Skip to content

Fix OWASP importer hyperlinks #1105

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
Bornunique911 wants to merge 4 commits into
base: main
Choose a base branch
from
Open

Fix OWASP importer hyperlinks #1105

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
d2079a6
fix: update hyperlinks in OWASP mappings to point to the correct URLs
Bornunique911 Sep 13, 2026
4dca25b
fix: update hyperlink in OWASP test to point to the correct URL
Bornunique911 Sep 13, 2026
dc2bc61
fix: update hyperlink in AISVS12 section to point to the correct URL
Bornunique911 Oct 15, 2026
704d206
fix: update hyperlink for AISVS12 section to point to the correct URL
Bornunique911 Oct 15, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion application/tests/fixtures/owasp_mappings/owasp_aisvs_1_0.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -68,7 +68,7 @@
{
"section_id": "AISVS12",
"section": "Monitoring, Logging & Anomaly Detection",
"hyperlink": "https://github.com/OWASP/AISVS/tree/main/1.0/en/0x10-C12-Monitoring-and-Logging.md",
"hyperlink": "https://github.com/OWASP/AISVS/blob/main/1.0/en/0x10-C12-Monitoring-and-Logging.md",
"cre_ids": ["058-083", "148-420", "402-706", "843-841"]
}
]
20 changes: 10 additions & 10 deletions application/tests/fixtures/owasp_mappings/owasp_api_top10_2023.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,61 +2,61 @@
{
"section_id": "API1",
"section": "Broken Object Level Authorization",
"hyperlink": "https://owasp.org/API-Security/editions/2023/en/0xa1-broken-object-level-authorization/",
"hyperlink": "https://api-security.owasp.org/editions/2023/en/0xa1-broken-object-level-authorization/",
"cre_ids": ["304-667", "724-770"]
},
{
"section_id": "API2",
"section": "Broken Authentication",
"hyperlink": "https://owasp.org/API-Security/editions/2023/en/0xa2-broken-authentication/",
"hyperlink": "https://api-security.owasp.org/editions/2023/en/0xa2-broken-authentication/",
"cre_ids": ["177-260", "586-842", "633-428"]
},
{
"section_id": "API3",
"section": "Broken Object Property Level Authorization",
"hyperlink": "https://owasp.org/API-Security/editions/2023/en/0xa3-broken-object-property-level-authorization/",
"hyperlink": "https://api-security.owasp.org/editions/2023/en/0xa3-broken-object-property-level-authorization/",
"cre_ids": ["538-770", "724-770", "128-128"]
},
{
"section_id": "API4",
"section": "Unrestricted Resource Consumption",
"hyperlink": "https://owasp.org/API-Security/editions/2023/en/0xa4-unrestricted-resource-consumption/",
"hyperlink": "https://api-security.owasp.org/editions/2023/en/0xa4-unrestricted-resource-consumption/",
"cre_ids": ["623-550"]
},
{
"section_id": "API5",
"section": "Broken Function Level Authorization",
"hyperlink": "https://owasp.org/API-Security/editions/2023/en/0xa5-broken-function-level-authorization/",
"hyperlink": "https://api-security.owasp.org/editions/2023/en/0xa5-broken-function-level-authorization/",
"cre_ids": ["650-560", "724-770"]
},
{
"section_id": "API6",
"section": "Unrestricted Access to Sensitive Business Flows",
"hyperlink": "https://owasp.org/API-Security/editions/2023/en/0xa6-unrestricted-access-to-sensitive-business-flows/",
"hyperlink": "https://api-security.owasp.org/editions/2023/en/0xa6-unrestricted-access-to-sensitive-business-flows/",
"cre_ids": ["534-605", "630-573"]
},
{
"section_id": "API7",
"section": "Server Side Request Forgery",
"hyperlink": "https://owasp.org/API-Security/editions/2023/en/0xa7-server-side-request-forgery/",
"hyperlink": "https://api-security.owasp.org/editions/2023/en/0xa7-server-side-request-forgery/",
"cre_ids": ["028-728", "657-084"]
},
{
"section_id": "API8",
"section": "Security Misconfiguration",
"hyperlink": "https://owasp.org/API-Security/editions/2023/en/0xa8-security-misconfiguration/",
"hyperlink": "https://api-security.owasp.org/editions/2023/en/0xa8-security-misconfiguration/",
