Updated rules metadata (#1798)

joke1196 · web-flow · commit d445b96935ae · 2024-05-08T16:19:14.000+02:00
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S1192.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S1192.html
@@ -9,8 +9,8 @@ <h3>Exceptions</h3>
   <li> strings with only letters, numbers and underscores </li>
 </ul>
 <h2>How to fix it</h2>
-<p>Instead, use constants to replace the duplicated string literals. Constants can be referenced from many places, but only need to be updated in a
-single place.</p>
+<p>Use constants to replace the duplicated string literals. Constants can be referenced from many places, but only need to be updated in a single
+place.</p>
 <h3>Code examples</h3>
 <h4>Noncompliant code example</h4>
 <p>With the default threshold of 3:</p>
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2053.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2053.html
@@ -108,5 +108,7 @@ <h3>Standards</h3>
   Exposure</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/759">CWE-759 - Use of a One-Way Hash without a Salt</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/760">CWE-760 - Use of a One-Way Hash with a Predictable Salt</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222542">Application Security and
+  Development: V-222542</a> - The application must only store cryptographic representations of passwords. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2053.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2053.json
@@ -35,6 +35,9 @@
     ],
     "PCI DSS 4.0": [
       "6.2.4"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222542"
     ]
   },
   "quickfix": "unknown"
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2092.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2092.html
@@ -44,5 +44,7 @@ <h2>See</h2>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/311">CWE-311 - Missing Encryption of Sensitive Data</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/315">CWE-315 - Cleartext Storage of Sensitive Information in a Cookie</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/614">CWE-614 - Sensitive Cookie in HTTPS Session Without 'Secure' Attribute</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222576">Application Security and
+  Development: V-222576</a> - The application must set the secure flag on session cookies. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2092.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2092.json
@@ -44,6 +44,9 @@
       "6.1.1",
       "6.1.2",
       "6.1.3"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222576"
     ]
   }
 }
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2612.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2612.html
@@ -46,5 +46,7 @@ <h2>See</h2>
   href="https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/02-Configuration_and_Deployment_Management_Testing/09-Test_File_Permission">OWASP File Permission</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/732">CWE-732 - Incorrect Permission Assignment for Critical Resource</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/266">CWE-266 - Incorrect Privilege Assignment</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222430">Application Security and
+  Development: V-222430</a> - The application must execute without excessive account permissions. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2612.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2612.json
@@ -39,6 +39,9 @@
     ],
     "ASVS 4.0": [
       "4.3.3"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222430"
     ]
   }
 }
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2755.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2755.html
@@ -125,5 +125,7 @@ <h3>Standards</h3>
   Entities (XXE)</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/611">CWE-611 - Information Exposure Through XML External Entity Reference</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/827">CWE-827 - Improper Control of Document Type Definition</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222608">Application Security and
+  Development: V-222608</a> - The application must not be vulnerable to XML-oriented attacks. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2755.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S2755.json
@@ -38,6 +38,9 @@
     ],
     "ASVS 4.0": [
       "5.5.2"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222608"
     ]
   },
   "quickfix": "unknown"
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S3330.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S3330.html
@@ -45,5 +45,7 @@ <h2>See</h2>
   (XSS)</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/1004">CWE-1004 - Sensitive Cookie Without 'HttpOnly' Flag</a> </li>
   <li> Derived from FindSecBugs rule <a href="https://find-sec-bugs.github.io/bugs.htm#HTTPONLY_COOKIE">HTTPONLY_COOKIE</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222575">Application Security and
+  Development: V-222575</a> - The application must set the HTTPOnly flag on session cookies. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S3330.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S3330.json
@@ -38,6 +38,9 @@
     ],
     "ASVS 4.0": [
       "3.4.2"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222575"
     ]
   }
 }
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S4502.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S4502.html
@@ -143,5 +143,7 @@ <h2>See</h2>
   <li> OWASP - <a href="https://owasp.org/www-project-top-ten/2017/A6_2017-Security_Misconfiguration">Top 10 2017 Category A6 - Security
   Misconfiguration</a> </li>
   <li> <a href="https://owasp.org/www-community/attacks/csrf">OWASP: Cross-Site Request Forgery</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222603">Application Security and
