CycodeLabs / raven

CI/CD Security Analyzer
Apache License 2.0
624 stars 33 forks source link

Add next steps to the query library #103

Open elad-pticha opened 1 year ago

elad-pticha commented 1 year ago

After finding a vulnerable workflow, each query should have a follow-up action to mitigate the risk.

For example, After finding a workflow that is vulnerable to issue title injection, we would like to give next steps for users of how they can mitigate the risk.

This can be done by adding another property to each query called: fix (could be something else) that will contain a short explanation about the mitigation process.