@m2-ai/lattice-cli 0.0.0-stage → 0.8.7

package/dist/security-runtime/licensing/candidates/gitlab-sast-rule-identities.json

@@ -0,0 +1,178 @@
+{
+  "schemaVersion": 1,
+  "status": "metadata-only-selected-sast-rule-identities",
+  "sourceCommit": "53bf5cf6df3c51b6c02110f5a638b5e6213666cd",
+  "sourceArchiveSha256": "32b51522401d1a19e2f68277235eef1f31ddd3560ae54343b6a6a78c4d2fbb23",
+  "sourceNoticeBundleSha256": "aa6f5134dcf908f46992b7a00e7c42d5f7dcaeb45a0fad293132474159ecdd83",
+  "sourceFiles": 161,
+  "ruleCount": 161,
+  "ruleIds": [
+    "javascript_buf_rule-buffer-noassert-read",
+    "javascript_buf_rule-buffer-noassert-write",
+    "javascript_buf_rule-detect-new-buffer",
+    "javascript_dos_rule-non-literal-regexp",
+    "javascript_eval_rule-eval-with-expression",
+    "javascript_pathtraversal_rule-non-literal-fs-filename",
+    "javascript_random_rule-pseudo-random-bytes",
+    "javascript_react_rule-dangerouslysetinnerhtml",
+    "javascript_require_rule-non-literal-require",
+    "javascript_timing_rule-possible-timing-attacks",
+    "javascript_xss_rule-mustache-escape",
+    "python_assert_rule-assert-used",
+    "python_bind-all-interfaces_rule-general-bindall-interfaces",
+    "python_crypto_rule-cipher-modes",
+    "python_crypto_rule-crypto-cipher-blowfish",
+    "python_crypto_rule-crypto-cipher-des",
+    "python_crypto_rule-crypto-cipher-rc2",
+    "python_crypto_rule-crypto-cipher-rc4",
+    "python_crypto_rule-crypto-cipher-xor",
+    "python_crypto_rule-crypto-encrypt-dsa-rsa",
+    "python_crypto_rule-crypto-encrypt-ec",
+    "python_crypto_rule-crypto-hash-md5",
+    "python_crypto_rule-crypto-hash-sha1",
+    "python_crypto_rule-crypto-hazmat-cipher-arc4",
+    "python_crypto_rule-crypto-hazmat-cipher-blowfish",
+    "python_crypto_rule-crypto-hazmat-cipher-idea",
+    "python_crypto_rule-crypto.hazmat-hash-md5",
+    "python_crypto_rule-crypto.hazmat-hash-sha1",
+    "python_crypto_rule-hash-md2",
+    "python_crypto_rule-hash-md4",
+    "python_crypto_rule-hash-md5",
+    "python_crypto_rule-hash-sha1",
+    "python_crypto_rule-hashlib-new-insecure-functions",
+    "python_crypto_rule-import-pycrypto",
+    "python_deserialization_rule-cpickle",
+    "python_deserialization_rule-dill",
+    "python_deserialization_rule-marshal",
+    "python_deserialization_rule-pickle",
+    "python_deserialization_rule-shelve",
+    "python_deserialization_rule-yaml-load",
+    "python_django_rule-django-extra-used",
+    "python_escaping_rule-jinja2-autoescape-false",
+    "python_escaping_rule-use-of-mako-templates",
+    "python_eval_rule-eval",
+    "python_exec_rule-exec-used",
+    "python_exec_rule-linux-command-wildcard-injection",
+    "python_exec_rule-os-path",
+    "python_exec_rule-os-popen2",
+    "python_exec_rule-start-process-with-no-shell",
+    "python_exec_rule-subprocess-call",
+    "python_exec_rule-subprocess-popen-shell-true",
+    "python_exec_rule-subprocess-shell-TRUE",
+    "python_file-permissions_rule-general-bad-permission",
+    "python_files_rule-tarfile-unsafe-members",
+    "python_flask_rule-app-debug",
+    "python_ftp_rule-ftplib",