"cre_ids": ["486-813"]
},
{
"section_id": "API9",
"section": "Improper Inventory Management",
"hyperlink": "https://owasp.org/API-Security/editions/2023/en/0xa9-improper-inventory-management/",
"hyperlink": "https://api-security.owasp.org/editions/2023/en/0xa9-improper-inventory-management/",
"cre_ids": ["162-655", "863-521"]
},
{
"section_id": "API10",
"section": "Unsafe Consumption of APIs",
"hyperlink": "https://owasp.org/API-Security/editions/2023/en/0xaa-unsafe-consumption-of-apis/",
"hyperlink": "https://api-security.owasp.org/editions/2023/en/0xaa-unsafe-consumption-of-apis/",
"cre_ids": ["715-223"]
}
]
20 changes: 10 additions & 10 deletions application/tests/fixtures/owasp_mappings/owasp_kubernetes_top10_2022.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,61 +2,61 @@
{
"section_id": "K01",
"section": "Insecure Workload Configurations",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K01-insecure-workload-configurations",
"hyperlink": "https://kubernetes-top10.owasp.org/2022/en/src/K01-insecure-workload-configurations",
"cre_ids": ["233-748", "486-813"]
},
{
"section_id": "K02",
"section": "Supply Chain Vulnerabilities",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K02-supply-chain-vulnerabilities",
"hyperlink": "https://kubernetes-top10.owasp.org/2022/en/src/K02-supply-chain-vulnerabilities",
"cre_ids": ["613-285", "613-287"]
},
{
"section_id": "K03",
"section": "Overly Permissive RBAC Configurations",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K03-overly-permissive-rbac-configurations",
"hyperlink": "https://kubernetes-top10.owasp.org/2022/en/src/K03-overly-permissive-rbac-configurations",
"cre_ids": ["128-128", "724-770"]
},
{
"section_id": "K04",
"section": "Lack of Centralized Policy Enforcement",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K04-lack-of-centralized-policy-enforcement",
"hyperlink": "https://kubernetes-top10.owasp.org/2022/en/src/K04-lack-of-centralized-policy-enforcement",
"cre_ids": ["117-371"]
},
{
"section_id": "K05",
"section": "Inadequate Logging and Monitoring",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K05-inadequate-logging-and-monitoring",
"hyperlink": "https://kubernetes-top10.owasp.org/2022/en/src/K05-inadequate-logging-and-monitoring",
"cre_ids": ["058-083", "148-420", "402-706", "843-841"]
},
{
"section_id": "K06",
"section": "Broken Authentication Mechanisms",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K06-broken-authentication-mechanisms",
"hyperlink": "https://kubernetes-top10.owasp.org/2022/en/src/K06-broken-authentication-mechanisms",
"cre_ids": ["177-260", "586-842", "633-428"]
},
{
"section_id": "K07",
"section": "Missing Network Segmentation Controls",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K07-missing-network-segmentation-controls",
"hyperlink": "https://kubernetes-top10.owasp.org/2022/en/src/K07-missing-network-segmentation-controls",
"cre_ids": ["132-146", "467-784", "515-021"]
},
{
"section_id": "K08",
"section": "Secrets Management Failures",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K08-secrets-management-failures",
"hyperlink": "https://kubernetes-top10.owasp.org/2022/en/src/K08-secrets-management-failures",
"cre_ids": ["340-375", "774-888", "813-610"]
},
{
"section_id": "K09",
"section": "Misconfigured Cluster Components",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K09-misconfigured-cluster-components",
"hyperlink": "https://kubernetes-top10.owasp.org/2022/en/src/K09-misconfigured-cluster-components",
"cre_ids": ["233-748", "486-813"]
},
{
"section_id": "K10",
"section": "Outdated and Vulnerable Kubernetes Components",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K10-outdated-and-vulnerable-kubernetes-components",
"hyperlink": "https://kubernetes-top10.owasp.org/2022/en/src/K10-outdated-and-vulnerable-kubernetes-components",
"cre_ids": ["053-751", "715-334", "863-521"]
}
]
