Merge branch 'master' into AST-45283-cloudFormation

Checkmarx · Sep 18, 2024 · c2c50a1 · c2c50a1
2 parents 486e5c0 + e13e117
commit c2c50a1
Show file tree

Hide file tree

Showing 912 changed files with 1,201 additions and 1,032 deletions.
diff --git a/assets/queries/openAPI/2.0/basepath_with_wrong_format/metadata.json b/assets/queries/openAPI/2.0/basepath_with_wrong_format/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#schema",
   "platform": "OpenAPI",
   "descriptionID": "c97fafa0",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/body_parameter_with_wrong_property/metadata.json b/assets/queries/openAPI/2.0/body_parameter_with_wrong_property/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#parameterObject",
   "platform": "OpenAPI",
   "descriptionID": "93b15115",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/body_parameter_without_schema/metadata.json b/assets/queries/openAPI/2.0/body_parameter_without_schema/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#parameterObject",
   "platform": "OpenAPI",
   "descriptionID": "3074f818",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/constraining_enum_property/metadata.json b/assets/queries/openAPI/2.0/constraining_enum_property/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#schemaObject",
   "platform": "OpenAPI",
   "descriptionID": "63cd2785",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/file_parameter_with_wrong_consumes_property/metadata.json b/assets/queries/openAPI/2.0/file_parameter_with_wrong_consumes_property/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#operation-object",
   "platform": "OpenAPI",
   "descriptionID": "f6b7b31a",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/global_schemes_uses_http/metadata.json b/assets/queries/openAPI/2.0/global_schemes_uses_http/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#swaggerObject",
   "platform": "OpenAPI",
   "descriptionID": "11bb39ad",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "319"
 }
diff --git a/assets/queries/openAPI/2.0/global_security_using_password_flow/metadata.json b/assets/queries/openAPI/2.0/global_security_using_password_flow/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#securityRequirementObject",
   "platform": "OpenAPI",
   "descriptionID": "14a00e4a",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "285"
 }
diff --git a/assets/queries/openAPI/2.0/host_with_invalid_pattern/metadata.json b/assets/queries/openAPI/2.0/host_with_invalid_pattern/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#swagger-object",
   "platform": "OpenAPI",
   "descriptionID": "d11c994c",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/implicit_flow_oauth2/metadata.json b/assets/queries/openAPI/2.0/implicit_flow_oauth2/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#securitySchemeObject",
   "platform": "OpenAPI",
   "descriptionID": "a879610a",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "285"
 }
diff --git a/assets/queries/openAPI/2.0/invalid_media_type_value/metadata.json b/assets/queries/openAPI/2.0/invalid_media_type_value/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/#media-type-object",
   "platform": "OpenAPI",
   "descriptionID": "bde04b9d",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "710"
 }
diff --git a/assets/queries/openAPI/2.0/invalid_oauth2_token_url/metadata.json b/assets/queries/openAPI/2.0/invalid_oauth2_token_url/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#security-scheme-object",
   "platform": "OpenAPI",
   "descriptionID": "d6163b1e",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "284"
 }
diff --git a/assets/queries/openAPI/2.0/invalid_oauth_authorization_url/metadata.json b/assets/queries/openAPI/2.0/invalid_oauth_authorization_url/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#securitySchemeObject",
   "platform": "OpenAPI",
   "descriptionID": "720629e5",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "285"
 }
diff --git a/assets/queries/openAPI/2.0/json_reference_does_not_exists_parameter/metadata.json b/assets/queries/openAPI/2.0/json_reference_does_not_exists_parameter/metadata.json
@@ -1,11 +1,12 @@
 {
   "id": "fb889ae9-2d16-40b5-b41f-9da716c5abc1",
-  "queryName": "Parameter JSON Reference Does Not Exists (v2)",
+  "queryName": "Parameter JSON Reference Does Not Exist (v2)",
   "severity": "INFO",
   "category": "Structure and Semantics",
   "descriptionText": "Parameter reference should exist on parameters definition field",
   "descriptionUrl": "https://swagger.io/specification/v2/#parameterObject",
   "platform": "OpenAPI",
   "descriptionID": "7260680f",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/...s/openAPI/2.0/json_reference_does_not_exists_parameter/test/positive_expected_result.json b/...s/openAPI/2.0/json_reference_does_not_exists_parameter/test/positive_expected_result.json
@@ -1,12 +1,12 @@
 [
   {
-    "queryName": "Parameter JSON Reference Does Not Exists (v2)",
+    "queryName": "Parameter JSON Reference Does Not Exist (v2)",
     "severity": "INFO",
     "line": 19,
     "filename": "positive1.json"
   },
   {
-    "queryName": "Parameter JSON Reference Does Not Exists (v2)",
+    "queryName": "Parameter JSON Reference Does Not Exist (v2)",
     "severity": "INFO",
     "line": 14,
     "filename": "positive2.yaml"

