Jamie Anderson
d255072981
Modify rules: Rename STIG version in metadata ( #4098 )
...
The Security Technical Implementation Guide security standard is being
renamed from its release date (`2023-06-08`) to its official version and
revision number (`V5R3`). This helps to align with the version number
being used internally for reporting purposes.
2024-07-30 16:10:03 +02:00
Jamie Anderson
9ee16daa47
Modify rules: Add STIG AS&D 2023-06-08 mappings ( #3914 )
...
* Update JSON schema to include STIG ASD 2023-06-08 mapping
* Update rules to add STIG metadata mappings
---------
Co-authored-by: Loris Sierra <loris.sierra@sonarsource.com>
2024-05-06 08:56:31 +02:00
Egon Okerman
d1417e82f8
Modify CWE and OWASP Top 10 links to follow standard link format (APPSEC-1134) ( #3529 )
...
* Fix all CWE references
* Fix all OWASP references
* Fix missing CWE prefixes
2024-01-15 17:15:56 +01:00
Antonio Aversa
a02bf814d4
Clean Code Taxonomy: add "code" to all non-obsolete metadata.json ( #2793 )
2023-08-04 17:19:38 +02:00
hendrik-buchwald-sonarsource
0a3a3b7f2a
Modify rule S6303: Fix invalid code samples ( #2585 )
2023-07-20 16:36:25 +02:00
Loris S
2305a03968
Modify S6303: Add more risks ( #2556 )
...
## Review
A dedicated reviewer checked the rule description successfully for:
- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule )
2023-07-20 16:09:28 +02:00
Fred Tingaud
16f6c0aecf
Inline adoc when include has no additional value ( #1940 )
...
Inline adoc files when they are included exactly once.
Also fix language tags because this inlining gives us better information
on what language the code is written in.
2023-05-25 14:18:12 +02:00
Rudy Regazzoni
d6a6439e46
Add bicep and json for language support in code example ( #1830 )
2023-05-05 11:12:16 +02:00
Loris S
48e622bb03
Modify rule S6303: Text improvement suggestion (APPSEC-178) ( #1374 )
2022-11-14 10:51:48 +01:00
github-actions[bot]
d01914f4a7
Create rule S6303[JS/TS]: Using unencrypted RDS databases is security-sensitive (APPSEC-161) ( #1294 )
2022-10-17 10:28:06 +02:00
github-actions[bot]
f960b37f9d
Create rule S6303: Using unencrypted RDS databases is security-sensitive ( #1255 )
2022-09-19 12:00:00 +02:00
Loris S
9d8b209353
Modify Multiple Rules(IAC): Remove Non-IAC-Based Standards in Metadata (APPSEC-5) ( #1238 )
2022-09-14 10:29:18 +02:00
Alexandre Gigleux
01bad1b800
Map rules to OWASP ASVS 4 ( #1110 )
...
https://sonarsource.atlassian.net/browse/MMF-2794
2022-07-29 13:35:38 +02:00
pedro-oliveira-sonarsource
b04b29019c
[APPSEC-3] Security rules are mapped to PCI DSS 4.0 ( #1007 )
2022-05-24 16:19:27 +02:00
pedro-oliveira-sonarsource
4cd575af12
[APPSEC-2] New security standard - PCI DSS 3.2 ( #1005 )
2022-05-23 09:00:28 +02:00
jtingsanchali
96d9ddb930
RULEAPI-755 Update CWE URLs by removing .html suffix and update with https protocol ( #926 )
...
* Change affects only see.adoc and rule.adoc files, not comments-and-links.adoc files
2022-04-07 08:53:59 -05:00
Pierre-Loup
2d910e276c
Modify rule S6303: Update issue message ( #886 )
...
Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
2022-03-16 12:32:37 +00:00
Pierre-Loup
1b061d5ff5
Fix typo in OWASP links from the See section ( #807 )
...
* Fix typos in OWASP Top 10 2017 links
* Fixing wrong URI in OWASP Top 10 2021 A4 links
2022-02-10 09:11:45 +01:00
Fred Tingaud
b4161466e6
RULEAPI-661: Add syntax coloring
2022-02-04 16:28:24 +00:00
Pierre-Loup
c6f14b6a20
Add AWS tag to IaC rules ( #662 )
2021-12-16 15:02:01 +01:00
Pierre-Loup
e7ad1012e3
RULEAPI-709: Security rules are mapped to the OWASP Top 10 2021 security-standard ( #545 )
2021-11-01 15:00:32 +01:00
Arseniy Zaostrovnykh
2301f5808e
RULEAPI-695: remove extra/coveredLanguages field
2021-09-28 13:36:45 +02:00
Arseniy Zaostrovnykh
ec55b6ead1
RULEAPI-687: Migrate legacy keys from Jira RSPEC ( #392 )
2021-09-24 09:08:46 +02:00
github-actions[bot]
7d377d77ea
Create rule S6303: Using unencrypted RDS databases is security-sensitive ( #163 )
2021-09-06 15:34:51 +02:00