+    "python_log_rule-logging-config-insecure-listen",
+    "python_random_rule-random",
+    "python_requests_rule-request-without-timeout",
+    "python_snmp_rule-insecure-snmp-version",
+    "python_snmp_rule-snmp-weak-cryptography",
+    "python_sql_rule-hardcoded-sql-expression",
+    "python_ssh_rule-ssh-nohost-key-verification",
+    "python_ssl_rule-req-no-certvalid",
+    "python_ssl_rule-ssl-no-version",
+    "python_ssl_rule-ssl-with-bad-version",
+    "python_ssl_rule-unverified-context",
+    "python_telnet_rule-import-telnib",
+    "python_tmpdir_rule-hardcodedtmp",
+    "python_tmpdir_rule-mktemp-q",
+    "python_urlopen_rule-urllib-urlopen",
+    "python_xml_rule-celement",
+    "python_xml_rule-element",
+    "python_xml_rule-etree",
+    "python_xml_rule-expatbuilder",
+    "python_xml_rule-expatreader",
+    "python_xml_rule-minidom",
+    "python_xml_rule-pulldom",
+    "python_xml_rule-sax",
+    "rules_lgpl_javascript_crypto_rule-node-aes-ecb",
+    "rules_lgpl_javascript_crypto_rule-node-aes-noiv",
+    "rules_lgpl_javascript_crypto_rule-node-insecure-random-generator",
+    "rules_lgpl_javascript_crypto_rule-node-md5",
+    "rules_lgpl_javascript_crypto_rule-node-sha1",
+    "rules_lgpl_javascript_crypto_rule-node-timing-attack",
+    "rules_lgpl_javascript_crypto_rule-node-tls-reject",
+    "rules_lgpl_javascript_crypto_rule-node-weak-crypto",
+    "rules_lgpl_javascript_database_rule-node-knex-sqli-injection",
+    "rules_lgpl_javascript_database_rule-node-nosqli-injection",
+    "rules_lgpl_javascript_database_rule-node-nosqli-js-injection",
+    "rules_lgpl_javascript_database_rule-node-sqli-injection",
+    "rules_lgpl_javascript_database_rule-sequelize-tls",
+    "rules_lgpl_javascript_database_rule-sequelize-tls-cert-validation",
+    "rules_lgpl_javascript_database_rule-sequelize-weak-tls",
+    "rules_lgpl_javascript_dos_rule-layer7-object-dos",
+    "rules_lgpl_javascript_dos_rule-regex-dos",
+    "rules_lgpl_javascript_electronjs_rule-electron-allow-http",
+    "rules_lgpl_javascript_electronjs_rule-electron-blink-integration",
+    "rules_lgpl_javascript_electronjs_rule-electron-context-isolation",
+    "rules_lgpl_javascript_electronjs_rule-electron-disable-websecurity",
+    "rules_lgpl_javascript_electronjs_rule-electron-experimental-features",
+    "rules_lgpl_javascript_electronjs_rule-electron-nodejs-integration",
+    "rules_lgpl_javascript_eval_rule-eval-nodejs",
+    "rules_lgpl_javascript_eval_rule-eval-require",
+    "rules_lgpl_javascript_eval_rule-grpc-insecure-connection",
+    "rules_lgpl_javascript_eval_rule-node-deserialize",
+    "rules_lgpl_javascript_eval_rule-sandbox-code-injection",
+    "rules_lgpl_javascript_eval_rule-serializetojs-deserialize",
+    "rules_lgpl_javascript_eval_rule-server-side-template-injection",
+    "rules_lgpl_javascript_eval_rule-vm-code-injection",
+    "rules_lgpl_javascript_eval_rule-vm-compilefunction-injection",
+    "rules_lgpl_javascript_eval_rule-vm-runincontext-injection",
+    "rules_lgpl_javascript_eval_rule-vm-runinnewcontext-injection",
+    "rules_lgpl_javascript_eval_rule-vm2-code-injection",
+    "rules_lgpl_javascript_eval_rule-vm2-context-injection",
