mitre / heimdall_tools

DEPRECATED: A set of utilities for converting and working with compliance data for viewing in the heimdall applications
https://heimdall-tools.mitre.org
Other
35 stars 20 forks source link

Use SA-11, RA-5 for unmapped #24

Closed ejaronne closed 3 years ago

ejaronne commented 4 years ago

For Sonarqube and unmapped CWE at https://github.com/mitre/heimdall_tools/blob/master/lib/data/cwe-nist-mapping.csv,

use SA-11+ RA-5 as the general association

Bialogs commented 4 years ago

If the mapping does not exist, make the default [SA-11, RA-5]