diff --git a/assets/queries/openAPI/2.0/json_reference_does_not_exists_response/metadata.json b/assets/queries/openAPI/2.0/json_reference_does_not_exists_response/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#responsesDefinitionsObject",
   "platform": "OpenAPI",
   "descriptionID": "213a6df0",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/json_reference_does_not_exists_schema/metadata.json b/assets/queries/openAPI/2.0/json_reference_does_not_exists_schema/metadata.json
@@ -1,11 +1,12 @@
 {
   "id": "98295b32-ec09-4b5b-89a9-39853197f914",
-  "queryName": "Schema JSON Reference Does Not Exists (v2)",
+  "queryName": "Schema JSON Reference Does Not Exist (v2)",
   "severity": "INFO",
   "category": "Structure and Semantics",
-  "descriptionText": "Schema reference should exists on definitions field",
+  "descriptionText": "Schema reference should exist on definitions field",
   "descriptionUrl": "https://swagger.io/specification/v2/#definitionsObject",
   "platform": "OpenAPI",
   "descriptionID": "6da8f0da",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/...ries/openAPI/2.0/json_reference_does_not_exists_schema/test/positive_expected_result.json b/...ries/openAPI/2.0/json_reference_does_not_exists_schema/test/positive_expected_result.json
@@ -1,12 +1,12 @@
 [
   {
-    "queryName": "Schema JSON Reference Does Not Exists (v2)",
+    "queryName": "Schema JSON Reference Does Not Exist (v2)",
     "severity": "INFO",
     "line": 15,
     "filename": "positive1.json"
   },
   {
-    "queryName": "Schema JSON Reference Does Not Exists (v2)",
+    "queryName": "Schema JSON Reference Does Not Exist (v2)",
     "severity": "INFO",
     "line": 14,
     "filename": "positive2.yaml"

