rspec/rspec-tools/rspec_template/single_language/secrets/metadata.json

{
  "title": "SECRET_TYPE should not be disclosed",
  "type": "VULNERABILITY",
  "code": {
    "impacts": {
      "SECURITY": "BLOCKER"
    },
    "attribute": "TRUSTWORTHY"
  },
  "status": "beta",
  "remediation": {
    "func": "Constant\/Issue",
    "constantCost": "30min"
  },
  "tags": [
    "cwe",
    "cert"
  ],
  "defaultSeverity": "Blocker",
  "ruleSpecification": "RSPEC-${RSPEC_ID}",
  "sqKey": "S${RSPEC_ID}",
  "scope": "All",
  "securityStandards": {
    "CWE": [
      798,
      259
    ],
    "OWASP": [
      "A3"
    ],
    "CERT": [
      "MSC03-J."
    ],
    "OWASP Top 10 2021": [
      "A7"
    ],
    "PCI DSS 3.2": [
      "6.5.10"
    ],
    "PCI DSS 4.0": [
      "6.2.4"
    ],
    "ASVS 4.0": [
      "2.10.4",
      "3.5.2",
      "6.4.1"
    ],
    "STIG ASD_V5R3": [
      "V-222642"
    ]
  },
  "defaultQualityProfiles": [
    "Sonar way"
  ],
  "quickfix": "unknown"
}