From f9c3de607616f194e3e580c4fc0d1f20e54c3e07 Mon Sep 17 00:00:00 2001 From: Mark Borrow <99207355+shiftleft-mark@users.noreply.github.com> Date: Mon, 1 Aug 2022 09:35:42 -0400 Subject: [PATCH 1/5] Create ngsast.yml --- ngsast.yml | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) create mode 100644 ngsast.yml diff --git a/ngsast.yml b/ngsast.yml new file mode 100644 index 0000000..c251842 --- /dev/null +++ b/ngsast.yml @@ -0,0 +1,18 @@ +ngsast: +- app: + name: shiftleft-config + language: JAVA + modify-findings: + - open_redirect_modification_rule +finding-modifications: + open_redirect_modification_rule: + filter: + category: + - Header Injection + tags: + - key: cvss_score + value: 8 + - key: severity + value: high + - key: reason + value: appsec_escalation From cdc6dae6ff3c2cf3a9874f17832dab9e4f15f63d Mon Sep 17 00:00:00 2001 From: Mark Borrow <99207355+shiftleft-mark@users.noreply.github.com> Date: Mon, 1 Aug 2022 12:29:52 -0400 Subject: [PATCH 2/5] Update ngsast.yml --- ngsast.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ngsast.yml b/ngsast.yml index c251842..8af1227 100644 --- a/ngsast.yml +++ b/ngsast.yml @@ -1,6 +1,6 @@ ngsast: - app: - name: shiftleft-config + name: sl-java-test language: JAVA modify-findings: - open_redirect_modification_rule From 8aefaaa563ad24dcc6c54bf8820435aeb97bd82b Mon Sep 17 00:00:00 2001 From: Mark Borrow <99207355+shiftleft-mark@users.noreply.github.com> Date: Mon, 1 Aug 2022 15:09:16 -0400 Subject: [PATCH 3/5] Rename ngsast.yml to ngsast.yaml --- ngsast.yml => ngsast.yaml | 0 1 file changed, 0 insertions(+), 0 deletions(-) rename ngsast.yml => ngsast.yaml (100%) diff --git a/ngsast.yml b/ngsast.yaml similarity index 100% rename from ngsast.yml rename to ngsast.yaml From 500a53ae1b04b2b700eb86a32a6f5684ecd0b609 Mon Sep 17 00:00:00 2001 From: Mark Borrow <99207355+shiftleft-mark@users.noreply.github.com> Date: Tue, 2 Aug 2022 13:07:35 -0400 Subject: [PATCH 4/5] Update ngsast.yaml --- ngsast.yaml | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/ngsast.yaml b/ngsast.yaml index 8af1227..9c6be03 100644 --- a/ngsast.yaml +++ b/ngsast.yaml @@ -13,6 +13,8 @@ finding-modifications: - key: cvss_score value: 8 - key: severity - value: high + value: critical + - key: cvss_31_severity_rating + - value: high - key: reason value: appsec_escalation From 3a8b5a32f1772664c4b7d4c0f7844f9a0f619236 Mon Sep 17 00:00:00 2001 From: Mark Borrow <99207355+shiftleft-mark@users.noreply.github.com> Date: Tue, 2 Aug 2022 13:10:22 -0400 Subject: [PATCH 5/5] Update ngsast.yaml --- ngsast.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ngsast.yaml b/ngsast.yaml index 9c6be03..bab491a 100644 --- a/ngsast.yaml +++ b/ngsast.yaml @@ -15,6 +15,6 @@ finding-modifications: - key: severity value: critical - key: cvss_31_severity_rating - - value: high + value: high - key: reason value: appsec_escalation