https://github.com/gregoryv/owasp
OWASP checklist editor
https://github.com/gregoryv/owasp
Last synced: about 1 year ago
JSON representation
OWASP checklist editor
- Host: GitHub
- URL: https://github.com/gregoryv/owasp
- Owner: gregoryv
- License: mit
- Created: 2021-02-10T08:48:57.000Z (over 5 years ago)
- Default Branch: main
- Last Pushed: 2024-02-06T07:39:49.000Z (over 2 years ago)
- Last Synced: 2025-02-05T07:19:23.862Z (over 1 year ago)
- Language: Go
- Size: 205 KB
- Stars: 0
- Watchers: 5
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Changelog: changelog.md
- License: LICENSE
Awesome Lists containing this project
README
[](https://pkg.go.dev/github.com/gregoryv/owasp)
[](https://travis-ci.com/gregoryv/owasp)
[](https://codecov.io/gh/gregoryv/owasp)
Package [owasp](https://pkg.go.dev/github.com/gregoryv/owasp) provides
an [OWASP](https://github.com/OWASP) checklist editor.
It was written to integrate ISVS and ASVS checklists with tests that
verify the requirements.
## Quick start
Install the editor
go get -u github.com/gregoryv/cmd/wasped
Prepare a checklist, start of with [asvs.json](checklist/asvs.json)
or [isvs.json](checklist/isvs.json) found in this repository. Set the
Applicable field to true on each entry that is applicable to your
project.
When you have verified a requirement check it off with
$ wasped --verify "1.3.2" asvs.json
finally you can render a markdown report summarizing your progress
$ wasped --report asvs_report.md --title "My ASVS report" asvs.json
## Automate verification in tests
The package is designed to simplify verification of requirements using
tests and producing a readable report. See [package](https://pkg.go.dev/github.com/gregoryv/owasp) examples.