Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat: Adds owasp rules to vacuum #285

Merged
merged 198 commits into from
Jul 6, 2023
Merged

Conversation

Ricagraca
Copy link
Contributor

@Ricagraca Ricagraca commented Jun 1, 2023

This PR serves to extend vacuum with the OWASP rules that already exist for spectral:

https://github.com/stoplightio/spectral-owasp-ruleset/blob/main/src/ruleset.ts

and use the tests that they provide to guarantee quality

https://github.com/stoplightio/spectral-owasp-ruleset/blob/main/__tests__/

@Ricagraca Ricagraca mentioned this pull request Jun 1, 2023
@Ricagraca Ricagraca changed the title feat: <wip> Adding owasp rules to vacuum feat: <wip> Adds owasp rules to vacuum Jun 2, 2023
Copy link
Owner

@daveshanley daveshanley left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So far, this all looks fine to me!

Do those JSON Path expressions work?

@daveshanley daveshanley added the release/patch Patch / non-breaking release label Jun 4, 2023
rica-graca and others added 27 commits July 5, 2023 17:45
Pattern output is now clear when using paths, before it was not accurate.

Signed-off-by: Dave Shanley <[email protected]>
No more panic when hitting up/down within emoty lists.

Signed-off-by: Dave Shanley <[email protected]>
Added a test to validate.

Signed-off-by: Dave Shanley <[email protected]>
Lots of commits, and work from contributors, and me changing machines and Goland having random fun.. it’s time to clean house again.

Signed-off-by: Dave Shanley <[email protected]>
Signed-off-by: Dave Shanley <[email protected]>
When vacuum was reading in the function options for a rule, it was not constructing the schema from the options correctlty. This bug may exist in other functions, but it’s been fixed here.

Signed-off-by: Dave Shanley <[email protected]>
…sy function whenever the node has content (it not empty)
@daveshanley daveshanley merged commit 92d48f4 into daveshanley:main Jul 6, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants