Commit c6d8242 1 parent e8c57ff commit c6d8242 Copy full SHA for c6d8242
File tree 2 files changed +2
-29
lines changed
2 files changed +2
-29
lines changed Original file line number Diff line number Diff line change @@ -27,32 +27,6 @@ Implementation:
27
27
isImplemented : false
28
28
evidence : " "
29
29
comments : " "
30
- API design validation :
31
- uuid : 948a4d51-ceb5-4ebd-bdc7-d74ea25e171c
32
- risk : Creation of insecure or non-compliant API.
33
- measure : |
34
- Design contract-first APIs using an interface description language such as OpenAPI, AsyncAPI or SOAP
35
- and validate the specification using specific tools.
36
- Checks should be integrated in IDEs and CI/CD pipelines.
37
- difficultyOfImplementation :
38
- knowledge : 2
39
- time : 2
40
- resources : 2
41
- usefulness : 4
42
- level : 3
43
- implementation :
44
- - $ref : src/assets/YAML/default/implementations.yaml#/implementations/stoplight-spectral
45
- - $ref : src/assets/YAML/default/implementations.yaml#/implementations/api-oas-checker
46
- references :
47
- samm2 :
48
- - V-ST-1-A
49
- iso27001-2017 :
50
- - 14.2.1
51
- - 14.2.5
52
- iso27001-2022 :
53
- - 8.25 # Secure development lifecycle
54
- - 8.27 # Secure system architecture and engineering principles
55
- - 8.28 # Secure coding
56
30
Require a PR before merging :
57
31
uuid : e7598ac4-b082-4e56-b7df-e2c6b426a5e2
58
32
risk : Intentional or accidental alterations in critical branches like main (or master).
Original file line number Diff line number Diff line change @@ -140,8 +140,8 @@ Test and Verification:
140
140
knowledge : 2
141
141
time : 2
142
142
resources : 2
143
- usefulness : 4
144
- level : 2
143
+ usefulness : 3
144
+ level : 3
145
145
implementation :
146
146
- $ref : src/assets/YAML/default/implementations.yaml#/implementations/stoplight-spectral
147
147
- $ref : src/assets/YAML/default/implementations.yaml#/implementations/api-oas-checker
@@ -158,7 +158,6 @@ Test and Verification:
158
158
isImplemented : false
159
159
dependsOn :
160
160
- uuid:2a44b708-734f-4463-b0cb-86dc46344b2f # Inventory of production components
161
- comments : " "
162
161
Static analysis for all components/libraries :
163
162
uuid : f4ff841d-3b2a-45d9-853e-5ec7ecbcb054
164
163
risk : Used components like libraries and legacy applications might have vulnerabilities
You can’t perform that action at this time.
0 commit comments