OWASP / www-project-developer-guide

OWASP Project Developer Guide - Document and Project Web pages
https://owasp.org/www-project-developer-guide/
Creative Commons Attribution Share Alike 4.0 International
75 stars 17 forks source link

Provide cross references to cornucopia #231

Open jgadsden opened 2 months ago

jgadsden commented 2 months ago

Describe what content should be added :
It would be good to link across to the cornucopia cards from the checklist The first step to cross referencing to cornucopia is provide identifiers to the checklist (done in #225 ) then the checklists can link across to the cornucopia cards API

Context :
Section: 06-design/02-web-app-checklist/

From @sydseter 's comment in Threat dragon issue #140 'Integrate threat engine with Cornucopia / EoP cards', we have : Full yaml source can be found at https://github.com/OWASP/cornucopia/tree/master/source We also have endpoints to the OWASP Cornucopia Website App and Mobile App editions.

OWASP Cornucopia Website App Edition:

https://copi.securedelivery.io/cards/2.00/DV2 https://copi.securedelivery.io/cards/2.00/AC2 https://copi.securedelivery.io/cards/2.00/SM2 https://copi.securedelivery.io/cards/2.00/AZ2 https://copi.securedelivery.io/cards/2.00/CR2 https://copi.securedelivery.io/cards/2.00/CO2

OWASP Cornucopia Mobile App Edition:

https://copi.securedelivery.io/cards/1.00/CO2 https://copi.securedelivery.io/cards/1.00/PC2 https://copi.securedelivery.io/cards/1.00/AA2 https://copi.securedelivery.io/cards/1.00/NS2 https://copi.securedelivery.io/cards/1.00/RS2 https://copi.securedelivery.io/cards/1.00/CRM2 https://copi.securedelivery.io/cards/1.00/COM2

sydseter commented 2 months ago

A couple of things to keep in mind there is that we are changing the card code from DV to VE and from AC to AT since all the documentation we have are pointing towards using these. DV and AC was added by mistake by me.

sydseter commented 2 months ago

We are still working on getting a MVP of our website up. So the first we will do as soon as that is up is to link to the Developer guide from there.

the domain will be cornucopia.owasp.org and the path the same as the one above minus the version number except for the changes to card codes which was mentioned earlier.

jgadsden commented 2 months ago

OK, thanks @sydseter , there is a lot for me to do before we start linking across so you have plenty of time