Skip to content

fix: Add zero-padded mapping for OWASP 2021 vuln categories

Lucas Charles requested to merge add-padded-owasp-2017-categories into master

What does this MR do and why?

Adds corrected mapping to Vulnerability enums to allow rules with properly formatted identifiers to map to the corrected OWASP category.

Previous mapping is incorrect but must be kept in sync with analyzers until it can be updated on both sides, see this comment in explanation

This should eventually be addressed with #429565 (comment 1885323516) but as an incremental step we can update this mapping to the match OWASP's preferred format, update analyzer to correct format, and drop incorrect mapping 💫

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Screenshots or screen recordings

Screenshots are required for UI changes, and strongly recommended for all other merge requests.

Before After

How to set up and validate locally

Numbered steps to set up and validate the change are strongly suggested.

Merge request reports