How did I deploy OWASP Security Benchmark Tool in Google Cloud App Engine

Run in the localhost first

$ git clone <a href=""></a> 
$ cd benchmark
$ mvn compile (This compiles it)
$ - This compiles and runs it.

Deploy in App Engine

  1. Download and install the original App Engine SDK for Java from Remember this is not the latest Cloud SDK. This is old App Engine SDK for JAVA which includes. You will see in the hidden link at the bottom where it says, "The Cloud SDK does not include the appcfg tool. If you need to use the appcfg tool, you can download the App Engine SDK by following the instructions below.
  2. Create a appenginengine-web.xml in the "OWASP-Benchmark\target\benchmark\WEB-INF" Folder. Follow the format mentioned here:
  3. Change the web.xml version to 2.5 instead of 3.1 or 3+ [Ref.]
  4. Run,
./appengine-java-sdk/bin/ [options] update [WAR_LOCATION]

Which will be in our case,

./appengine-java-sdk/bin/ update OWASP-Benchmark/target/benchmark/WEB-INF

You will get an errors that are mentioned here.

10,000 total
1,000 per directory

Both limits will violated in this deployment, as there more than 10,000 files and OWASP-Benchmark/target/benchmark/WEB-INF/classes/org/owasp/benchmark/testcode has more than 1,000 files in the folder. The option is to optimize the code and remove some files or ask for more quota limit to Google Cloud Support.

Eventually, the process will deploy the application in App Engine Standard.

Post a Comment