...
The CWE Compliance artifact supports the following specific CWE implementations:
- 2023 CWE Top 25 Most Dangerous Software Errors (C++test only)
- 2024 CWE Top 25 Most Dangerous Software Errors (Jtest and dotTEST only)
- CWE List Version 4.17 18 (Jtest and dotTEST only)
- CWE Top 25 + On the Cusp
...
Configurations for C/C++test:
- CWE Top 25 + On the Cusp 20232024
- CWE Top 25 20232024
Configurations for dotTEST:
- CWE Top 25 + On the Cusp 2024
- CWE Top 25 2024
- CWE 4.1718
Configuration for Jtest:
- CWE Top 25 + On the Cusp 2024
- CWE Top 25 2024
- CWE 4.1718
The Security Compliance pack ships with the following additional configuration for CWE and OWASP compliance.
...
Dashboards for C and C++ code:
- CWE Top 25 2023 2024 - C/C++
- CWE Top 25 2023 2024 + On the Cusp - C/C++
Dashboards for .NET code:
- CWE 4.17 18 - .NET
- CWE Top 25 2024 - .NET
- CWE Top 25 2024 + On the Cusp - .NET
Dashboards for Java code:
- CWE 4.17 18 - Java
- CWE Top 25 2024 - Java
- CWE Top 25 2024 + On the Cusp - Java
...
Profiles for .NET code:
- CWE 4.17 18 - .NET profile
- CWE Security Impact - .NET profile
- CWE Top 25 - .NET profile
- CWE Top 25 + Cusp - .NET
Profiles for Java code:
- CWE 4.17 18 - Java profile
- CWE Security Impact - Java profile
- CWE Top 25 - Java profile
- CWE Top 25 + Cusp - Java
...
Categories for .NET code:
- CWE 4.17 18 - .NET
- CWE 4.1718- Software Development - .NET
- CWE 4.17 18 - Technical Impact - .NET
- CWE Top 25 - .NET
- CWE Top 25 - Software Development - .NET
- CWE Top 25 - Technical Impact - .NET
- CWE Top 25 + Cusp - .NET
- CWE Top 25 + Cusp - Technical Impact - .NET
- CWE Top 25 + Cusp - Software Development - .NET
Categories for Java code:
- CWE 4.17 18 - Java
- CWE 4.17 18 - Software Development - Java
- CWE 4.17 18 - Technical Impact - Java
- CWE Top 25 - Java
- CWE Top 25 - Software Development - Java
- CWE Top 25 - Technical Impact - Java
- CWE Top 25 + Cusp - Java
- CWE Top 25 + Cusp - Technical Impact - Java
- CWE Top 25 + Cusp - Software Development - Java
...
| Title | You can rename the widget in the Title field. | ||||||
|---|---|---|---|---|---|---|---|
| Filter | Choose a specific filter or Dashboard Settings from the menu. See Configuring Filters for additional information. The filter should contain data that matches the type of compliance profile you choose (Java, .NET, C++). Forexample, if the filter contains code analysis data on a .NET project, then you should choose one of the .NET compliance profiles. | ||||||
| Target Build | Choose a specific build from the menu. The build selected for the entire dashboard is selected by default. See Using Build Administration for additional information about understanding builds. This setting is available for all widgets. | ||||||
Compliance Profile
| Choose a compliance profile from the menu to display the code analysis data against one of the supported CWE-specific sets of guidelines. You can choose one of the following profiles:
The type of compliance profile (Java, .NET, C++) should match the data in the selected filter. Forexample, choose one of the .NET compliance profiles if the filter contains code analysis data on a .NET project. |
...