agent-security-scanner-mcp 3.0.0 → 3.2.0

package/rules/generic/secrets/security/detected-generic-api-key.yaml

@@ -0,0 +1,29 @@
+rules:
+- id: detected-generic-api-key
+  patterns:
+  - pattern-regex: "[aA][pP][iI]_?[kK][eE][yY][=_:\\s-]+['|\"]?(?<SECRET>[0-9a-zA-Z]{32,45})['|\"]?"
+  - metavariable-analysis:
+      analyzer: entropy
+      metavariable: $SECRET
+  languages: [regex]
+  message: Generic API Key detected
+  severity: ERROR
+  metadata:
+    source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
+    category: security
+    technology:
+    - secrets
+    confidence: LOW
+    references:
+    - https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-generic-secret.yaml

@@ -0,0 +1,30 @@
+rules:
+- id: detected-generic-secret
+  patterns:
+  - pattern-regex: |-
+      [sS][eE][cC][rR][eE][tT][:= \t]*['|\"]?(?<SECRET>[0-9a-zA-Z]{32,45})['|\"]?
+  - metavariable-analysis:
+      analyzer: entropy
+      metavariable: $SECRET
+  languages: [regex]
+  message: Generic Secret detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
+    category: security
+    technology:
+    - secrets
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-github-token.yaml

@@ -0,0 +1,47 @@
+rules:
+- id: detected-github-token
+  patterns:
+  - pattern-either:
+    - pattern: |
+        $VAR = $SECRET
+    - pattern: |
+        $VAR: $SECRET
+    - pattern: |
+        $VAR = '$SECRET'
+    - pattern: |
+        $VAR: '$SECRET'
+    - pattern: |
+        '$VAR' = '$SECRET'
+    - pattern: |
+        '$VAR': '$SECRET'
+    - pattern: |
+        "[hH][tT][tT][pP][sS]?://.*$SECRET.*"
+  - metavariable-regex:
+      metavariable: $SECRET
+      regex: gh[pousr]_[A-Za-z0-9_]{36,251}
+  - metavariable-analysis:
+      analyzer: entropy
+      metavariable: $SECRET
+  languages: [generic]
+  message: GitHub Token detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.blog/changelog/2021-03-04-authentication-token-format-updates/
+    category: security
+    technology:
+    - secrets
+    - github
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-google-api-key.yaml

@@ -0,0 +1,29 @@
+rules:
+- id: detected-google-api-key
+  patterns:
+  - pattern-regex: \bAIzaSy[0-9A-Za-z-_]{33}\b
+  - pattern-not-regex: \bAIzaSy[0-9A-Za-z-_]{33}\b[=]
+  languages:
+  - regex
+  message: Google API Key Detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
+    category: security
+    technology:
+    - secrets
+    - google
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-google-cloud-api-key.yaml

@@ -0,0 +1,27 @@
+rules:
+- id: detected-google-cloud-api-key
+  pattern-regex: |-
+    AIza[0-9A-Za-z\\-_]{35}
+  languages: [regex]
+  message: Google Cloud API Key detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go
+    category: security
+    technology:
+    - secrets
+    - google-cloud
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-google-gcm-service-account.yaml

@@ -0,0 +1,27 @@
+rules:
+- id: detected-google-gcm-service-account
+  pattern-regex: |-
+    (("|'|`)?type("|'|`)?\s{0,50}(:|=>|=)\s{0,50}("|'|`)?service_account("|'|`)?,?)
+  languages: [regex]
+  message: Google (GCM) Service account detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go
+    category: security
+    technology:
+    - secrets
+    - google-cloud
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-google-oauth-access-token.yaml

@@ -0,0 +1,26 @@
+rules:
+- id: detected-google-oauth-access-token
+  pattern-regex: ya29\.[0-9A-Za-z\-_]+
+  languages: [regex]
+  message: Google OAuth Access Token detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
+    category: security
+    technology:
+    - secrets
+    - google
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-google-oauth.yaml

@@ -0,0 +1,26 @@
+rules:
+- id: detected-google-oauth-url
+  pattern-regex: '[0-9]+-[0-9A-Za-z_]{32}\.apps\.googleusercontent\.com'
+  languages: [regex]
+  message: Google OAuth url detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
+    category: security
+    technology:
+    - secrets
+    - google
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-heroku-api-key.yaml