+  Development: V-222603</a> - The application must protect from Cross-Site Request Forgery (CSRF) vulnerabilities. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S4502.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S4502.json
@@ -40,6 +40,9 @@
     "ASVS 4.0": [
       "13.2.3",
       "4.2.2"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222603"
     ]
   }
 }
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S4830.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S4830.html
@@ -189,5 +189,7 @@ <h3>Standards</h3>
   <li> OWASP - <a href="https://mobile-security.gitbook.io/masvs/security-requirements/0x10-v5-network_communication_requirements">Mobile AppSec
   Verification Standard - Network Communication Requirements</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/295">CWE-295 - Improper Certificate Validation</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222550">Application Security and
+  Development: V-222550</a> - The application must validate certificates by constructing a certification path to an accepted trust anchor. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S4830.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S4830.json
@@ -52,6 +52,9 @@
     "ASVS 4.0": [
       "1.9.2",
       "9.2.1"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222550"
     ]
   },
   "quickfix": "unknown"
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5332.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5332.html
@@ -632,21 +632,51 @@ <h2>Exceptions</h2>
   <li> Insecure protocol scheme followed by loopback addresses like 127.0.0.1 or <code>localhost</code>. </li>
 </ul>
 <h2>See</h2>
+<h3>Documentation</h3>
 <ul>
+  <li> AWS Documentation - <a href="https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-listeners.html">Listeners for
+  your Application Load Balancers</a> </li>
+  <li> AWS Documentation - <a
+  href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesis-stream-streamencryption.html">Stream Encryption</a>
+  </li>
+</ul>
+<h3>Articles &amp; blog posts</h3>
+<ul>
+  <li> Google - <a href="https://security.googleblog.com/2016/09/moving-towards-more-secure-web.html">Moving towards more secure web</a> </li>
+  <li> Mozilla - <a href="https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http/">Deprecating non secure http</a> </li>
+</ul>
+<h3>Standards</h3>
+<ul>
+  <li> OWASP - <a href="https://owasp.org/www-project-top-ten/2017/A3_2017-Sensitive_Data_Exposure">Top 10 2017 Category A3 - Sensitive Data
+  Exposure</a> </li>
   <li> OWASP - <a href="https://owasp.org/Top10/A02_2021-Cryptographic_Failures/">Top 10 2021 Category A2 - Cryptographic Failures</a> </li>
-  <li> OWASP - <a href="https://owasp.org/www-project-top-ten/2017/A3_2017-Sensitive_Data_Exposure">Top 10 2017 Category A3 - Sensitive Data Exposure
-  </a> </li>
   <li> OWASP - <a href="https://mobile-security.gitbook.io/masvs/security-requirements/0x10-v5-network_communication_requirements">Mobile AppSec
   Verification Standard - Network Communication Requirements</a> </li>
   <li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2016-risks/m3-insecure-communication">Mobile Top 10 2016 Category M3 - Insecure
   Communication</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/200">CWE-200 - Exposure of Sensitive Information to an Unauthorized Actor</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/319">CWE-319 - Cleartext Transmission of Sensitive Information</a> </li>
-  <li> <a href="https://security.googleblog.com/2016/09/moving-towards-more-secure-web.html">Google, Moving towards more secure web</a> </li>
-  <li> <a href="https://blog.mozilla.org/security/2015/04/30/deprecating-non-secure-http/">Mozilla, Deprecating non secure http</a> </li>
-  <li> <a href="https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-listeners.html">AWS Documentation</a> - Listeners
-  for your Application Load Balancers </li>
-  <li> <a href="https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-kinesis-stream-streamencryption.html">AWS
-  Documentation</a> - Stream Encryption </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222397">Application Security and
+  Development: V-222397</a> - The application must implement cryptographic mechanisms to protect the integrity of remote access sessions. </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222534">Application Security and
+  Development: V-222534</a> - Service-Oriented Applications handling non-releasable data must authenticate endpoint devices via mutual SSL/TLS. </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222562">Application Security and
+  Development: V-222562</a> - Applications used for non-local maintenance must implement cryptographic mechanisms to protect the integrity of
+  maintenance and diagnostic communications. </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222563">Application Security and
+  Development: V-222563</a> - Applications used for non-local maintenance must implement cryptographic mechanisms to protect the confidentiality of
+  maintenance and diagnostic communications. </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222577">Application Security and
+  Development: V-222577</a> - The application must not expose session IDs. </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222596">Application Security and
+  Development: V-222596</a> - The application must protect the confidentiality and integrity of transmitted information. </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222597">Application Security and
+  Development: V-222597</a> - The application must implement cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect
+  changes to information during transmission. </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222598">Application Security and
+  Development: V-222598</a> - The application must maintain the confidentiality and integrity of information during preparation for transmission.
