The context of the question is not clear. Could you tell us more about what you're asking and we can try to get you an answer?

Have a look at this document to see how to scan a Python project with OWASP Dependency Check: github.com/jeremylong/dependencycheck#readme

Glad it was helpful!

Determining which are false positives can take some practice. Generally, you look at the CVE information from NIST and check your dependency version to see if they match or perhaps you have a different version which is not vulnerable.

@@CloudNativeDevelopment thanks. I will try to determine like that.

Great Question! It was a little out side of the scope of what we wanted to present with this video but it is actually not terribly difficult to do. You need to create a Kubernetes Secret containing the authentication information for your git repository (either basic auth or SSH) then associate that secret with the ServiceAccount running your pipeline or specific task (in Openshift this will be the `pipeline` service account by default) *Specifics on how to do that can be found here:* *Openshift Pipeline Docs:* docs.openshift.com/pipelines/1.14/secure/authenticating-pipelines-using-git-secret.html#op-configuring-basic-authentication-for-git_authenticating-pipelines-using-git-secret *Tekton Docs:** tekton.dev/docs/pipelines/auth/#configuring-basic-auth-authentication-for-git

@@CloudNativeDevelopment can you share it any documentation link for this?

​@@ellathaiyumpesuvom2566 Previous comment contained the documentation but it was hidden unless you hit "Show More", linking it again but let us know if there is anything more specific you were looking for. Openshift Pipeline Docs: docs.openshift.com/pipelines/1.14/secure/authenticating-pipelines-using-git-secret.html#op-configuring-basic-authentication-for-git_authenticating-pipelines-using-git-secret Tekton Docs:* tekton.dev/docs/pipelines/auth/#configuring-basic-auth-authentication-for-git

@@CloudNativeDevelopment Thank you so much I didn't noticed that. My bad

I think that it probably could be used to bootstrap a frontend project since you can add scripting and post actions to an Archetype.

@@CloudNativeDevelopment I see, that makes sense, thanks for the reply!

Did you find or build such an archetype? I'm currently creating one with Java 17, Spring, MongoDB, React because this is the stack i use often.

@@WisdomofHal Perhaps we should do a new tutorial to show how to create such an archetype.

Sorry, but I am not sure I understand the question... Could you clarify?

​@@CloudNativeDevelopment how to get sudo?

@@kuyokuSanYou wouldn't give users of DevSpaces super-user access. It would be an anti-pattern and would not provide any significant value to the users. Could it be done? Perhaps. I would recommend against it as it provides too many possible exploitation possibilities. It would help if you were to explain why you want to grant superuser privileges.

@@CloudNativeDevelopment Hello, I want to upgrade my Go version, so I plan to remove the old version and add the latest Go version to my PATH. But do I need to be root for this? How can I upgrade my Go version?

@@mervenazmumcu8096 you would need to rebuild the Dev Spaces base image... There should be newer based images released and in the registry on a regular basis, so you should be able to update your DevFile to point to the newer image with the newer version of Go.

I'm sorry. I was able to solve it

We're so glad you found the solution. Could you share what you found for others who may have issues in the future?

What could we do to make it easier for you? Any feedback would be appreciated!

As is so often the case, the answer is "it depends"... Some OpenAPI implementations DO validate against the schema, some do not, and some are in the middle. A lot of the generators provided by OpenAPI Generator DO provide schema validation. Other embedded implementations, like Eclipse Vert.x, handle it based on the loaded OpenAPI contract. Some others I have seen do not provide schema validation at all and it is left to the developer to implement it.

There is another project from Apicurio team called Apicurio Registry that works as API/Schema Registry.

Great question! You absolutely can. The way to accomplish this is by just adding multiple attributes under the projects section, you can see an example in the Random Thoughts repo from the video here: github.com/cgruver/che-demo-app/blob/main/devfile.yaml#L6 or if you prefer the devfile docs: devfile.io/docs/2.2.1/adding-projects , just scroll down to the "A devfile with multiple projects section". One thing to note, by default only the first project listed will show in the editor when the workspace starts up. There are 2 options to fix this. First, you can manually add the folder through the editor, by default all projects are cloned into the "/projects" directory. The other option is to automate! You can create a code-workspace, Random Thoughts example: github.com/cgruver/che-demo-app/blob/main/che-demo.code-workspace#L2 , file to define your settings and store it in one of the git repos for your project, my preference is the one the devfile lives in, from there you can either manually load it once with the workspace starts by selecting it in the editor, or for extra style points add an env variable in your devfile to load it automatically, for an example of that check this: github.com/NateLove/quarkus-kafka/blob/main/devfile.yaml#L11 .

Project Object Model (POM) files are pretty common for Java/JVM applications. You can learn more at maven.apache.org/

I'm glad you found it useful!

Great question, there is an environment variable you can define in your define to apply a default code workspace config. The variable is VSCODE_DEFAULT_WORKSPACE, and you can see an example of that here: github.com/NateLove/quarkus-kafka/blob/main/devfile.yaml#L11

​@@CloudNativeDevelopment That's awesome! Thanks for the quick reply. I updated my devfile, committed and pushed to the fork and I noticed that I need to delete the current workspace and load it again. Do you know if there is any way to reload the latest version of the devfile without creating a workspace from scratch?

