ishangsf/rspec
2
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Modify rule S6992/S6999: Add missing variables (APPSEC-1885) (#4047)

Browse Source
This commit is contained in:
Hendrik Buchwald 2024-07-09 11:39:30 +02:00 committed by GitHub
parent 9c0b794d64
commit f740f91b5e
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
3 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
rspec-tools/rspec_template/single_language/secrets/rule.adoc
View File

@ -18,6 +18,8 @@ exploiting the secret.
// Where possible, use predefined content for common impacts. This content can // Where possible, use predefined content for common impacts. This content can
// be found in the folder "shared_content/secrets/impact". // be found in the folder "shared_content/secrets/impact".
// When using predefined content, search for any required variables to be set and include them in this file.
// Not adding them will not trigger warnings.
//include::../../../shared_content/secrets/impact/some_impact.adoc[] //include::../../../shared_content/secrets/impact/some_impact.adoc[]

2
rules/S6992/secrets/rule.adoc
View File

@ -16,6 +16,8 @@ exploiting the secret.
// "An attacker can use this {secret_type} to ..." // "An attacker can use this {secret_type} to ..."
:secret_type: token :secret_type: token
:service_name: Equinix
include::../../../shared_content/secrets/impact/infrastructure_takeover.adoc[] include::../../../shared_content/secrets/impact/infrastructure_takeover.adoc[]
include::../../../shared_content/secrets/impact/data_compromise.adoc[] include::../../../shared_content/secrets/impact/data_compromise.adoc[]

2
rules/S6999/secrets/rule.adoc
View File

@ -16,6 +16,8 @@ exploiting the secret.
// "An attacker can use this {secret_type} to ..." // "An attacker can use this {secret_type} to ..."
:secret_type: application key or consumer key :secret_type: application key or consumer key
:service_name: OVH
include::../../../shared_content/secrets/impact/infrastructure_takeover.adoc[] include::../../../shared_content/secrets/impact/infrastructure_takeover.adoc[]
include::../../../shared_content/secrets/impact/data_compromise.adoc[] include::../../../shared_content/secrets/impact/data_compromise.adoc[]