Pierre-Loup
770348d041
Avoid OWASP Top 10 security-standard mismatch between metadata and description links (RULEAPI-798) ( #3537 )
...
* Add check for security standard mismatch
* Fix security standard mismatches
* Fix Resources/Standards links for secrets rules
* Fix check
* Fix links and update security standard mapping
* Fix maintanability issue
* Apply review suggestions
* Apply suggestions from code review
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
* Fix typo
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
---------
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
2024-01-17 17:20:28 +01:00
Egon Okerman
d1417e82f8
Modify CWE and OWASP Top 10 links to follow standard link format (APPSEC-1134) ( #3529 )
...
* Fix all CWE references
* Fix all OWASP references
* Fix missing CWE prefixes
2024-01-15 17:15:56 +01:00
Antonio Aversa
a02bf814d4
Clean Code Taxonomy: add "code" to all non-obsolete metadata.json ( #2793 )
2023-08-04 17:19:38 +02:00
Fred Tingaud
51369b610e
Make sure that includes are always surrounded by empty lines ( #2270 )
...
When an include is not surrounded by empty lines, its content is inlined
on the same line as the adjacent content. That can lead to broken tags
and other display issues.
This PR fixes all such includes and introduces a validation step that
forbids introducing the same problem again.
2023-06-22 10:38:01 +02:00
John-Clifton-SonarSource
83e74e9318
Update description.adoc for S6249 ( #2112 )
...
Fixing a couple of tiny typos.
## Review
A dedicated reviewer checked the rule description successfully for:
- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
2023-06-08 13:47:34 +01:00
Fred Tingaud
16f6c0aecf
Inline adoc when include has no additional value ( #1940 )
...
Inline adoc files when they are included exactly once.
Also fix language tags because this inlining gives us better information
on what language the code is written in.
2023-05-25 14:18:12 +02:00
Rudy Regazzoni
d6a6439e46
Add bicep and json for language support in code example ( #1830 )
2023-05-05 11:12:16 +02:00
Loris S
9d8b209353
Modify Multiple Rules(IAC): Remove Non-IAC-Based Standards in Metadata (APPSEC-5) ( #1238 )
2022-09-14 10:29:18 +02:00
github-actions[bot]
8df8965973
Create rule S6249: Authorizing HTTP communications with S3 buckets is security-sensitive (APPSEC-40) ( #1095 )
2022-08-08 10:49:02 +02:00
Alexandre Gigleux
01bad1b800
Map rules to OWASP ASVS 4 ( #1110 )
...
https://sonarsource.atlassian.net/browse/MMF-2794
2022-07-29 13:35:38 +02:00
pedro-oliveira-sonarsource
082b3ef269
Modify: Fix old/broken embedded links ( #1100 )
2022-07-08 13:58:56 +02:00
pedro-oliveira-sonarsource
b04b29019c
[APPSEC-3] Security rules are mapped to PCI DSS 4.0 ( #1007 )
2022-05-24 16:19:27 +02:00
pedro-oliveira-sonarsource
4cd575af12
[APPSEC-2] New security standard - PCI DSS 3.2 ( #1005 )
2022-05-23 09:00:28 +02:00
marco-bearzi-sonarsource
2ac4200691
Modify rule S6249: Add Python as covered language ( #970 )
2022-05-10 11:08:38 +02:00
Alexandre Gigleux
9cb2845112
Support of PCI DSS v3.2 ( #925 )
...
* Rename "PCI DSS" to "PCI DSS 3.2" because the security standard is versioned
* Update metadata.json of one rule using the wrong "PCI DSS"
2022-04-12 21:58:21 +02:00
jtingsanchali
96d9ddb930
RULEAPI-755 Update CWE URLs by removing .html suffix and update with https protocol ( #926 )
...
* Change affects only see.adoc and rule.adoc files, not comments-and-links.adoc files
2022-04-07 08:53:59 -05:00
Pierre-Loup
d5572cefe6
Revert "Modify rule S6249: Update issue message ( #879 )" ( #934 )
...
This reverts commit a6eed4fa5953db4a4b9c3f0db8b2fb6dc4e0690d.
Co-authored-by: Loris S <91723853+loris-s-sonarsource@users.noreply.github.com>
2022-04-06 14:44:06 +02:00
Pierre-Loup
a6eed4fa59
Modify rule S6249: Update issue message ( #879 )
2022-04-05 14:57:08 +02:00
eric-therond-sonarsource
aa8b82989c
update sensitive code samples s6249 ( #845 )
2022-02-22 18:09:50 +01:00
Fred Tingaud
b4161466e6
RULEAPI-661: Add syntax coloring
2022-02-04 16:28:24 +00:00
Pierre-Loup
c6f14b6a20
Add AWS tag to IaC rules ( #662 )
2021-12-16 15:02:01 +01:00
Pierre-Loup
e7ad1012e3
RULEAPI-709: Security rules are mapped to the OWASP Top 10 2021 security-standard ( #545 )
2021-11-01 15:00:32 +01:00
Arseniy Zaostrovnykh
2301f5808e
RULEAPI-695: remove extra/coveredLanguages field
2021-09-28 13:36:45 +02:00
Arseniy Zaostrovnykh
ec55b6ead1
RULEAPI-687: Migrate legacy keys from Jira RSPEC ( #392 )
2021-09-24 09:08:46 +02:00
Arseniy Zaostrovnykh
f7904cebe7
RULEAPI-666: Migrate the "List of parameters", "Highlighting" and "Message" fields from jira RSPEC ( #346 )
2021-09-20 13:38:42 +00:00
Arseniy Zaostrovnykh
6fc8e148c2
RULEAPI-644: Export security standards from Jira
2021-06-08 08:36:49 +02:00
Arseniy Zaostrovnykh
1e3834e79c
Fixed nightly update: mark the closed rules
2021-05-21 17:48:13 +02:00