diff --git a/assets/queries/openAPI/2.0/multi_body_parameters_same_operation/metadata.json b/assets/queries/openAPI/2.0/multi_body_parameters_same_operation/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#parameterObject",
   "platform": "OpenAPI",
   "descriptionID": "817fa38a",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/multi_collectionformat_not_valid_in_parameter/metadata.json b/assets/queries/openAPI/2.0/multi_collectionformat_not_valid_in_parameter/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#parameterObject",
   "platform": "OpenAPI",
   "descriptionID": "e0b264a9",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/non_body_parameter_with_schema/metadata.json b/assets/queries/openAPI/2.0/non_body_parameter_with_schema/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#parameterObject",
   "platform": "OpenAPI",
   "descriptionID": "e135be5b",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/.../queries/openAPI/2.0/non_oauth2_security_requirement_defining_oauth2_scopes/metadata.json b/.../queries/openAPI/2.0/non_oauth2_security_requirement_defining_oauth2_scopes/metadata.json
@@ -7,6 +7,7 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#securityRequirementObject",
   "platform": "OpenAPI",
   "descriptionID": "33e1e674",
-  "cwe": "",
+  "cloudProvider": "common",
+  "cwe": "20",
   "oldSeverity": "HIGH"
 }
diff --git a/assets/queries/openAPI/2.0/object_without_required_property/metadata.json b/assets/queries/openAPI/2.0/object_without_required_property/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/",
   "platform": "OpenAPI",
   "descriptionID": "0bc1b81e",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/operation_example_mismatch_produces_mediatype/metadata.json b/assets/queries/openAPI/2.0/operation_example_mismatch_produces_mediatype/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#exampleObject",
   "platform": "OpenAPI",
   "descriptionID": "77f2d405",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/...ts/queries/openAPI/2.0/operation_object_parameters_with_body_and_formatdata/metadata.json b/...ts/queries/openAPI/2.0/operation_object_parameters_with_body_and_formatdata/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#parameterObject",
   "platform": "OpenAPI",
   "descriptionID": "007c8e83",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/operation_object_without_consumes/metadata.json b/assets/queries/openAPI/2.0/operation_object_without_consumes/metadata.json
@@ -3,9 +3,10 @@
   "queryName": "Operation Object Without 'consumes'",
   "severity": "MEDIUM",
   "category": "Insecure Configurations",
-  "descriptionText": "Operation Object should have 'consumes' feild defined for 'POST', 'PUT' and 'PATCH' operations",
+  "descriptionText": "Operation Object should have 'consumes' field defined for 'POST', 'PUT' and 'PATCH' operations",
   "descriptionUrl": "https://swagger.io/specification/v2/#operation-object",
   "platform": "OpenAPI",
   "descriptionID": "de859594",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "710"
 }
diff --git a/assets/queries/openAPI/2.0/operation_object_without_produces/metadata.json b/assets/queries/openAPI/2.0/operation_object_without_produces/metadata.json
@@ -3,9 +3,10 @@
   "queryName": "Operation Object Without 'produces'",
   "severity": "MEDIUM",
   "category": "Insecure Configurations",
-  "descriptionText": "Operation Object should have 'produces' feild defined for 'GET'operation",
+  "descriptionText": "Operation Object should have 'produces' field defined for 'GET'operation",
   "descriptionUrl": "https://swagger.io/specification/v2/#operation-object",
   "platform": "OpenAPI",
   "descriptionID": "1736226c",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "665"
 }
diff --git a/assets/queries/openAPI/2.0/operation_summary_too_long/metadata.json b/assets/queries/openAPI/2.0/operation_summary_too_long/metadata.json
@@ -7,6 +7,7 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#operation-object",
   "platform": "OpenAPI",
   "descriptionID": "60a0b99e",
-  "cwe": "",
+  "cloudProvider": "common",
+  "cwe": "710",
   "oldSeverity": "LOW"
 }
diff --git a/assets/queries/openAPI/2.0/operation_using_basic_auth/metadata.json b/assets/queries/openAPI/2.0/operation_using_basic_auth/metadata.json
@@ -7,6 +7,7 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#operation-object",
   "platform": "OpenAPI",
   "descriptionID": "bb3bb0b3",
-  "cwe": "",
+  "cloudProvider": "common",
+  "cwe": "284",
   "oldSeverity": "LOW"
 }
diff --git a/assets/queries/openAPI/2.0/operation_using_implicit_flow/metadata.json b/assets/queries/openAPI/2.0/operation_using_implicit_flow/metadata.json
@@ -7,6 +7,7 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#operation-object",
   "platform": "OpenAPI",
   "descriptionID": "5f7dafc1",
-  "cwe": "",
+  "cloudProvider": "common",
+  "cwe": "284",
   "oldSeverity": "LOW"
 }
diff --git a/assets/queries/openAPI/2.0/operation_using_password_flow/metadata.json b/assets/queries/openAPI/2.0/operation_using_password_flow/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#operation-object",
   "platform": "OpenAPI",
   "descriptionID": "e0279bb3",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "798"
 }
diff --git a/assets/queries/openAPI/2.0/parameter_file_type_not_in_formdata/metadata.json b/assets/queries/openAPI/2.0/parameter_file_type_not_in_formdata/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#parameterObject",
   "platform": "OpenAPI",
   "descriptionID": "e8a62738",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/parameter_object_incorrect_ref/metadata.json b/assets/queries/openAPI/2.0/parameter_object_incorrect_ref/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#parameter-object",
   "platform": "OpenAPI",
   "descriptionID": "9b33f092",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/path_scheme_accepts_http/metadata.json b/assets/queries/openAPI/2.0/path_scheme_accepts_http/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#operationObject",
   "platform": "OpenAPI",
   "descriptionID": "4ac6f671",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "319"
 }
diff --git a/assets/queries/openAPI/2.0/property_not_unique/metadata.json b/assets/queries/openAPI/2.0/property_not_unique/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#schemaObject",
   "platform": "OpenAPI",
   "descriptionID": "eb2e14e6",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/response_object_incorrect_ref/metadata.json b/assets/queries/openAPI/2.0/response_object_incorrect_ref/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#responses-object",
   "platform": "OpenAPI",
   "descriptionID": "7a486064",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/schema_object_incorrect_ref/metadata.json b/assets/queries/openAPI/2.0/schema_object_incorrect_ref/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#schema-object",
   "platform": "OpenAPI",
   "descriptionID": "8389f514",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "20"
 }
diff --git a/assets/queries/openAPI/2.0/schema_with_additional_properties_set_as_boolean/metadata.json b/assets/queries/openAPI/2.0/schema_with_additional_properties_set_as_boolean/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#schema-object",
   "platform": "OpenAPI",
   "descriptionID": "2509db0d",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "710"
 }
diff --git a/assets/queries/openAPI/2.0/schemes_uses_http copy/metadata.json b/assets/queries/openAPI/2.0/schemes_uses_http copy/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#swaggerObject",
   "platform": "OpenAPI",
   "descriptionID": "34948b49",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "319"
 }
diff --git a/assets/queries/openAPI/2.0/security_definitions_allows_password_flow/metadata.json b/assets/queries/openAPI/2.0/security_definitions_allows_password_flow/metadata.json
@@ -7,5 +7,6 @@
   "descriptionUrl": "https://swagger.io/specification/v2/#securitySchemeObject",
   "platform": "OpenAPI",
   "descriptionID": "7b681b12",
-  "cwe": ""
+  "cloudProvider": "common",
+  "cwe": "285"
 }