b85f91d689425986c75dc656bc587130881ee42cd0e0da03ac07a1a9201aff8-features /Users/razr/Library/Application Support/Code/User/globalStorage/ms-vscode-remote.remote-containers/data/empty-folder
[2026-09-12T22:12:38.644Z]     at sW (/Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:469:1277)
[2026-09-12T22:12:38.644Z]     at LG (/Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:469:1021)
[2026-09-12T22:12:38.644Z]     at async kW (/Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:488:4689)
[2026-09-12T22:12:38.644Z]     at async hI (/Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:488:5808)
[2026-09-12T22:12:38.644Z]     at async C9 (/Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:669:206)
[2026-09-12T22:12:38.644Z]     at async I9 (/Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:668:16607)
[2026-09-12T22:12:38.644Z]     at async /Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:488:1917
[2026-09-12T22:12:38.650Z] Stop (14032 ms): Run: /Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Plugin).app/Contents/MacOS/Code Helper (Plugin) /Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js up --user-data-folder /Users/razr/Library/Application Support/Code/User/globalStorage/ms-vscode-remote.remote-containers/data --container-session-data-folder /tmp/devcontainers-bc2fba47-bdb6-415f-bc8e-85c5e95558461789251143806 --workspace-folder /Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets --workspace-mount-consistency cached --gpu-availability detect --id-label devcontainer.local_folder=/Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets --id-label devcontainer.config_file=/Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets/.devcontainer/devcontainer.json --log-level debug --log-format json --config /Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets/.devcontainer/devcontainer.json --default-user-env-probe loginInteractiveShell --mount type=volume,source=vscode,target=/vscode,external=true --skip-post-create --update-remote-user-uid-default on --mount-workspace-git-root --include-configuration --include-merged-configuration
[2026-09-12T22:12:38.650Z] Exit code 1
[2026-09-12T22:12:38.653Z] Command failed: /Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Plugin).app/Contents/MacOS/Code Helper (Plugin) /Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js up --user-data-folder /Users/razr/Library/Application Support/Code/User/globalStorage/ms-vscode-remote.remote-containers/data --container-session-data-folder /tmp/devcontainers-bc2fba47-bdb6-415f-bc8e-85c5e95558461789251143806 --workspace-folder /Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets --workspace-mount-consistency cached --gpu-availability detect --id-label devcontainer.local_folder=/Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets --id-label devcontainer.config_file=/Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets/.devcontainer/devcontainer.json --log-level debug --log-format json --config /Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets/.devcontainer/devcontainer.json --default-user-env-probe loginInteractiveShell --mount type=volume,source=vscode,target=/vscode,external=true --skip-post-create --update-remote-user-uid-default on --mount-workspace-git-root --include-configuration --include-merged-configuration
[2026-09-12T22:12:38.653Z] Exit code 1

commjoen · 2026-09-12T22:20:11Z

I found a solution, will update the repo as you can tell :D

commjoen · 2026-09-12T22:23:46Z

now the error is:

