Skip to content

Commit c6d8242

Browse files
committed
fix: de-duplicate API design validation
1 parent e8c57ff commit c6d8242

File tree

2 files changed

+2
-29
lines changed

2 files changed

+2
-29
lines changed

src/assets/YAML/default/Implementation/DevelopmentAndSourceControl.yaml

-26
Original file line numberDiff line numberDiff line change
@@ -27,32 +27,6 @@ Implementation:
2727
isImplemented: false
2828
evidence: ""
2929
comments: ""
30-
API design validation:
31-
uuid: 948a4d51-ceb5-4ebd-bdc7-d74ea25e171c
32-
risk: Creation of insecure or non-compliant API.
33-
measure: |
34-
Design contract-first APIs using an interface description language such as OpenAPI, AsyncAPI or SOAP
35-
and validate the specification using specific tools.
36-
Checks should be integrated in IDEs and CI/CD pipelines.
37-
difficultyOfImplementation:
38-
knowledge: 2
39-
time: 2
40-
resources: 2
41-
usefulness: 4
42-
level: 3
43-
implementation:
44-
- $ref: src/assets/YAML/default/implementations.yaml#/implementations/stoplight-spectral
45-
- $ref: src/assets/YAML/default/implementations.yaml#/implementations/api-oas-checker
46-
references:
47-
samm2:
48-
- V-ST-1-A
49-
iso27001-2017:
50-
- 14.2.1
51-
- 14.2.5
52-
iso27001-2022:
53-
- 8.25 # Secure development lifecycle
54-
- 8.27 # Secure system architecture and engineering principles
55-
- 8.28 # Secure coding
5630
Require a PR before merging:
5731
uuid: e7598ac4-b082-4e56-b7df-e2c6b426a5e2
5832
risk: Intentional or accidental alterations in critical branches like main (or master).

src/assets/YAML/default/TestAndVerification/StaticDepthForApplications.yaml

+2-3
Original file line numberDiff line numberDiff line change
@@ -140,8 +140,8 @@ Test and Verification:
140140
knowledge: 2
141141
time: 2
142142
resources: 2
143-
usefulness: 4
144-
level: 2
143+
usefulness: 3
144+
level: 3
145145
implementation:
146146
- $ref: src/assets/YAML/default/implementations.yaml#/implementations/stoplight-spectral
147147
- $ref: src/assets/YAML/default/implementations.yaml#/implementations/api-oas-checker
@@ -158,7 +158,6 @@ Test and Verification:
158158
isImplemented: false
159159
dependsOn:
160160
- uuid:2a44b708-734f-4463-b0cb-86dc46344b2f # Inventory of production components
161-
comments: ""
162161
Static analysis for all components/libraries:
163162
uuid: f4ff841d-3b2a-45d9-853e-5ec7ecbcb054
164163
risk: Used components like libraries and legacy applications might have vulnerabilities

0 commit comments

Comments
 (0)