Proposed changes to the definition format

Problem

API Security is adopting the YAML vulnerability definition format and related checks. As part of this some changes to the definition format are needed.

  1. Field to indicate which analyzers a definition supports. A definition can support multiple testing targets of app and api.
  2. Provide OWASP TOP 10 mappings for both the main version and also API version.
  3. Provide a field indicating state of definition: stable, experimental, unreleased

In the future we will also want to integrate testing into the definitions as well.

Edited by Michael Eddington