Closed ejaronne closed 3 years ago
For Sonarqube and unmapped CWE at https://github.com/mitre/heimdall_tools/blob/master/lib/data/cwe-nist-mapping.csv,
use SA-11+ RA-5 as the general association
If the mapping does not exist, make the default [SA-11, RA-5]
[SA-11, RA-5]
For Sonarqube and unmapped CWE at https://github.com/mitre/heimdall_tools/blob/master/lib/data/cwe-nist-mapping.csv,
use SA-11+ RA-5 as the general association