@@jorgeadrian93 Another great question. As of version 3.7 I believe of the operator they added an option to restart from local devfile. If you click on the button in the lower left where it says Dev Spaces, that should open the menu and give you the option to restart from there. Word of caution though, before doing this make sure to push any code changes, if you accidentally make a change to the devfile that can break the workspace it can be tough to recover.

@@CloudNativeDevelopment Very neat ... thanks for sharing 😁Where do you get those tips and tricks? I don't see them in the documentation.

@@jorgeadrian93 well I've been fortunate to be able to work directly with the engineering team, so I've learned a lot from them. I will say they do try to announce the new features with the release notes so I did find the workspace info there access.redhat.com/documentation/en-us/red_hat_openshift_dev_spaces/3.7/html/release_notes_and_known_issues/new-features#enhancement-crw-4531, but it's a newer feature so it may take some time for it to make it to the official docs.

Yes, you certainly can. Name the class something like __clientApp__.java, and the name will be set to the value of the "clientApp" property that you would define in the archetype-metadata.xml as a "requiredProperty".

It's a good question. Depending on what you need for your Generator, it may be possible to just write a new implementation class with inherits the same options from an existing generator class (and thus minimizing the Java code required), but since this generator tool is written in Java there will almost always be some Java code needed. The primary reason is that you need to name the generator, allow for any language-specific parameters, and also tell the generator the list of files to be generated. Another option, but one I have not tried, is to use something like this native Dart generator: pub.dev/packages/openapi_generator

Glad you liked it! Yes, you can definitely use this with Vue and I have done so on several occasions. Check out the video and tutorial here: appdev.consulting.redhat.com/tracks/contract-first/contract-first-for-ui-development.html

For most frameworks the implemented code will always take precedence over the configured spec file. Have a look at this document as I think it can help you serve the static specification instead of the generated one: springdoc.org/faq.html#how-can-use-custom-jsonyml-file-instead-of-generated-one-

KZbin automatically adapts the quality based on your connection speed. You might try forcing it to 1080p and see if that helps. When I view it at 1080p it's quite clear.

It does not have as many features as the IDE plugins or some other tools. It's quite good, but does not support all OpenAPI features.

Some generators offer that option and others do not. Perhaps the SpringBoot generator now has that capability?

Check their documentation here: www.jetbrains.com/help/idea/maven-support.html#maven_archetype

Thanks for the feedback! We noticed that the certificate had expired yesterday and I have requested a refresh. We hope for it to be resolved very soon!

Sorry for the long delay. The web site should be working now and we apologize for the inconvenience!

Yes, that is correct! The instructions here (github.com/redhat-appdev-practice/j4k-vertx-demo) walk you through creating the code on your own.

Also, register now for the upcoming (Free) J4K 2022 (j4k.io) virtual conference where I will be showing a follow-up session focusing on Internet-of-Things with Vert.x on Kubernetes.

@@CloudNativeDevelopment thanks for the tip, this topic is very interesting for me 👍

That would require a small change to the upstream OpenAPI Generator and not just modification of the templates. It's certainly possible. For SpringBoot, you could add it here: github.com/OpenAPITools/openapi-generator/blob/master/modules/openapi-generator/src/main/java/org/openapitools/codegen/languages/SpringCodegen.java#L462 and then include a template for a repository class.

Schema

The IDE is Visual Studio Code, the Mock API server is done using FakeIt, the UI is built in Angular, the API client is being generated by OpenAPI Generator. You can read detailed instructions here: appdev.consulting.redhat.com/tracks/contract-first/contract-first-for-ui-development.html

Probably not a working application, but it will generate a lot of an application (or client library) and then the developer just needs to fill in the business logic. For example, the JAXRS-Spec generator will create the REST Controllers and annotations and Initiator and models (and potentially JPA entities), and then the developer just needs to implement the Service methods which provide the responses.

Was there an issue that you noted? Happy to try to improve or adjust!

In my experience, I have found that OpenAPI Generator is far more capable and robust than Swagger CodeGen. The number of languages and frameworks supported as well as the simple ability to customize how the code gets generated means that I prefer OpenAPI Generator.

I did not use a shortcut. IntelliJ IDEA just has a tab at the bottom which will open a terminal in the project root directory.

@@CloudNativeDevelopment Thanks for replying I was inferring to 6:33 timestamp

@@gcajay8225 Oh! I see... I didn't use a shortcut, I used a command. When you use the JetBrains toolbox, it can create commands for your IDEs. In this case, I ran the commend `idea /path/to/folder`. I also have this mapped as an action in my file browser (Thunar in XFCE on Linux) so that I can right-click on a directory and "Open In IntelliJ"

I'm not exactly sure, but it looks like it could be a permissions problem and it's unable to create a temp file. Another possibility is that if you are running in a container (e.g. Docker) that the filesystem is not writable. I would reach out to the Google Group for DependencyCheck here: groups.google.com/g/dependency-check - EDIT: Wrong link

It's not something I have done myself, but this project on GitHub looks like it might accomplish what it is you are looking for: github.com/openapi-contrib/openapi-schema-to-json-schema

@@CloudNativeDevelopment thanks but i am looking for a maven plugin to do the same..

It's not something I have done myself in the past, but this project on GitHub looks like it might do what you are looking for: github.com/openapi-contrib/openapi-schema-to-json-schema

The custom SpringBoot/Spring Data JPA templates we have been using can be found here: github.com/redhat-appdev-practice/spring-data-openapi-templates The ToDo API code can be found here: github.com/redhat-appdev-practice/todo-api