diff options
| author | Wouter Admiraal <45544358+wouter-admiraal-sonarsource@users.noreply.github.com> | 2022-03-14 12:12:00 +0100 |
|---|---|---|
| committer | sonartech <sonartech@sonarsource.com> | 2022-03-14 20:03:08 +0000 |
| commit | 76aa46fb5e6a7d3a90fbbadf6d87b68a25741e0d (patch) | |
| tree | fc074e0fffc90c472e62ea0235684d66e0c0b60f /server/sonar-docs/src | |
| parent | 6b309a45b4386c3d1c3e45accc42769260c19d42 (diff) | |
| download | sonarqube-76aa46fb5e6a7d3a90fbbadf6d87b68a25741e0d.tar.gz sonarqube-76aa46fb5e6a7d3a90fbbadf6d87b68a25741e0d.zip | |
SONAR-16125 Update Security Report, mention latest OWASP Top 10 and latest CWE Top 25
Diffstat (limited to 'server/sonar-docs/src')
| -rw-r--r-- | server/sonar-docs/src/pages/user-guide/security-reports.md | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/server/sonar-docs/src/pages/user-guide/security-reports.md b/server/sonar-docs/src/pages/user-guide/security-reports.md index 1630ceed33b..fe086a0a156 100644 --- a/server/sonar-docs/src/pages/user-guide/security-reports.md +++ b/server/sonar-docs/src/pages/user-guide/security-reports.md @@ -6,7 +6,7 @@ url: /user-guide/security-reports/ *Security Reports are available starting in [Enterprise Edition](https://redirect.sonarsource.com/editions/enterprise.html).* ## What do Security Reports show? -Security Reports quickly give you the big picture on your application's security, with breakdowns of just where you stand in regard to each of the [OWASP Top 10](https://www.owasp.org/index.php/Top_10-2017_Top_10), both [CWE Top 25 2019](https://cwe.mitre.org/top25/archive/2019/2019_cwe_top25.html) and [CWE Top 25 2020](https://cwe.mitre.org/top25/archive/2020/2020_cwe_top25.html), and [CWE](https://cwe.mitre.org/) -specific details. +Security Reports quickly give you the big picture on your application's security. They allow you to know where you stand compared to the most common security mistakes made in the past: [OWASP Top 10 2021](https://owasp.org/Top10/), [OWASP Top 10 2017](https://owasp.org/www-project-top-ten/2017), [CWE Top 25 2021](https://cwe.mitre.org/top25/archive/2021/2021_cwe_top25.html), [CWE Top 25 2020](https://cwe.mitre.org/top25/archive/2020/2020_cwe_top25.html), and [CWE Top 25 2019](https://cwe.mitre.org/top25/archive/2019/2019_cwe_top25.html). They represent a bare minimum to comply with for anyone putting in place secure development lifecycle. [[warning]] | The SANS Top 25 report is based on outdated statistics and should no longer be used. Instead, we recommend using the CWE Top 25 reports. @@ -35,4 +35,4 @@ The PDF contains: - the number of open Vulnerabilities and the Security Rating on both overall code and new code. - the number of Security Hotspots, the percentage of reviewed Security Hotspots, and the Security Review rating on both overall and new code. -- your SonarSource, OWASP Top 10, and CWE Top 25 2020 reports.
\ No newline at end of file +- your SonarSource, OWASP Top 10, and CWE Top 25 2020 reports. |