An open API service indexing awesome lists of open source software.

https://github.com/gregoryv/owasp

OWASP checklist editor
https://github.com/gregoryv/owasp

Last synced: about 1 year ago
JSON representation

OWASP checklist editor

Awesome Lists containing this project

README

          

[![Go Reference](https://pkg.go.dev/badge/github.com/gregoryv/owasp.svg)](https://pkg.go.dev/github.com/gregoryv/owasp)
[![Build Status](https://travis-ci.com/gregoryv/owasp.svg?branch=main)](https://travis-ci.com/gregoryv/owasp)
[![codecov](https://codecov.io/gh/gregoryv/owasp/branch/main/graph/badge.svg)](https://codecov.io/gh/gregoryv/owasp)

Package [owasp](https://pkg.go.dev/github.com/gregoryv/owasp) provides
an [OWASP](https://github.com/OWASP) checklist editor.

It was written to integrate ISVS and ASVS checklists with tests that
verify the requirements.

## Quick start

Install the editor

go get -u github.com/gregoryv/cmd/wasped

Prepare a checklist, start of with [asvs.json](checklist/asvs.json)
or [isvs.json](checklist/isvs.json) found in this repository. Set the
Applicable field to true on each entry that is applicable to your
project.

When you have verified a requirement check it off with

$ wasped --verify "1.3.2" asvs.json

finally you can render a markdown report summarizing your progress

$ wasped --report asvs_report.md --title "My ASVS report" asvs.json

## Automate verification in tests

The package is designed to simplify verification of requirements using
tests and producing a readable report. See [package](https://pkg.go.dev/github.com/gregoryv/owasp) examples.