20 changes: 10 additions & 10 deletions application/tests/fixtures/owasp_mappings/owasp_kubernetes_top10_2025.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,68 +2,68 @@
{
"section_id": "K01",
"section": "Insecure Workload Configurations",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2025/en/src/K01-Insecure-Workload-Configurations.html",
"hyperlink": "https://kubernetes-top10.owasp.org/2025/en/src/K01-Insecure-Workload-Configurations.html",
"cre_ids": ["233-748", "486-813"]
},
{
"section_id": "K02",
"section": "Overly Permissive Authorization Configurations",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2025/en/src/K02-Overly-Permissive-Authorization-Configurations.html",
"hyperlink": "https://kubernetes-top10.owasp.org/2025/en/src/K02-Overly-Permissive-Authorization-Configurations.html",
"cre_ids": ["128-128", "724-770"],
"fallback_section_ids": ["K03"]
},
{
"section_id": "K03",
"section": "Secrets Management Failures",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2025/en/src/K03-Secrets-Management-Failures.html",
"hyperlink": "https://kubernetes-top10.owasp.org/2025/en/src/K03-Secrets-Management-Failures.html",
"cre_ids": ["340-375", "774-888", "813-610"],
"fallback_section_ids": ["K08"]
},
{
"section_id": "K04",
"section": "Lack Of Cluster Level Policy Enforcement",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2025/en/src/K04-Lack-Of-Cluster-Level-Policy-Enforcement.html",
"hyperlink": "https://kubernetes-top10.owasp.org/2025/en/src/K04-Lack-Of-Cluster-Level-Policy-Enforcement.html",
"cre_ids": ["117-371"]
},
{
"section_id": "K05",
"section": "Missing Network Segmentation Controls",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2025/en/src/K05-Missing-Network-Segmentation-Controls.html",
"hyperlink": "https://kubernetes-top10.owasp.org/2025/en/src/K05-Missing-Network-Segmentation-Controls.html",
"cre_ids": ["132-146", "467-784", "515-021"],
"fallback_section_ids": ["K07"]
},
{
"section_id": "K06",
"section": "Overly Exposed Kubernetes Components",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2025/en/src/K06-Overly-Exposed-Kubernetes-Components.html",
"hyperlink": "https://kubernetes-top10.owasp.org/2025/en/src/K06-Overly-Exposed-Kubernetes-Components.html",
"cre_ids": ["152-725", "640-364"],
"fallback_section_ids": ["K09"]
},
{
"section_id": "K07",
"section": "Misconfigured And Vulnerable Cluster Components",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2025/en/src/K07-Misconfigured-And-Vulnerable-Cluster-Components.html",
"hyperlink": "https://kubernetes-top10.owasp.org/2025/en/src/K07-Misconfigured-And-Vulnerable-Cluster-Components.html",
"cre_ids": ["053-751", "233-748", "486-813", "715-334"],
"fallback_section_ids": ["K09", "K10"]
},
{
"section_id": "K08",
"section": "Cluster To Cloud Lateral Movement",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2025/en/src/K08-Cluster-To-Cloud-Lateral-Movement.html",
"hyperlink": "https://kubernetes-top10.owasp.org/2025/en/src/K08-Cluster-To-Cloud-Lateral-Movement.html",
"cre_ids": ["132-146", "640-364", "724-770"],
"fallback_section_ids": ["K03", "K07"]
},
{
"section_id": "K09",
"section": "Broken Authentication Mechanisms",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2025/en/src/K09-Broken-Authentication-Mechanisms.html",
"hyperlink": "https://kubernetes-top10.owasp.org/2025/en/src/K09-Broken-Authentication-Mechanisms.html",
"cre_ids": ["177-260", "586-842", "633-428"],
"fallback_section_ids": ["K06"]
},
{
"section_id": "K10",
"section": "Inadequate Logging And Monitoring",
"hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2025/en/src/K10-Inadequate-Logging-And-Monitoring.html",
"hyperlink": "https://kubernetes-top10.owasp.org/2025/en/src/K10-Inadequate-Logging-And-Monitoring.html",
"cre_ids": ["058-083", "148-420", "402-706", "843-841"],
"fallback_section_ids": ["K05"]
}
Expand Down
