A minimal ToDo web API demonstrating secure DevOps practices, using .NET 9 and a layered architecture for application, domain, and infrastructure concerns. The project includes unit tests and a security analysis document.
- Install the .NET 9 SDK: Download .NET 9 SDK
- Optional: Visual Studio or Visual Studio Code with C# extensions
- Clone the repository and open a terminal in the repository root.
- Restore packages:
dotnet restore
- Build the solution:
dotnet build
- Run the API project (from the project folder that contains
Program.cs):dotnet run
- Open the API in a browser at the URL shown in the console (typically
https://localhost:5001orhttp://localhost:5000).
To run all tests from the solution root, use the following command:
dotnet testTo run a specific test project, specify its path:
dotnet test ./ToDoDevSecOpsMinimalAPI.Tests/ToDoDevSecOpsMinimalAPI.Tests.csprojA companion frontend application that works with this API is available at:
- Frontend repository: https://github.com/christojor/ToDoDevSecOpsGUI
Clone and run the frontend separately; configure its API base URL to point at this API (for local development use http://localhost:5000/api or https://localhost:5001/api).
See the full security requirements and analysis: Security Requirements