22 Commits

Author SHA1 Message Date
GabinL21
2e155a926e
SONARIAC-1892 Modify rule S6975: Fix how to fix it section split (#4604) 2025-01-20 11:46:15 +01:00
Pierre-Loup
770348d041
Avoid OWASP Top 10 security-standard mismatch between metadata and description links (RULEAPI-798) (#3537)
* Add check for security standard mismatch

* Fix security standard mismatches

* Fix Resources/Standards links for secrets rules

* Fix check

* Fix links and update security standard mapping

* Fix maintanability issue

* Apply review suggestions

* Apply suggestions from code review

Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>

* Fix typo

Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>

---------

Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2024-01-17 17:20:28 +01:00
Egon Okerman
d1417e82f8
Modify CWE and OWASP Top 10 links to follow standard link format (APPSEC-1134) (#3529)
* Fix all CWE references

* Fix all OWASP references

* Fix missing CWE prefixes
2024-01-15 17:15:56 +01:00
gaetan-ferry-sonarsource
b8f1f649db
Modify S6385: Change text to LayC (APPSEC-1234) (#3353) 2023-10-26 09:21:09 +02:00
daniel-teuchert-sonarsource
14dbf9d5f3
APPSEC-1088: S6385 Improve RSPEC (#3092)
## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)

---------

Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com>
2023-09-20 14:45:38 +02:00
daniel-teuchert-sonarsource
9f5a87c298
Arm/make examples schema compliant (#3047)
This PR changes the JSON examples for ARM rules to make sure that the
code samples will be scanned by sonar-iac-plugin.
To ensure this all resources need a name field and the schema URL has to
be an https and not http URL.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 15:48:50 +02:00
Rudy Regazzoni
a474e70d82
Modify rule S6385: Add language AzureResourceManager (Bicep) (#1901)
Research ticket: https://sonarsource.atlassian.net/browse/SONARIAC-757
Implementation ticket:
https://sonarsource.atlassian.net/browse/SONARIAC-772

PR https://github.com/SonarSource/rspec/pull/1829 Added support for
AzureResourceManager (JSON). This PR extends that work to add Bicep
support. This PR cannot be merged until we support the Bicep language.

---------

Co-authored-by: Marcin Stachniuk <marcin.stachniuk@sonarsource.com>
2023-08-07 08:49:21 +02:00
Antonio Aversa
a02bf814d4
Clean Code Taxonomy: add "code" to all non-obsolete metadata.json (#2793) 2023-08-04 17:19:38 +02:00
Peter Trifanov
fe5c2e4c2f
Modify rule S6385: Change resource type, fix formatting (#2326)
* Change the resource type name from the one copied from Terraform to the one applicable in ARM
* Fix formatting in the bullet point list
2023-06-29 16:15:34 +02:00
Fred Tingaud
16f6c0aecf
Inline adoc when include has no additional value (#1940)
Inline adoc files when they are included exactly once.

Also fix language tags because this inlining gives us better information
on what language the code is written in.
2023-05-25 14:18:12 +02:00
github-actions[bot]
7e324674ba
Create rule S6385: add language AzureResourceManager (#1829)
You can preview this rule
[here](https://sonarsource.github.io/rspec/#/rspec/S6385/azureresourcemanager)
(updated a few minutes after each push).

---------

Co-authored-by: rudy-regazzoni-sonarsource <rudy-regazzoni-sonarsource@users.noreply.github.com>
Co-authored-by: Rudy Regazzoni <rudy.regazzoni@sonarsource.com>
2023-05-12 09:02:37 +02:00
Victor
fe961619f9 migrate rule descriptions to new education format 2023-05-05 16:29:04 +02:00
Loris S
9d8b209353
Modify Multiple Rules(IAC): Remove Non-IAC-Based Standards in Metadata (APPSEC-5) (#1238) 2022-09-14 10:29:18 +02:00
pedro-oliveira-sonarsource
b04b29019c
[APPSEC-3] Security rules are mapped to PCI DSS 4.0 (#1007) 2022-05-24 16:19:27 +02:00
pedro-oliveira-sonarsource
4cd575af12
[APPSEC-2] New security standard - PCI DSS 3.2 (#1005) 2022-05-23 09:00:28 +02:00
jtingsanchali
96d9ddb930
RULEAPI-755 Update CWE URLs by removing .html suffix and update with https protocol (#926)
* Change affects only see.adoc and rule.adoc files, not comments-and-links.adoc files
2022-04-07 08:53:59 -05:00
Pierre-Loup
aa61a85380
Modify rule S6385: update secondary location message (#908)
Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
2022-03-24 08:16:19 +00:00
Pierre-Loup
856eeb79b1
Modify rule S6385: Update highlighting (#904) 2022-03-14 16:06:04 +01:00
Pierre-Loup
d69417e02d
Modify rule S6383: Add secondary location (#895)
* Modify rule S6383: Add secondary location

* Change secondary location message

Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>

* Update message for primary location

Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com>

Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com>
2022-03-14 13:15:31 +00:00
Pierre-Loup
1b061d5ff5
Fix typo in OWASP links from the See section (#807)
* Fix typos in OWASP Top 10 2017 links
* Fixing wrong URI in OWASP Top 10 2021 A4 links
2022-02-10 09:11:45 +01:00
Fred Tingaud
b4161466e6
RULEAPI-661: Add syntax coloring 2022-02-04 16:28:24 +00:00
github-actions[bot]
e0109d1b26
Create rule S6385[terraform]: Azure custom roles should not grant subscription Owner capabilities (#603)
* Create rule S6385

* Add rule description

* Apply suggestions from code review

Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com>

* Update rules/S6385/see.adoc

Fix CWE link

* Update rules/S6385/see.adoc

Fix CWE link

* Add missing azure tag

Co-authored-by: pierre-loup-tristant-sonarsource <pierre-loup-tristant-sonarsource@users.noreply.github.com>
Co-authored-by: Pierre-Loup Tristant <pierre-loup.tristant@sonarsource.com>
Co-authored-by: Pierre-Loup <49131563+pierre-loup-tristant-sonarsource@users.noreply.github.com>
Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com>
Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
2022-01-03 15:07:46 +00:00