Skip to content

Commit 486f80d

Browse files
authored
Update 8-cicd.livemd
Sobelow example for review
1 parent 1e0425d commit 486f80d

File tree

1 file changed

+1
-0
lines changed

1 file changed

+1
-0
lines changed

modules/8-cicd.livemd

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -42,6 +42,7 @@ For instance, there are a number of security issues published on the Common Weak
4242

4343
Scanning tools like Sobelow map code patterns that may contain weakness that match these issues and report them back to developers/users.
4444

45+
### <span style="color:blue;">Example</span>
4546
Let's say you are interested in Injection Vulnerabilities. There are several types of injection. Referring to the CWE list, we see that #17 CWE-77 is for Command Injection, #25 CWE-94 is Code Injection, and #3 CWE-89 is SQL Injection. If we look at the Owasp Top 10 for 2021, A03:2021-Injection is third on the list. Sobelow has the capability to detect these types of attacks.
4647

4748
Injection issues are places in an application where a malicious actor can send commands, queries, that get processed as authorized code, to trigger the application into performing an unauthorized action.

0 commit comments

Comments
 (0)