Pavel Mikula
bacaac778a
Replace remediation cost time unit 'mn' with 'min' ( #1104 )
2022-07-13 15:02:38 +02:00
Pierre-Loup
83209561fe
[RULEAPI-761] JSON schema fails to restrict the format of security-standard items ( #1013 )
2022-05-25 16:36:49 +02:00
pedro-oliveira-sonarsource
b04b29019c
[APPSEC-3] Security rules are mapped to PCI DSS 4.0 ( #1007 )
2022-05-24 16:19:27 +02:00
Alexandre Gigleux
9cb2845112
Support of PCI DSS v3.2 ( #925 )
...
* Rename "PCI DSS" to "PCI DSS 3.2" because the security standard is versioned
* Update metadata.json of one rule using the wrong "PCI DSS"
2022-04-12 21:58:21 +02:00
Fred Tingaud
9ca204f1c9
RULEAPI-744 automatically fill the template source tags with the current language
2022-02-08 17:34:53 +01:00
Fred Tingaud
b4161466e6
RULEAPI-661: Add syntax coloring
2022-02-04 16:28:24 +00:00
Fred Tingaud
7d868d3f35
Use a more readable form to display parameters
2022-02-01 12:25:23 +00:00
Marco Antognini
b2b116a8e2
RULEAPI-682: Index multiple types and rules with no languages
...
* Generate description and metadata for rules with no language, so that they get indexed.
* Index rules with different types in language specializations.
* Improve validation to reject new rules with no language specialization (i.e. only a predefined set of such rules is allowed because they were imported from Jira and kept for historical purposes).
* Write smaller JSON files, reduce their size by 30%.
* Improve test coverage of CLI application.
2022-01-28 09:51:13 +01:00
Fred Tingaud
171580f86a
Revert "RULEAPI-614: mark unpredictable remediation cost"
...
We should validate functionally this change with PMs before putting it in production.
Reverting for now.
2022-01-19 19:07:03 +00:00
Fred Tingaud
ebfa8932d1
RULEAPI-614: mark unpredictable remediation cost
2022-01-19 16:39:02 +01:00
Arseniy Zaostrovnykh
d444d13593
Fix python issues raised by SQ for the old code
2022-01-13 09:25:17 +01:00
Pierre-Loup
2eb4c50a9b
RULEAPI-710: Validate that security-standards are not shadowed
2021-10-29 16:55:50 +00:00
Pierre-Loup
2026ac6b8c
RULEAPI-698: Support OWASP Top 10 2021 security standard ( #466 )
2021-10-15 09:37:46 +02:00
Pierre-Loup
72a1ac7423
RULEAPI-699: Support OWASP ASVS 4 security standard
2021-10-08 10:23:39 +02:00
Arseniy Zaostrovnykh
6a0ec99e78
RULEAPI-706: Add quick fixes metadata
2021-10-07 09:23:15 +00:00
Čaba Šagi
6d8404981c
RULEAPI-642: Validate the level of section headers in asciidoc: make sure there are no level-0
2021-09-30 11:52:56 +02:00
Elena Vilchik
c357e2e7f7
RULEAPI-603 Fail ci metadata check if rule with replacement has 'ready' status ( #398 )
2021-09-30 11:45:09 +02:00
Arseniy Zaostrovnykh
090a5c725d
RULEAPI-696: adapt the rspec/readme.adoc narrative to not mention "coveredLanguages" and to menation -branch in rule-api ( #408 )
2021-09-29 16:04:43 +02:00
Arseniy Zaostrovnykh
ec55b6ead1
RULEAPI-687: Migrate legacy keys from Jira RSPEC ( #392 )
2021-09-24 09:08:46 +02:00
eric-therond-sonarsource
520573b838
RULEAPI-654: Clarify the rule creation process ( #115 )
2021-06-11 05:58:58 +00:00
eric-therond-sonarsource
cf26c8d270
add missing and future security standards ( #103 )
2021-06-07 19:13:19 +02:00
eric-therond-sonarsource
8421f9fb41
add owasp mobile security standard to schema validation ( #94 )
2021-06-07 11:20:46 +02:00
Amélie Renard
7b177ec126
RULEAPI-608 Rename unconventional headers in RSPECs and update the validation script in GitHub rspec repository
2021-06-04 14:23:34 +02:00
Amélie Renard
4dbfe9d0ef
RUELAPI-615 Ignore closed RSPEC in "validate_asciidoc" check
2021-05-25 11:00:40 +02:00
Arseniy Zaostrovnykh
9fe4334933
RULEAPI-574 Validate RSPEC description structure
2021-05-04 09:58:49 +02:00
Arseniy Zaostrovnykh
0b1ee21341
RULEAPI-604 Make an exception for Security Hotspots in the validation schema for "remediation cost" field
2021-04-30 14:11:09 +02:00
nicolas-harraudeau-sonarsource
763c935b63
Improve rules' metadata.json validation
2021-02-23 20:41:11 +01:00
