Skip to content

Commit 5028fcc

Browse files
committed
Create new CWE coverage overview and full CWE coverage page
1 parent 618e8b3 commit 5028fcc

File tree

2 files changed

+26
-9
lines changed

2 files changed

+26
-9
lines changed
Lines changed: 8 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,8 @@
1+
# CodeQL full CWE coverage
2+
3+
An overview of the full coverage of MITRE's Common Weakness Enumeration (CWE) for the latest release of CodeQL.
4+
5+
## Overview
6+
7+
<!-- autogenerated CWE coverage table will be added below -->
8+
Lines changed: 18 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -1,8 +1,10 @@
1-
# CodeQL CWE coverage
1+
CodeQL CWE coverage
2+
===================
23

3-
An overview of the coverage of MITRE's Common Weakness Enumeration (CWE) for the latest release of CodeQL.
4+
You can view the full coverage of MITRE's Common Weakness Enumeration (CWE) or coverage by language for the latest release of CodeQL.
45

5-
## About CWEs
6+
About CWEs
7+
##########
68

79
The CWE categorization contains several types of entity, collectively known as CWEs. The CWEs that we consider in this report are only those of the types:
810

@@ -11,15 +13,22 @@ The CWE categorization contains several types of entity, collectively known as C
1113
- Weakness Variant
1214
- Compound Element
1315

14-
Other types of CWE do not correspond directly to weaknesses, so are omitted.
16+
Other types of CWE that do not correspond directly to weaknesses are omitted.
1517

1618
The CWE categorization includes relationships between entities, in particular a parent-child relationship.
17-
These relationships are associated with Views (another kind of CWE entity). For the purposes of coverage claims, we use the "[Research View](https://cwe.mitre.org/data/definitions/1000.html)."
19+
These relationships are associated with Views (another kind of CWE entity). For the purposes of coverage claims, we use the "`Research View <https://cwe.mitre.org/data/definitions/1000.html>`_."
1820

1921
Every security query is associated with one or more CWEs, which are the most precise CWEs that are covered by that query.
2022
Overall coverage is claimed for the most-precise CWEs, as well as for any of their ancestors in the View.
2123

22-
## Overview
23-
24-
<!-- autogenerated CWE coverage table will be added below -->
25-
24+
.. toctree::
25+
:hidden:
26+
:titlesonly:
27+
28+
codeql-cwe-coverage-full
29+
cpp-cwe
30+
csharp-cwe
31+
go-cwe
32+
java-cwe
33+
javascript-cwe
34+
python-cwe

0 commit comments

Comments
 (0)