20 changes: 10 additions & 10 deletions application/tests/fixtures/owasp_mappings/owasp_top10_2025.json
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,61 +2,61 @@
{
"section_id": "A01",
"section": "Broken Access Control",
"hyperlink": "https://owasp.org/Top10/2025/A01_2025-Broken_Access_Control/",
"hyperlink": "https://top10.owasp.org/2025/A01_2025-Broken_Access_Control/",
"cre_ids": ["117-371", "177-260", "724-770"]
},
{
"section_id": "A02",
"section": "Security Misconfiguration",
"hyperlink": "https://owasp.org/Top10/2025/A02_2025-Security_Misconfiguration/",
"hyperlink": "https://top10.owasp.org/2025/A02_2025-Security_Misconfiguration/",
"cre_ids": ["486-813"]
},
{
"section_id": "A03",
"section": "Software Supply Chain Failures",
"hyperlink": "https://owasp.org/Top10/2025/A03_2025-Software_Supply_Chain_Failures/",
"hyperlink": "https://top10.owasp.org/2025/A03_2025-Software_Supply_Chain_Failures/",
"cre_ids": ["613-286", "613-287", "715-223", "863-521"]
},
{
"section_id": "A04",
"section": "Cryptographic Failures",
"hyperlink": "https://owasp.org/Top10/2025/A04_2025-Cryptographic_Failures/",
"hyperlink": "https://top10.owasp.org/2025/A04_2025-Cryptographic_Failures/",
"cre_ids": ["170-772", "227-045"]
},
{
"section_id": "A05",
"section": "Injection",
"hyperlink": "https://owasp.org/Top10/2025/A05_2025-Injection/",
"hyperlink": "https://top10.owasp.org/2025/A05_2025-Injection/",
"cre_ids": ["031-447", "064-808", "760-764"]
},
{
"section_id": "A06",
"section": "Insecure Design",
"hyperlink": "https://owasp.org/Top10/2025/A06_2025-Insecure_Design/",
"hyperlink": "https://top10.owasp.org/2025/A06_2025-Insecure_Design/",
"cre_ids": ["126-668", "155-155"]
},
{
"section_id": "A07",
"section": "Authentication Failures",
"hyperlink": "https://owasp.org/Top10/2025/A07_2025-Authentication_Failures/",
"hyperlink": "https://top10.owasp.org/2025/A07_2025-Authentication_Failures/",
"cre_ids": ["002-630", "177-260", "586-842", "633-428"]
},
{
"section_id": "A08",
"section": "Software or Data Integrity Failures",
"hyperlink": "https://owasp.org/Top10/2025/A08_2025-Software_or_Data_Integrity_Failures/",
"hyperlink": "https://top10.owasp.org/2025/A08_2025-Software_or_Data_Integrity_Failures/",
"cre_ids": ["613-287", "836-068"]
},
{
"section_id": "A09",
"section": "Security Logging and Alerting Failures",
"hyperlink": "https://owasp.org/Top10/2025/A09_2025-Security_Logging_and_Alerting_Failures/",
"hyperlink": "https://top10.owasp.org/2025/A09_2025-Security_Logging_and_Alerting_Failures/",
"cre_ids": ["067-050", "148-420", "402-706", "843-841"]
},
{
"section_id": "A10",
"section": "Mishandling of Exceptional Conditions",
"hyperlink": "https://owasp.org/Top10/2025/A10_2025-Mishandling_of_Exceptional_Conditions/",
"hyperlink": "https://top10.owasp.org/2025/A10_2025-Mishandling_of_Exceptional_Conditions/",
"cre_ids": ["513-183"]
}
]
2 changes: 1 addition & 1 deletion application/tests/owasp_aisvs_parser_test.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -57,7 +57,7 @@ def test_parse(self) -> None:
self.assertEqual("AISVS12", entries[-1].sectionID)
self.assertEqual("Monitoring, Logging & Anomaly Detection", entries[-1].section)
self.assertEqual(
"https://github.com/OWASP/AISVS/tree/main/1.0/en/0x10-C12-Monitoring-and-Logging.md",
"https://github.com/OWASP/AISVS/blob/main/1.0/en/0x10-C12-Monitoring-and-Logging.md",
entries[-1].hyperlink,
)
self.assertEqual(
Expand Down
2 changes: 1 addition & 1 deletion application/tests/owasp_top10_2025_parser_test.py
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -69,7 +69,7 @@ def test_parse(self) -> None:
self.assertEqual("A01", entries[0].sectionID)
self.assertEqual("Broken Access Control", entries[0].section)
self.assertEqual(
"https://owasp.org/Top10/2025/A01_2025-Broken_Access_Control/",
"https://top10.owasp.org/2025/A01_2025-Broken_Access_Control/",
entries[0].hyperlink,
)
self.assertEqual(
Expand Down
Loading