@@ -0,0 +1,27 @@
+rules:
+- id: detected-heroku-api-key
+  pattern-regex: |-
+    [hH][eE][rR][oO][kK][uU].*[0-9A-Fa-f]{8}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{4}-[0-9A-Fa-f]{12}
+  languages: [regex]
+  message: Heroku API Key detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
+    category: security
+    technology:
+    - secrets
+    - heroku
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-hockeyapp.yaml

@@ -0,0 +1,27 @@
+rules:
+- id: detected-hockeyapp
+  pattern-regex: |-
+    (?i)hockey.{0,50}(\\\"|'|`)?[0-9a-f]{32}(\\\"|'|`)?
+  languages: [regex]
+  message: HockeyApp detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go
+    category: security
+    technology:
+    - secrets
+    - hockeyapp
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-jwt-token.yaml

@@ -0,0 +1,25 @@
+rules:
+- id: detected-jwt-token
+  pattern-regex: |-
+    eyJ[A-Za-z0-9-_=]{14,}\.[A-Za-z0-9-_=]{13,}\.?[A-Za-z0-9-_.+/=]*?
+  languages: [regex]
+  message: JWT token detected
+  severity: ERROR
+  metadata:
+    source-rule-url: https://github.com/Yelp/detect-secrets/blob/master/detect_secrets/plugins/jwt.py
+    category: security
+    technology:
+    - secrets
+    - jwt
+    confidence: LOW
+    references:
+    - https://semgrep.dev/blog/2020/hardcoded-secrets-unverified-tokens-and-other-common-jwt-mistakes/
+    cwe:
+    - 'CWE-321: Use of Hard-coded Cryptographic Key'
+    owasp:
+    - A02:2021 - Cryptographic Failures
+    - A04:2025 - Cryptographic Failures
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-kolide-api-key.yaml

@@ -0,0 +1,25 @@
+rules:
+- id: detected-kolide-api-key
+  pattern-regex: k2sk_v[0-9]_[0-9a-zA-Z]{24}
+  languages: [regex]
+  message: Kolide API Key detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    category: security
+    technology:
+    - secrets
+    - kolide
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-mailchimp-api-key.yaml

@@ -0,0 +1,26 @@
+rules:
+- id: detected-mailchimp-api-key
+  pattern-regex: '[0-9a-f]{32}-us[0-9]{1,2}'
+  languages: [regex]
+  message: MailChimp API Key detected
+  severity: ERROR
+  metadata:
+    source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
+    category: security
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    technology:
+    - secrets
+    - mailchimp
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-mailgun-api-key.yaml

@@ -0,0 +1,26 @@
+rules:
+- id: detected-mailgun-api-key
+  pattern-regex: key-[0-9a-zA-Z]{32}
+  languages: [regex]
+  message: Mailgun API Key detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
+    category: security
+    technology:
+    - secrets
+    - mailgun
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-npm-registry-auth-token.yaml

@@ -0,0 +1,33 @@
+rules:
+- id: detected-npm-registry-auth-token
+  patterns:
+    - pattern: $AUTHTOKEN = $VALUE
+    - metavariable-regex:
+        metavariable: $AUTHTOKEN
+        regex: _(authToken|auth|password)
+    - pattern-not: $AUTHTOKEN = ${...}
+  languages: [generic]
+  message: NPM registry authentication token detected
+  paths:
+    include:
+    - '*npmrc*'
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    category: security
+    technology:
+    - secrets
+    - npm
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-onfido-live-api-token.yaml

@@ -0,0 +1,20 @@
+rules:
+- id: detected-onfido-live-api-token
+  pattern-regex: (?:api_live(?:_[a-zA-Z]{2})?\.[a-zA-Z0-9-_]{11}\.[-_a-zA-Z0-9]{32})
+  languages: [regex]
+  message: Onfido live API Token detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    category: security
+    technology:
+    - secrets
+    - onfido
+    confidence: HIGH
+    references:
+    - https://documentation.onfido.com/api/latest/#api-tokens
+    subcategory:
+    - audit
+    likelihood: HIGH
+    impact: HIGH

package/rules/generic/secrets/security/detected-outlook-team.yaml

@@ -0,0 +1,27 @@
+rules:
+- id: detected-outlook-team
+  pattern-regex: |-
+    https://outlook\.office\.com/webhook/[0-9a-f-]{36}
+  languages: [regex]
+  message: Outlook Team detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go
+    category: security
+    technology:
+    - secrets
+    - outlook
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-paypal-braintree-access-token.yaml

