Egon Okerman
d1417e82f8
Modify CWE and OWASP Top 10 links to follow standard link format (APPSEC-1134) ( #3529 )
...
* Fix all CWE references
* Fix all OWASP references
* Fix missing CWE prefixes
2024-01-15 17:15:56 +01:00
Loris S
1a8d33d656
Modify S2068: Fix Typo ( #2132 )
2023-06-09 14:31:04 +02:00
Fred Tingaud
16f6c0aecf
Inline adoc when include has no additional value ( #1940 )
...
Inline adoc files when they are included exactly once.
Also fix language tags because this inlining gives us better information
on what language the code is written in.
2023-05-25 14:18:12 +02:00
Jamie Anderson
2d8892defb
Modify rules: Remove "owasp-aX" tag ( #1655 )
2023-03-16 15:25:13 +01:00
Alban Auzeill
b65c1f1515
provide missing quickfixes information
2022-09-30 16:35:53 +02:00
hendrik-buchwald-sonarsource
2e120ef937
Modify rule S2068: Adjust samples to new rule behavior ( #1268 )
2022-09-16 13:49:50 +02:00
Alexandre Gigleux
01bad1b800
Map rules to OWASP ASVS 4 ( #1110 )
...
https://sonarsource.atlassian.net/browse/MMF-2794
2022-07-29 13:35:38 +02:00
pedro-oliveira-sonarsource
082b3ef269
Modify: Fix old/broken embedded links ( #1100 )
2022-07-08 13:58:56 +02:00
pedro-oliveira-sonarsource
b04b29019c
[APPSEC-3] Security rules are mapped to PCI DSS 4.0 ( #1007 )
2022-05-24 16:19:27 +02:00
pedro-oliveira-sonarsource
4cd575af12
[APPSEC-2] New security standard - PCI DSS 3.2 ( #1005 )
2022-05-23 09:00:28 +02:00
github-actions[bot]
eb20454117
Create rule S6418: Hard-coded secrets are security-sensitive ( #911 )
2022-04-13 10:10:31 +02:00
jtingsanchali
96d9ddb930
RULEAPI-755 Update CWE URLs by removing .html suffix and update with https protocol ( #926 )
...
* Change affects only see.adoc and rule.adoc files, not comments-and-links.adoc files
2022-04-07 08:53:59 -05:00
Fred Tingaud
b4161466e6
RULEAPI-661: Add syntax coloring
2022-02-04 16:28:24 +00:00
Pierre-Loup
e7ad1012e3
RULEAPI-709: Security rules are mapped to the OWASP Top 10 2021 security-standard ( #545 )
2021-11-01 15:00:32 +01:00
Pierre-Loup
2eb4c50a9b
RULEAPI-710: Validate that security-standards are not shadowed
2021-10-29 16:55:50 +00:00
Pierre-Loup
547094ab3c
Update CWE mapping ( #534 )
2021-10-28 10:07:16 +02:00
Arseniy Zaostrovnykh
5ba82ae371
RULEAPI-665: Remove security standards from the irrelevant language-specific rules ( #362 )
2021-09-21 15:40:35 +02:00
Arseniy Zaostrovnykh
f7904cebe7
RULEAPI-666: Migrate the "List of parameters", "Highlighting" and "Message" fields from jira RSPEC ( #346 )
2021-09-20 13:38:42 +00:00
Arseniy Zaostrovnykh
11c08de44a
Revert "RULEAPI-665: Remove security standards from the irrelevant language-specific rules" ( #361 )
...
This reverts commit 892bccde8ffcdf2a6d662d97ec469cd63de87878.
2021-09-17 13:50:03 +02:00
Arseniy Zaostrovnykh
892bccde8f
RULEAPI-665: Remove security standards from the irrelevant language-specific rules
2021-09-17 13:44:41 +02:00
Arseniy Zaostrovnykh
b76bc57083
RULEAPI-576: add a horizontal rule between rule description and comments
2021-06-08 15:52:13 +02:00
Arseniy Zaostrovnykh
6c1ad2c13c
Fix the comment display: rule-id, timestamp, GH visibility, link direction
2021-06-03 09:05:38 +02:00
Arseniy Zaostrovnykh
cdd7690a79
Export comments and rspec-to-rspec links from jira
2021-06-02 20:44:38 +02:00
Arseniy Zaostrovnykh
1d713451d6
Undo the abuse of compatibleLanguages metadata field
2021-02-16 15:00:44 +01:00
Arseniy Zaostrovnykh
f6093ee186
Overapproximate compatibleLanguages and tags/standards
2021-02-02 19:11:00 +01:00
Alban Auzeill
9ebd45f206
Add rules 2000-2999
2020-06-30 17:16:12 +02:00
