File tree Expand file tree Collapse file tree
Expand file tree Collapse file tree Original file line number Diff line number Diff line change @@ -27,32 +27,6 @@ Implementation:
2727 isImplemented : false
2828 evidence : " "
2929 comments : " "
30- API design validation :
31- uuid : 948a4d51-ceb5-4ebd-bdc7-d74ea25e171c
32- risk : Creation of insecure or non-compliant API.
33- measure : |
34- Design contract-first APIs using an interface description language such as OpenAPI, AsyncAPI or SOAP
35- and validate the specification using specific tools.
36- Checks should be integrated in IDEs and CI/CD pipelines.
37- difficultyOfImplementation :
38- knowledge : 2
39- time : 2
40- resources : 2
41- usefulness : 4
42- level : 3
43- implementation :
44- - $ref : src/assets/YAML/default/implementations.yaml#/implementations/stoplight-spectral
45- - $ref : src/assets/YAML/default/implementations.yaml#/implementations/api-oas-checker
46- references :
47- samm2 :
48- - V-ST-1-A
49- iso27001-2017 :
50- - 14.2.1
51- - 14.2.5
52- iso27001-2022 :
53- - 8.25 # Secure development lifecycle
54- - 8.27 # Secure system architecture and engineering principles
55- - 8.28 # Secure coding
5630 Require a PR before merging :
5731 uuid : e7598ac4-b082-4e56-b7df-e2c6b426a5e2
5832 risk : Intentional or accidental alterations in critical branches like main (or master).
Original file line number Diff line number Diff line change @@ -140,8 +140,8 @@ Test and Verification:
140140 knowledge : 2
141141 time : 2
142142 resources : 2
143- usefulness : 4
144- level : 2
143+ usefulness : 3
144+ level : 3
145145 implementation :
146146 - $ref : src/assets/YAML/default/implementations.yaml#/implementations/stoplight-spectral
147147 - $ref : src/assets/YAML/default/implementations.yaml#/implementations/api-oas-checker
@@ -158,7 +158,6 @@ Test and Verification:
158158 isImplemented : false
159159 dependsOn :
160160 - uuid:2a44b708-734f-4463-b0cb-86dc46344b2f # Inventory of production components
161- comments : " "
162161 Static analysis for all components/libraries :
163162 uuid : f4ff841d-3b2a-45d9-853e-5ec7ecbcb054
164163 risk : Used components like libraries and legacy applications might have vulnerabilities
You can’t perform that action at this time.
0 commit comments