6.019 Now using node v26.8.2
6.092 Creating default alias: default -> 26 (-> v26.8.2 *)
6.135 Failed to install Node.js 26
6.135 => Close and reopen your terminal to start using nvm or run the following to use it now:
6.135 
[2026-09-12T22:22:19.085Z] 
6.135 export NVM_DIR="/usr/local/share/nvm"
6.135 [ -s "$NVM_DIR/nvm.sh" ] && \. "$NVM_DIR/nvm.sh"  # This loads nvm
6.293 default -> 26 (-> v26.8.2 *)
[2026-09-12T22:22:19.085Z] 6.295 Updating /etc/bash.bashrc and /etc/zsh/zshrc...
6.550 Now using node v26.8.2
6.794 Now using node v26.8.2
7.047 Now using node v26.8.2
[2026-09-12T22:22:19.085Z] 
7.305 Now using node v26.8.2
7.305 node: error while loading shared libraries: libatomic.so.1: cannot open shared object file: No such file or directory
7.306 ERROR: Feature "Node.js (via nvm), yarn and pnpm." (ghcr.io/devcontainers/features/node) failed to install! Look at the documentation at https://github.com/devcontainers/features/tree/main/src/node for help troubleshooting this error.
[2026-09-12T22:22:19.085Z] ------
[2026-09-12T22:22:19.085Z] 
 1 warning found (use docker --debug to expand):
 - SecretsUsedInArgOrEnv: Do not use ARG or ENV instructions for sensitive data (ENV "DEVCONTAINER_SECRET") (line 121)
[2026-09-12T22:22:19.090Z] Dockerfile.extended:64
--------------------
  63 |     ENV PATH="/usr/local/share/nvm/current/bin:${PATH}"
  64 | >>> RUN --mount=type=bind,from=dev_containers_feature_content_source,source=node_4,target=/tmp/build-features-src/node_4 \
  65 | >>>     cp -ar /tmp/build-features-src/node_4 /tmp/dev-container-features \
  66 | >>>  && chmod -R 0755 /tmp/dev-container-features/node_4 \
  67 | >>>  && cd /tmp/dev-container-features/node_4 \
  68 | >>>  && chmod +x ./devcontainer-features-install.sh \
  69 | >>>  && ./devcontainer-features-install.sh \
  70 | >>>  && rm -rf /tmp/dev-container-features/node_4
  71 |     
--------------------
ERROR: failed to build: failed to solve: process "/bin/sh -c cp -ar /tmp/build-features-src/node_4 /tmp/dev-container-features  && chmod -R 0755 /tmp/dev-container-features/node_4  && cd /tmp/dev-container-features/node_4  && chmod +x ./devcontainer-features-install.sh  && ./devcontainer-features-install.sh  && rm -rf /tmp/dev-container-features/node_4" did not comp
[2026-09-12T22:22:19.090Z] lete successfully: exit code: 127

View build details: �]8;;docker-desktop://dashboard/build/mybuilder/mybuilder0/h67690ujbj6uhvslozsdzupfu�\docker-desktop://dashboard/build/mybuilder/mybuilder0/h67690ujbj6uhvslozsdzupfu�]8;;�\
[2026-09-12T22:22:19.645Z] Stop (72160 ms): Run: docker buildx build --load --build-arg BUILDKIT_INLINE_CACHE=1 --build-context dev_containers_feature_content_source=/var/folders/d7/ygj0fhs52qzcqfd3d9n_5ggh0000gn/T/devcontainercli/container-features/0.89.0-1789251662286 --build-arg _DEV_CONTAINERS_BASE_IMAGE=eclipse-temurin:26-jdk-jammy --build-arg _DEV_CONTAINERS_IMAGE_USER=root --build-arg _DEV_CONTAINERS_FEATURE_CONTENT_SOURCE=dev_container_feature_content_temp --target dev_containers_target_stage -f /var/folders/d7/ygj0fhs52qzcqfd3d9n_5ggh0000gn/T/devcontainercli/container-features/0.89.0-1789251662286/Dockerfile.extended -t vsc-wrongsecrets-0b85f91d689425986c75dc656bc587130881ee42cd0e0da03ac07a1a9201aff8-features /Users/razr/Library/Application Support/Code/User/globalStorage/ms-vscode-remote.remote-containers/data/empty-folder
[2026-09-12T22:22:19.646Z] Error: Command failed: docker buildx build --load --build-arg BUILDKIT_INLINE_CACHE=1 --build-context dev_containers_feature_content_source=/var/folders/d7/ygj0fhs52qzcqfd3d9n_5ggh0000gn/T/devcontainercli/container-features/0.89.0-1789251662286 --build-arg _DEV_CONTAINERS_BASE_IMAGE=eclipse-temurin:26-jdk-jammy --build-arg _DEV_CONTAINERS_IMAGE_USER=root --build-arg _DEV_CONTAINERS_FEATURE_CONTENT_SOURCE=dev_container_feature_content_temp --target dev_containers_target_stage -f /var/folders/d7/ygj0fhs52qzcqfd3d9n_5ggh0000gn/T/devcontainercli/container-features/0.89.0-1789251662286/Dockerfile.extended -t vsc-wrongsecrets-0b85f91d689425986c75dc656bc587130881ee42cd0e0da03ac07a1a9201aff8-features /Users/razr/Library/Application Support/Code/User/globalStorage/ms-vscode-remote.remote-containers/data/empty-folder
[2026-09-12T22:22:19.646Z]     at sW (/Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:469:1277)
[2026-09-12T22:22:19.646Z]     at LG (/Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:469:1021)
[2026-09-12T22:22:19.646Z]     at async kW (/Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:488:4689)
[2026-09-12T22:22:19.646Z]     at async hI (/Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:488:5808)
[2026-09-12T22:22:19.646Z]     at async C9 (/Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:669:206)
[2026-09-12T22:22:19.646Z]     at async I9 (/Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:668:16607)
[2026-09-12T22:22:19.646Z]     at async /Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js:488:1917
[2026-09-12T22:22:19.653Z] Stop (77790 ms): Run: /Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Plugin).app/Contents/MacOS/Code Helper (Plugin) /Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js up --user-data-folder /Users/razr/Library/Application Support/Code/User/globalStorage/ms-vscode-remote.remote-containers/data --container-session-data-folder /tmp/devcontainers-4ec254db-fa79-40b1-996e-ff2a4a709ab21789251661048 --workspace-folder /Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets --workspace-mount-consistency cached --gpu-availability detect --id-label devcontainer.local_folder=/Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets --id-label devcontainer.config_file=/Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets/.devcontainer/devcontainer.json --log-level debug --log-format json --config /Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets/.devcontainer/devcontainer.json --default-user-env-probe loginInteractiveShell --mount type=volume,source=vscode,target=/vscode,external=true --skip-post-create --update-remote-user-uid-default on --mount-workspace-git-root --include-configuration --include-merged-configuration
[2026-09-12T22:22:19.653Z] Exit code 1
[2026-09-12T22:22:19.660Z] Command failed: /Applications/Visual Studio Code.app/Contents/Frameworks/Code Helper (Plugin).app/Contents/MacOS/Code Helper (Plugin) /Users/razr/.vscode/extensions/ms-vscode-remote.remote-containers-0.469.0/dist/spec-node/devContainersSpecCLI.js up --user-data-folder /Users/razr/Library/Application Support/Code/User/globalStorage/ms-vscode-remote.remote-containers/data --container-session-data-folder /tmp/devcontainers-4ec254db-fa79-40b1-996e-ff2a4a709ab21789251661048 --workspace-folder /Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets --workspace-mount-consistency cached --gpu-availability detect --id-label devcontainer.local_folder=/Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets --id-label devcontainer.config_file=/Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets/.devcontainer/devcontainer.json --log-level debug --log-format json --config /Users/razr/workspace/owasp/sandeshkuldharme1/wrongsecrets/.devcontainer/devcontainer.json --default-user-env-probe loginInteractiveShell --mount type=volume,source=vscode,target=/vscode,external=true --skip-post-create --update-remote-user-uid-default on --mount-workspace-git-root --include-configuration --include-merged-configuration
[2026-09-12T22:22:19.660Z] Exit code 1