+    "rules_lgpl_javascript_eval_rule-yaml-deserialize",
+    "rules_lgpl_javascript_exec_rule-shelljs-os-command-exec",
+    "rules_lgpl_javascript_headers_rule-cookie-session-default",
+    "rules_lgpl_javascript_headers_rule-cookie-session-no-domain",
+    "rules_lgpl_javascript_headers_rule-cookie-session-no-httponly",
+    "rules_lgpl_javascript_headers_rule-cookie-session-no-maxage",
+    "rules_lgpl_javascript_headers_rule-cookie-session-no-path",
+    "rules_lgpl_javascript_headers_rule-cookie-session-no-samesite",
+    "rules_lgpl_javascript_headers_rule-cookie-session-no-secure",
+    "rules_lgpl_javascript_headers_rule-express-cors",
+    "rules_lgpl_javascript_headers_rule-generic-cors",
+    "rules_lgpl_javascript_headers_rule-generic-header-injection",
+    "rules_lgpl_javascript_headers_rule-header-xss-generic",
+    "rules_lgpl_javascript_headers_rule-header-xss-lusca",
+    "rules_lgpl_javascript_headers_rule-helmet-feature-disabled",
+    "rules_lgpl_javascript_headers_rule-host-header-injection",
+    "rules_lgpl_javascript_jwt_rule-hardcoded-jwt-secret",
+    "rules_lgpl_javascript_jwt_rule-jwt-exposed-credentials",
+    "rules_lgpl_javascript_jwt_rule-jwt-exposed-data",
+    "rules_lgpl_javascript_jwt_rule-jwt-express-hardcoded",
+    "rules_lgpl_javascript_jwt_rule-jwt-not-revoked",
+    "rules_lgpl_javascript_jwt_rule-node-jwt-none-algorithm",
+    "rules_lgpl_javascript_redirect_rule-express-open-redirect",
+    "rules_lgpl_javascript_redirect_rule-express-open-redirect2",
+    "rules_lgpl_javascript_ssrf_rule-node-ssrf",
+    "rules_lgpl_javascript_ssrf_rule-phantom-ssrf",
+    "rules_lgpl_javascript_ssrf_rule-playwright-ssrf",
+    "rules_lgpl_javascript_ssrf_rule-puppeteer-ssrf",
+    "rules_lgpl_javascript_ssrf_rule-wkhtmltoimage-ssrf",
+    "rules_lgpl_javascript_ssrf_rule-wkhtmltopdf-ssrf",
+    "rules_lgpl_javascript_traversal_rule-admzip-path-overwrite",
+    "rules_lgpl_javascript_traversal_rule-express-lfr",
+    "rules_lgpl_javascript_traversal_rule-express-lfr-warning",
+    "rules_lgpl_javascript_traversal_rule-generic-path-traversal",
+    "rules_lgpl_javascript_traversal_rule-join-resolve-path-traversal",
+    "rules_lgpl_javascript_traversal_rule-tar-path-overwrite",
+    "rules_lgpl_javascript_traversal_rule-zip-path-overwrite",
+    "rules_lgpl_javascript_xml_rule-node-entity-expansion",
+    "rules_lgpl_javascript_xml_rule-node-xpath-injection",
+    "rules_lgpl_javascript_xml_rule-node-xxe",
+    "rules_lgpl_javascript_xss_rule-express-xss",
+    "rules_lgpl_javascript_xss_rule-handlebars-noescape",
+    "rules_lgpl_javascript_xss_rule-handlebars-safestring",
+    "rules_lgpl_javascript_xss_rule-squirrelly-autoescape",
+    "rules_lgpl_javascript_xss_rule-xss-disable-mustache-escape",
+    "rules_lgpl_javascript_xss_rule-xss-serialize-javascript"
+  ],
+  "ruleIdsSha256": "338143b7ac9e7bfd90f432b7aec070aa710584eaecfeb6174339a8852e1ae611",
+  "extractionReceipt": {
+    "path": "lattice-vsg-release-cycle-7/gitlab-sast-rule-catalog.json",
+    "sha256": "a6f6b581b648e86edc5cc6f97fb5effb81eabddf5426e29289eccfdc3edfc0e8"
+  },
+  "rawRulePayloadIncluded": false
+}