+  </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222599">Application Security and
+  Development: V-222599</a> - The application must maintain the confidentiality and integrity of information during reception. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5332.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5332.json
@@ -44,6 +44,17 @@
       "1.9.1",
       "9.1.1",
       "9.2.2"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222397",
+      "V-222534",
+      "V-222562",
+      "V-222563",
+      "V-222577",
+      "V-222596",
+      "V-222597",
+      "V-222598",
+      "V-222599"
     ]
   }
 }
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5443.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5443.html
@@ -68,5 +68,7 @@ <h2>See</h2>
   </li>
   <li> <a href="https://owasp.org/www-community/vulnerabilities/Insecure_Temporary_File">OWASP, Insecure Temporary File</a> </li>
   <li> <a href="https://docs.python.org/3/library/tempfile.html">Python tempfile module</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222567">Application Security and
+  Development: V-222567</a> - The application must not be vulnerable to race conditions. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5443.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5443.json
@@ -32,6 +32,9 @@
     ],
     "PCI DSS 4.0": [
       "6.2.4"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222567"
     ]
   }
 }
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5445.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5445.html
@@ -75,5 +75,7 @@ <h3>Standards</h3>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/377">CWE-377 - Insecure Temporary File</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/379">CWE-379 - Creation of Temporary File in Directory with Incorrect Permissions</a>
   </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222567">Application Security and
+  Development: V-222567</a> - The application must not be vulnerable to race conditions. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5445.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5445.json
@@ -35,6 +35,9 @@
     ],
     "PCI DSS 4.0": [
       "6.2.4"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222567"
     ]
   },
   "quickfix": "unknown"
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5527.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5527.html
@@ -68,5 +68,7 @@ <h3>Standards</h3>
   <li> OWASP - <a href="https://owasp.org/www-project-mobile-top-10/2016-risks/m3-insecure-communication">Mobile Top 10 2016 Category M3 - Insecure
   Communication</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/297">CWE-297 - Improper Validation of Certificate with Host Mismatch</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222550">Application Security and
+  Development: V-222550</a> - The application must validate certificates by constructing a certification path to an accepted trust anchor. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5527.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5527.json
@@ -48,6 +48,9 @@
     "PCI DSS 4.0": [
       "4.2.1",
       "6.2.4"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222550"
     ]
   },
   "quickfix": "unknown"
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5547.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5547.html
@@ -139,5 +139,7 @@ <h3>Standards</h3>
   <li> OWASP - <a href="https://owasp.org/www-project-top-ten/2017/A6_2017-Security_Misconfiguration">Top 10 2017 Category A6 - Security
   Misconfiguration</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/327">CWE-327 - Use of a Broken or Risky Cryptographic Algorithm</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222396">Application Security and
+  Development: V-222396</a> - The application must implement DoD-approved encryption to protect the confidentiality of remote access sessions. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5547.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S5547.json
@@ -52,6 +52,9 @@
       "6.2.3",
       "6.2.5",
       "8.3.7"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222396"
     ]
   },
   "quickfix": "unknown"
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6270.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6270.html
@@ -44,5 +44,7 @@ <h2>See</h2>
   privilege </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/732">CWE-732 - Incorrect Permission Assignment for Critical Resource</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/284">CWE-284 - Improper Access Control</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222620">Application Security and
+  Development: V-222620</a> - Application web servers must be on a separate network segment from the application and database servers. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6270.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6270.json
@@ -30,6 +30,9 @@
     ],
     "PCI DSS 4.0": [
       "6.2.4"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222620"
     ]
   }
 }
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6281.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6281.html
@@ -78,6 +78,8 @@ <h2>See</h2>
   <li> <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-control-block-public-access.html">AWS Documentation</a> - Blocking public
   access to your Amazon S3 storage </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/284">CWE-284 - Improper Access Control</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222620">Application Security and
+  Development: V-222620</a> - Application web servers must be on a separate network segment from the application and database servers. </li>
   <li> <a href="https://docs.aws.amazon.com/cdk/api/v2/python/aws_cdk.aws_s3/Bucket.html">AWS CDK version 2</a> - Bucket </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6281.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6281.json
@@ -29,6 +29,9 @@
     ],
     "PCI DSS 4.0": [
       "6.2.4"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222620"
     ]
   }
 }
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6303.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6303.html