commjoen · 2026-09-12T23:19:50Z

I now finally have the devcontainer working witha more recent version of ubuntu as a base-image. now it looks a lot more workable.

commjoen · 2026-09-12T23:29:35Z

I can implement https://chatgpt.com/share/6aa5e039-d650-83ed-8d0c-63ff66100be7 after this being merged :)

commjoen

thank you for your PR, will merge it now :)

sandeshkuldharme1 requested review from bendehaan and commjoen as code owners September 6, 2026 17:22

sandeshkuldharme1 had a problem deploying to github-pages September 6, 2026 19:12 — with GitHub Actions Failure

commjoen reviewed Sep 6, 2026

View reviewed changes

Comment thread .devcontainer/devcontainer.json Outdated

commjoen reviewed Sep 6, 2026

View reviewed changes

Comment thread .devcontainer/devcontainer.json

sandeshkuldharme1 changed the title ~~feat(docker): introduce JDK 22 build container and challenge~~ feat(docker): introduce Java 26 dev/build container and build-secret challenge Sep 7, 2026

sandeshkuldharme1 had a problem deploying to github-pages September 7, 2026 18:15 — with GitHub Actions Failure

pre-commit-ci-lite Bot had a problem deploying to github-pages September 7, 2026 19:14 Failure

commjoen reviewed Sep 7, 2026

View reviewed changes

Comment thread src/main/java/org/owasp/wrongsecrets/challenges/docker/ChallengeBuildContainer.java Outdated

sandeshkuldharme1 had a problem deploying to github-pages September 8, 2026 10:10 — with GitHub Actions Failure

