Spyros

Javascript Code Examples

6

Hi, great work on this framework. Seems very useful to both developers and security engineers. I didn't find any javascript code examples. Did I miss it? If there aren't any...

* safety version: latest * Python version: python3.7 * Operating System: Linux ### Description Hey safety maintainers, thanks a ton for the great tool! Could you please release appropriately tagged...

Hey, sorry for the bad title Essentially, the strings provided by Burp's deocder (after url and Base64 decoding) and Raider are different in that the raider XML parser has attempted...

Standards Mapping Table Between ASVS and CRE

3

Hey everyone, we discussed adding CRE mappings into a mapping table, keeping with the code-first mentality of both of our projects, I added the ability to opencre.org to export to...

FindSecBugs-cli crashes when trying to write SARIF output

1

Hey find-sec-bugs team, thank you for maintaining such a useful tool! Y'all are awesome! ## Environment FindSecBugs 1.12.0 downloaded from https://github.com/find-sec-bugs/find-sec-bugs/releases/download/version-1.12.0/findsecbugs-cli-1.12.0.zip ## Problem Trying to run FindSecBugs cli against any...

[Presentation] OpenCRE.org and CNCF, standard harmonization usecases for the modern cloud

3

Title: OpenCRE.org and CNCF, standard harmonization usecases for the modern cloud Speakers: Spyros Gasteratos (@northdpole), Rob Van Der Veer (@robvanderveer) Description: In this presentation we will showcase what the OpenSource...

## Issue New components (especially jira ones) need volumes or configmaps with the config files attached. We need to provide examples on how to use them. ### Expected behaviour Someone...

closes #479 TODO: - [ ] make spreadsheet_parsers.parse_export_format() return the same format as parse_hierarchical_export_format() - [ ] add parse_export_format test case to test_parse_standards_from_spreadsheeet - [x] make base "importer" class that...

[api] add ability to export results as CycloneDX attestations

2

## Issue ### **What is the issue?** CycloneDX supports attestations. This is their way to do standards and they have native CRE support in their attestations. Time for us to...