25 Commits

Author SHA1 Message Date
daniel-teuchert-sonarsource
2b6572864d
APPSEC-1077: S6329 Improve examples fso that they can be scanned with sonar-iac (#3048)
This PR fixes the code examples for ARM for rule S6329 so that they can
be scanned with Sonarqube.
The schema URL for the JSON examples has to be https and for the bicep
examples, the correct quotes need to be used.

## Review

A dedicated reviewer checked the rule description successfully for:

- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-09-13 15:48:25 +02:00
Antonio Aversa
a02bf814d4
Clean Code Taxonomy: add "code" to all non-obsolete metadata.json (#2793) 2023-08-04 17:19:38 +02:00
Jamie Anderson
69b3569c65
Modify rule S6329: Add language AzureResourceManager (Bicep) (#1889)
Research ticket: https://sonarsource.atlassian.net/browse/SONARIAC-754
Implementation ticket:
https://sonarsource.atlassian.net/browse/SONARIAC-790

PR #1872 Added support for AzureResourceManager (JSON). This PR extends
that work to add Bicep support. This PR cannot be merged until we
support the Bicep language.
2023-08-03 11:02:22 +02:00
Loris S
ab2420d47e
Modify S6329(Cfn): Improve samples (#2572)
## Review

A dedicated reviewer checked the rule description successfully for:

- [x] logical errors and incorrect information
- [x] information gaps and missing content
- [x] text style and tone
- [x] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
2023-07-21 10:05:33 +02:00
Loris S
266701ee7f
Modify S6329: Make GCP sample safer (#2529) 2023-07-19 13:26:54 +00:00
Fred Tingaud
16f6c0aecf
Inline adoc when include has no additional value (#1940)
Inline adoc files when they are included exactly once.

Also fix language tags because this inlining gives us better information
on what language the code is written in.
2023-05-25 14:18:12 +02:00
Jamie Anderson
737c7da52b
Modify rule S6329: Add language AzureResourceManager (JSON) (#1887)
Research ticket: https://sonarsource.atlassian.net/browse/SONARIAC-754
Implementation ticket:
https://sonarsource.atlassian.net/browse/SONARIAC-790
2023-05-15 16:26:02 +02:00
Victor
fe961619f9 migrate rule descriptions to new education format 2023-05-05 16:29:04 +02:00
Rudy Regazzoni
d6a6439e46
Add bicep and json for language support in code example (#1830) 2023-05-05 11:12:16 +02:00
github-actions[bot]
d11bc19b31
Create rule S6329: Allowing public network access to cloud resources is security-sensitive (APPSEC-169) (#1318) 2022-10-10 11:00:08 +02:00
github-actions[bot]
13cb1f6290
Create rule S6329: Allowing public network access to cloud resources is security-sensitive - Adding python (APPSEC-147)(#1288) 2022-09-30 16:30:17 +02:00
Loris S
9d8b209353
Modify Multiple Rules(IAC): Remove Non-IAC-Based Standards in Metadata (APPSEC-5) (#1238) 2022-09-14 10:29:18 +02:00
Alexandre Gigleux
01bad1b800
Map rules to OWASP ASVS 4 (#1110)
https://sonarsource.atlassian.net/browse/MMF-2794
2022-07-29 13:35:38 +02:00
pedro-oliveira-sonarsource
b04b29019c
[APPSEC-3] Security rules are mapped to PCI DSS 4.0 (#1007) 2022-05-24 16:19:27 +02:00
pedro-oliveira-sonarsource
4cd575af12
[APPSEC-2] New security standard - PCI DSS 3.2 (#1005) 2022-05-23 09:00:28 +02:00
jtingsanchali
96d9ddb930
RULEAPI-755 Update CWE URLs by removing .html suffix and update with https protocol (#926)
* Change affects only see.adoc and rule.adoc files, not comments-and-links.adoc files
2022-04-07 08:53:59 -05:00
Pierre-Loup
c54b8f8b6c
Modify rule S6329: Update issue message (#891) 2022-03-15 10:55:32 +00:00
hendrik-buchwald-sonarsource
4e659743db
Modify Rule S6329: Make generic and add GCP (#733)
* Create rule S6392

* Add first draft

* improve title

* add last commit to this PR regarding public network access

* add metadata tags

* changed title

* converted ask yourself into generic cloud

* converted description into generic cloud

* moved aws links to see

* converted recommended to generic cloud

* convertion of recommended -- added a special case

* add cwe

* add note in recommended section, not sure about this one

* add another cwe

* add first version of rule conversion

* final rule version

* removed leftover code

* Update rules/S6329/description.adoc

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

* Update rules/S6329/terraform/rule.adoc

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

* changed case for bulleted list

* improved specs after review

* removed potential confusion

* changed company<->organization

* Update rules/S6329/ask-yourself.adoc

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

* Update rules/S6329/description.adoc

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

* Make generic

* Add GCP code sample

* Update rules/S6329/terraform/rule.adoc

Co-authored-by: Loris S. <91723853+loris-s-sonarsource@users.noreply.github.com>

* Fix syntax

Co-authored-by: loris-s-sonarsource <loris-s-sonarsource@users.noreply.github.com>
Co-authored-by: Loris Sierra <loris.sierra@sonarsource.com>
Co-authored-by: Loris S <91723853+loris-s-sonarsource@users.noreply.github.com>
2022-03-03 09:41:02 +01:00
Loris S
c02499a371
Modify rule S6329: Turn into generic rule (#655)
* Create rule S6392

* Add first draft

* improve title

* add last commit to this PR regarding public network access

* add metadata tags

* changed title

* converted ask yourself into generic cloud

* converted description into generic cloud

* moved aws links to see

* converted recommended to generic cloud

* convertion of recommended -- added a special case

* add cwe

* add note in recommended section, not sure about this one

* add another cwe

* add first version of rule conversion

* final rule version

* removed leftover code

* Update rules/S6329/description.adoc

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

* Update rules/S6329/terraform/rule.adoc

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

* changed case for bulleted list

* improved specs after review

* removed potential confusion

* changed company<->organization

* Update rules/S6329/ask-yourself.adoc

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

* Update rules/S6329/description.adoc

Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>

Co-authored-by: loris-s-sonarsource <loris-s-sonarsource@users.noreply.github.com>
Co-authored-by: hendrik-buchwald-sonarsource <64110887+hendrik-buchwald-sonarsource@users.noreply.github.com>
Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
2022-02-07 10:00:36 +00:00
Fred Tingaud
b4161466e6
RULEAPI-661: Add syntax coloring 2022-02-04 16:28:24 +00:00
Pierre-Loup
c6f14b6a20
Add AWS tag to IaC rules (#662) 2021-12-16 15:02:01 +01:00
Pierre-Loup
e7ad1012e3
RULEAPI-709: Security rules are mapped to the OWASP Top 10 2021 security-standard (#545) 2021-11-01 15:00:32 +01:00
Arseniy Zaostrovnykh
2301f5808e
RULEAPI-695: remove extra/coveredLanguages field 2021-09-28 13:36:45 +02:00
Arseniy Zaostrovnykh
ec55b6ead1
RULEAPI-687: Migrate legacy keys from Jira RSPEC (#392) 2021-09-24 09:08:46 +02:00
github-actions[bot]
ab591b6b58
Create rule S6329: Assigning public IP address to an AWS resource is security-sensitive (#202) 2021-09-13 14:01:24 +02:00