sandeshkuldharme1 and others added 7 commits September 9, 2026 11:50

feat(docker): introduce JDK 22 build container and challenge

aa1c276

fix: resolve UTF-8 BOM and configure Java 26 devcontainer

3884ebd

fix(encoding): strip UTF-8 BOM from Java source files

41a017f

style: apply spotless formatting and add Javadoc

ad15ce8

[pre-commit.ci lite] apply automatic fixes

63c3fa8

feat: add Challenge 67 components and update contributing guide for d…

42cd957

…ev containers

feat: refactor Challenge 67 to Dev Container secret leak and add comp…

b1d7a93

…lete devcontainer dependencies

sandeshkuldharme1 force-pushed the feat/jdk22-build-container branch from 5d1e387 to b1d7a93 Compare September 9, 2026 06:26

sandeshkuldharme1 had a problem deploying to github-pages September 9, 2026 10:08 — with GitHub Actions Failure

sandeshkuldharme1 added 2 commits September 9, 2026 16:52

Update pr-preview.yml

c612007

fix(ci): add permissions for pages preview deployment

873afba

sandeshkuldharme1 had a problem deploying to github-pages September 9, 2026 11:38 — with GitHub Actions Failure

sandeshkuldharme1 and others added 6 commits September 9, 2026 21:28

Update .github/workflows/pr-preview.yml

f7c154e

Co-authored-by: Jeroen Willemsen <jeroenwillemsen2001@gmail.com>

Update wrong-secrets-configuration.yaml

f7b0491

Update Challenge71.java

7a82732

Update Challenge71Test.java

66018a0

Rename Challenge67Test.java to Challenge71Test.java

bf5e493

Rename Challenge67.java to Challenge71.java

300cfb9

sandeshkuldharme1 had a problem deploying to github-pages September 9, 2026 18:14 — with GitHub Actions Failure

fix(challenge71): fix Challenge71Test references, yaml syntax, and re…

c61612d

…name resource files

commjoen changed the title ~~feat(docker): introduce Java 26 dev/build container and build-secret challenge~~ feat(docker): introduce Java 26 dev/build container and build-secret challenge 71 Sep 9, 2026

sandeshkuldharme1 had a problem deploying to github-pages September 9, 2026 20:37 — with GitHub Actions Failure

[pre-commit.ci lite] apply automatic fixes

e1356f0

commjoen mentioned this pull request Sep 9, 2026

feat(challenges): add AI coding-agent transcript challenge #2660

Open

10 tasks

pre-commit-ci-lite Bot had a problem deploying to github-pages September 9, 2026 20:42 Failure

sandeshkuldharme1 added 2 commits September 10, 2026 02:34

Update github-pages-preview.yml

6d9a638

Update pr-preview.yml

6848093

sandeshkuldharme1 requested a review from commjoen September 10, 2026 05:53

updated devconatiner versions

068acdd

upgraded contianer to use more recent version of ubuntu

77038a2

fixed broken container

e98aa48

commjoen approved these changes Sep 13, 2026

View reviewed changes

commjoen merged commit 93d10ee into OWASP:master Sep 13, 2026
20 checks passed

Uh oh!

Uh oh!

Conversation

sandeshkuldharme1 commented Sep 6, 2026

Motivation

Proposed Changes

Testing Done

Checklist

Uh oh!

Uh oh!

Uh oh!

sandeshkuldharme1 commented Sep 7, 2026

Uh oh!

commjoen commented Sep 7, 2026

Uh oh!

sandeshkuldharme1 commented Sep 7, 2026

1. Open in Dev Container

2. Build the Complete App

Uh oh!

commjoen commented Sep 7, 2026

1. Open in Dev Container

2. Build the Complete App

Uh oh!

Uh oh!

commjoen commented Sep 8, 2026

Uh oh!

sandeshkuldharme1 commented Sep 8, 2026

Uh oh!

commjoen commented Sep 8, 2026

Uh oh!

sandeshkuldharme1 commented Sep 9, 2026

Uh oh!

commjoen commented Sep 9, 2026

Uh oh!

sandeshkuldharme1 commented Sep 9, 2026

Uh oh!

commjoen commented Sep 9, 2026

Uh oh!

sandeshkuldharme1 commented Sep 9, 2026

Uh oh!

commjoen commented Sep 12, 2026

Uh oh!

commjoen commented Sep 12, 2026

Uh oh!

commjoen commented Sep 12, 2026

Uh oh!

commjoen commented Sep 12, 2026

Uh oh!

commjoen commented Sep 12, 2026

Uh oh!

commjoen left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants