github-actions[bot]
|
4ec7f8ed07
|
Create rule S6380: add language AzureResourceManager (JSON) (#2274)
Specification ticket:
[APPSEC-775](https://sonarsource.atlassian.net/browse/APPSEC-775)
Implementation ticket:
[SONARIAC-899](https://sonarsource.atlassian.net/browse/SONARIAC-899)
[RSPEC
Preview](https://sonarsource.github.io/rspec/#/rspec/S6378/azureresourcemanager)
Bicep PR for S6380: #2298
## Review
A dedicated reviewer checked the rule description successfully for:
- [ ] logical errors and incorrect information
- [ ] information gaps and missing content
- [ ] text style and tone
- [ ] PR summary and labels follow [the
guidelines](https://github.com/SonarSource/rspec/#to-modify-an-existing-rule)
[APPSEC-775]:
https://sonarsource.atlassian.net/browse/APPSEC-775?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ
[SONARIAC-899]:
https://sonarsource.atlassian.net/browse/SONARIAC-899?atlOrigin=eyJpIjoiNWRkNTljNzYxNjVmNDY3MDlhMDU5Y2ZhYzA5YTRkZjUiLCJwIjoiZ2l0aHViLWNvbS1KU1cifQ
---------
Co-authored-by: egon-okerman-sonarsource <egon-okerman-sonarsource@users.noreply.github.com>
Co-authored-by: Egon Okerman <egon.okerman@sonarsource.com>
Co-authored-by: Jamie Anderson <127742609+jamie-anderson-sonarsource@users.noreply.github.com>
|
2023-07-03 18:04:53 +02:00 |
|
Loris S
|
9d8b209353
|
Modify Multiple Rules(IAC): Remove Non-IAC-Based Standards in Metadata (APPSEC-5) (#1238)
|
2022-09-14 10:29:18 +02:00 |
|
pedro-oliveira-sonarsource
|
b04b29019c
|
[APPSEC-3] Security rules are mapped to PCI DSS 4.0 (#1007)
|
2022-05-24 16:19:27 +02:00 |
|
pedro-oliveira-sonarsource
|
4cd575af12
|
[APPSEC-2] New security standard - PCI DSS 3.2 (#1005)
|
2022-05-23 09:00:28 +02:00 |
|
jtingsanchali
|
96d9ddb930
|
RULEAPI-755 Update CWE URLs by removing .html suffix and update with https protocol (#926)
* Change affects only see.adoc and rule.adoc files, not comments-and-links.adoc files
|
2022-04-07 08:53:59 -05:00 |
|
Fred Tingaud
|
b4161466e6
|
RULEAPI-661: Add syntax coloring
|
2022-02-04 16:28:24 +00:00 |
|
github-actions[bot]
|
b52e66370a
|
Create rule S6380[terraform]: Authorizing anonymous access to Azure resources is security-sensitive (#574)
* Create rule S6380
* Disabling authentication is security-sensitive
* Add Sensitive Keyword
* Add Security Standards References
* Add Message.adoc
* Clarified everything
* refreshed metadata
* Update rules/S6380/terraform/rule.adoc
* Update rules/S6380/terraform/rule.adoc
* Update rules/S6380/terraform/rule.adoc
* last update : removed cert auth, add redis infos and highlights
* replaced ad auth with app service auth
* Update rules/S6380/terraform/rule.adoc
* Update rules/S6380/terraform/rule.adoc
* added owasp 2017
* improved title
* Update rules/S6380/terraform/rule.adoc
Co-authored-by: Pierre-Loup <49131563+pierre-loup-tristant-sonarsource@users.noreply.github.com>
* added secdev reco about anonymous access
* Completed rule description
* add last tweaks
* Update rules/S6380/terraform/metadata.json
* Update rules/S6380/terraform/rule.adoc
Co-authored-by: Pierre-Loup <49131563+pierre-loup-tristant-sonarsource@users.noreply.github.com>
* applied recommendations
* Update rules/S6380/terraform/rule.adoc
* Update rules/S6380/terraform/rule.adoc
* Update rules/S6380/terraform/rule.adoc
* Update rules/S6380/terraform/rule.adoc
* Update rules/S6380/terraform/rule.adoc
* Update rules/S6380/terraform/metadata.json
* Add missing prefix to azurerm_data_factory_linked_service_odata
* Fix typo in basic_authentication
Co-authored-by: loris-s-sonarsource <loris-s-sonarsource@users.noreply.github.com>
Co-authored-by: Loris Sierra <loris.sierra@sonarsource.com>
Co-authored-by: Loris S <91723853+loris-s-sonarsource@users.noreply.github.com>
Co-authored-by: Pierre-Loup <49131563+pierre-loup-tristant-sonarsource@users.noreply.github.com>
Co-authored-by: Nils Werner <64034005+nils-werner-sonarsource@users.noreply.github.com>
|
2022-01-10 14:46:04 +00:00 |
|