@@ -90,5 +90,8 @@ <h2>See</h2>
   <li> <a href="https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.Encryption.html">AWS Documentation</a> - Encrypting Amazon RDS
   resources </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/311">CWE-311 - Missing Encryption of Sensitive Data</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222588">Application Security and
+  Development: V-222588</a> - The application must implement approved cryptographic mechanisms to prevent unauthorized modification of information at
+  rest. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6303.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6303.json
@@ -31,6 +31,9 @@
     "PCI DSS 4.0": [
       "2.2",
       "6.2.4"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222588"
     ]
   }
 }
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6308.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6308.html
@@ -78,5 +78,8 @@ <h2>See</h2>
   <li> <a href="https://docs.aws.amazon.com/opensearch-service/latest/developerguide/encryption-at-rest.html">AWS Documentation</a> - Encryption of
   data at rest for Amazon OpenSearch Service </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/311">CWE-311 - Missing Encryption of Sensitive Data</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222588">Application Security and
+  Development: V-222588</a> - The application must implement approved cryptographic mechanisms to prevent unauthorized modification of information at
+  rest. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6308.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6308.json
@@ -31,6 +31,9 @@
     "PCI DSS 4.0": [
       "2.2",
       "6.2.4"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222588"
     ]
   }
 }
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6319.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6319.html
@@ -53,5 +53,8 @@ <h2>See</h2>
 <ul>
   <li> <a href="https://docs.aws.amazon.com/sagemaker/latest/dg/encryption-at-rest.html">Protect Data at Rest Using Encryption</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/311">CWE-311 - Missing Encryption of Sensitive Data</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222588">Application Security and
+  Development: V-222588</a> - The application must implement approved cryptographic mechanisms to prevent unauthorized modification of information at
+  rest. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6319.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6319.json
@@ -31,6 +31,9 @@
     "PCI DSS 4.0": [
       "2.2",
       "6.2.4"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222588"
     ]
   }
 }
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6327.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6327.html
@@ -79,5 +79,8 @@ <h2>See</h2>
   <li> <a href="https://aws.amazon.com/blogs/compute/encrypting-messages-published-to-amazon-sns-with-aws-kms/">Encrypting messages published to
   Amazon SNS with AWS KMS</a> </li>
   <li> CWE - <a href="https://cwe.mitre.org/data/definitions/311">CWE-311 - Missing Encryption of Sensitive Data</a> </li>
+  <li> STIG Viewer - <a href="https://stigviewer.com/stig/application_security_and_development/2023-06-08/finding/V-222588">Application Security and
+  Development: V-222588</a> - The application must implement approved cryptographic mechanisms to prevent unauthorized modification of information at
+  rest. </li>
 </ul>
 
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6327.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6327.json
@@ -33,6 +33,9 @@
       "2.2",
       "4.2.1",
       "6.2.4"
+    ],
+    "STIG ASD 2023-06-08": [
+      "V-222588"
     ]
   }
 }
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6329.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6329.html
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6329.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6329.json
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6330.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6330.html
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6330.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6330.json
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6333.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6333.html
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6333.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6333.json
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6709.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6709.html
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6709.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6709.json
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6779.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6779.html
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6781.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6781.html
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6785.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6785.html
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6785.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6785.json
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6925.json b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6925.json
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6971.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6971.html
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6973.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S6973.html
diff --git a/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S935.html b/python-checks/src/main/resources/org/sonar/l10n/py/rules/python/S935.html
diff --git a/sonarpedia.json b/sonarpedia.json

Original file line number	Diff line number	Diff line change
`@@ -44,6 +44,9 @@`
`44`	`44`	`"6.1.1",`
`45`	`45`	`"6.1.2",`
`46`	`46`	`"6.1.3"`
	`47`	`+ ],`
	`48`	`+ "STIG ASD 2023-06-08": [`
	`49`	`+ "V-222576"`
`47`	`50`	`]`
`48`	`51`	`}`
`49`	`52`	`}`
Original file line number	Diff line number	Diff line change
`@@ -39,6 +39,9 @@`
`39`	`39`	`],`
`40`	`40`	`"ASVS 4.0": [`
`41`	`41`	`"4.3.3"`
	`42`	`+ ],`
	`43`	`+ "STIG ASD 2023-06-08": [`
	`44`	`+ "V-222430"`
`42`	`45`	`]`
`43`	`46`	`}`
`44`	`47`	`}`