@@ -0,0 +1,27 @@
+rules:
+- id: detected-paypal-braintree-access-token
+  pattern-regex: access_token\$production\$[0-9a-z]{16}\$[0-9a-z]{32}
+  languages: [regex]
+  message: PayPal Braintree Access Token detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
+    category: security
+    technology:
+    - secrets
+    - paypal
+    - braintree
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-pgp-private-key-block.yaml

@@ -0,0 +1,28 @@
+rules:
+- id: detected-pgp-private-key-block
+  pattern-regex: '-----BEGIN PGP PRIVATE KEY BLOCK-----'
+  languages: [regex]
+  message: >-
+    Something that looks like a PGP private key block is detected. This is a potential
+    hardcoded secret that could be leaked if this code is committed.
+    Instead, remove this code block from the commit.
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
+    category: security
+    technology:
+    - secrets
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-picatic-api-key.yaml

@@ -0,0 +1,26 @@
+rules:
+- id: detected-picatic-api-key
+  pattern-regex: sk_live_[0-9a-z]{32}
+  languages: [regex]
+  message: Picatic API Key detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/dxa4481/truffleHogRegexes/blob/master/truffleHogRegexes/regexes.json
+    category: security
+    technology:
+    - secrets
+    - picatic
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-private-key.yaml

@@ -0,0 +1,39 @@
+rules:
+- id: detected-private-key
+  patterns:
+  - pattern-either:
+    - patterns:
+      - pattern: '-----BEGIN $TYPE PRIVATE KEY----- $KEY'
+      - metavariable-regex:
+          metavariable: $TYPE
+          regex: (?i)([dr]sa|ec|openssh|encrypted)?
+    - patterns:
+      - pattern: |
+          -----BEGIN PRIVATE KEY-----
+          $KEY
+  - metavariable-analysis:
+      metavariable: $KEY
+      analyzer: entropy
+  languages: [generic]
+  message: Private Key detected. This is a sensitive credential and should not be hardcoded here. Instead,
+    store this in a separate, private file.
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go
+    category: security
+    technology:
+    - secrets
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-sauce-token.yaml

@@ -0,0 +1,27 @@
+rules:
+- id: detected-sauce-token
+  pattern-regex: |-
+    (?i)sauce.{0,50}(\\\"|'|`)?[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[0-9a-f]{4}-[0-9a-f]{12}(\\\"|'|`)?
+  languages: [regex]
+  message: Sauce Token detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/grab/secret-scanner/blob/master/scanner/signatures/pattern.go
+    category: security
+    technology:
+    - secrets
+    - sauce
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM

package/rules/generic/secrets/security/detected-sendgrid-api-key.yaml

@@ -0,0 +1,27 @@
+rules:
+- id: detected-sendgrid-api-key
+  pattern-regex: |-
+    SG\.[a-zA-Z0-9]{22}\.[a-zA-Z0-9-]{43}\b
+  languages: [regex]
+  message: SendGrid API Key detected
+  severity: ERROR
+  metadata:
+    cwe:
+    - 'CWE-798: Use of Hard-coded Credentials'
+    source-rule-url: https://github.com/narendrakadali/gitrob/blob/master/rules/contentsignatures.json
+    category: security
+    technology:
+    - secrets
+    - sendgrid
+    confidence: LOW
+    owasp:
+    - A07:2021 - Identification and Authentication Failures
+    - A07:2025 - Authentication Failures
+    references:
+    - https://owasp.org/Top10/A07_2021-Identification_and_Authentication_Failures
+    cwe2022-top25: true
+    cwe2021-top25: true
+    subcategory:
+    - audit
+    likelihood: LOW
+    impact: MEDIUM