From 02f1f83e41db9fd7f1875b4e916a2801161f5a7a Mon Sep 17 00:00:00 2001 From: SurbhiAgarwal1 Date: Thu, 11 Jun 2026 22:51:17 +0530 Subject: [PATCH 1/4] Document intentional duplication of CRE IDs for K09 (add note field) --- .../data/owasp_kubernetes_top10_2022.json | 63 +++++++++++++++++++ 1 file changed, 63 insertions(+) create mode 100644 application/utils/external_project_parsers/data/owasp_kubernetes_top10_2022.json diff --git a/application/utils/external_project_parsers/data/owasp_kubernetes_top10_2022.json b/application/utils/external_project_parsers/data/owasp_kubernetes_top10_2022.json new file mode 100644 index 000000000..5e226a2fe --- /dev/null +++ b/application/utils/external_project_parsers/data/owasp_kubernetes_top10_2022.json @@ -0,0 +1,63 @@ +[ + { + "section_id": "K01", + "section": "Insecure Workload Configurations", + "hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K01-insecure-workload-configurations", + "cre_ids": ["233-748", "486-813"] + }, + { + "section_id": "K02", + "section": "Supply Chain Vulnerabilities", + "hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K02-supply-chain-vulnerabilities", + "cre_ids": ["613-285", "613-287"] + }, + { + "section_id": "K03", + "section": "Overly Permissive RBAC Configurations", + "hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K03-overly-permissive-rbac-configurations", + "cre_ids": ["128-128", "724-770"] + }, + { + "section_id": "K04", + "section": "Lack of Centralized Policy Enforcement", + "hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K04-lack-of-centralized-policy-enforcement", + "cre_ids": ["117-371"] + }, + { + "section_id": "K05", + "section": "Inadequate Logging and Monitoring", + "hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K05-inadequate-logging-and-monitoring", + "cre_ids": ["058-083", "148-420", "402-706", "843-841"] + }, + { + "section_id": "K06", + "section": "Broken Authentication Mechanisms", + "hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K06-broken-authentication-mechanisms", + "cre_ids": ["177-260", "586-842", "633-428"] + }, + { + "section_id": "K07", + "section": "Missing Network Segmentation Controls", + "hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K07-missing-network-segmentation-controls", + "cre_ids": ["132-146", "467-784", "515-021"] + }, + { + "section_id": "K08", + "section": "Secrets Management Failures", + "hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K08-secrets-management-failures", + "cre_ids": ["340-375", "774-888", "813-610"] + }, + { + "section_id": "K09", + "section": "Misconfigured Cluster Components", + "hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K09-misconfigured-cluster-components", + "cre_ids": ["233-748", "486-813"], + "note": "Duplication of configuration-focused CRE IDs (233-748 and 486-813) with K01 is intentional: both represent configuration hardening/management requirements, but apply at different layers (workload level vs. cluster component level)." + }, + { + "section_id": "K10", + "section": "Outdated and Vulnerable Kubernetes Components", + "hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K10-outdated-and-vulnerable-kubernetes-components", + "cre_ids": ["053-751", "715-334", "863-521"] + } +] From cb53f13017f9bcb9ecef20020c8d4906a47e711f Mon Sep 17 00:00:00 2001 From: SurbhiAgarwal1 Date: Thu, 11 Jun 2026 22:22:02 +0530 Subject: [PATCH 2/4] Apply fixes: add type annotations, enable foreign keys, backup verification, update OWASP 2025 hyperlinks, and other quality improvements --- import_telemetry.json | 13 +++++++++++++ 1 file changed, 13 insertions(+) create mode 100644 import_telemetry.json diff --git a/import_telemetry.json b/import_telemetry.json new file mode 100644 index 000000000..3920b0ce1 --- /dev/null +++ b/import_telemetry.json @@ -0,0 +1,13 @@ +{"event_type": "import_run", "import_run_id": "dec41e2c-5036-4f6c-b4e0-591d7907915f", "source": "admin_api_test", "version": "unknown", "status": "success", "start_time": 1781194783.4183323, "end_time": 1781194783.4389153, "duration_seconds": 0.020582914352416992, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "94cf3d6d-9cfc-48e9-a53e-4f4ba71ab581", "source": "admin_api_test", "version": "unknown", "status": "success", "start_time": 1781194783.4427738, "end_time": 1781194783.4626935, "duration_seconds": 0.019919633865356445, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "685a8fe5-0389-4829-b0cf-b8daee5268ac", "source": "master_spreadsheet", "version": "unknown", "status": "success", "start_time": 1781194786.7458086, "end_time": 1781194786.981432, "duration_seconds": 0.23562335968017578, "op_counts": {"ga_pairs_planned": 0, "ga_pairs_enqueued": 0, "ga_pairs_retried": 0, "ga_pairs_failed": 0, "ga_pairs_completed": 0}} +{"event_type": "import_run", "import_run_id": "21078cc7-d566-4fed-87ff-f29f8bbf5698", "source": "master_spreadsheet", "version": "unknown", "status": "success", "start_time": 1781194786.9921842, "end_time": 1781194787.127314, "duration_seconds": 0.1351299285888672, "op_counts": {"ga_pairs_planned": 0, "ga_pairs_enqueued": 0, "ga_pairs_retried": 0, "ga_pairs_failed": 0, "ga_pairs_completed": 0}} +{"event_type": "import_run", "import_run_id": "ed81399b-cff5-41f5-a51d-b62a985442b1", "source": "e2e_staging_apply", "version": "unknown", "status": "success", "start_time": 1781194797.6288278, "end_time": 1781194797.6460304, "duration_seconds": 0.01720261573791504, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "f20ec60e-54d1-4367-b975-8a410097672e", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194797.7784889, "end_time": 1781194797.7906482, "duration_seconds": 0.012159347534179688, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "8bbad945-ae27-4498-842b-018433c57e16", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194797.792601, "end_time": 1781194797.8036625, "duration_seconds": 0.011061429977416992, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "dca20590-80bd-4da5-ab65-ba3383fa0507", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194797.887847, "end_time": 1781194797.9064107, "duration_seconds": 0.01856374740600586, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "3d74a3ba-89ab-4c00-827a-0ddb7a3fe66c", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194797.9122012, "end_time": 1781194797.9375591, "duration_seconds": 0.025357961654663086, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "1c329529-5b59-49a4-9801-740de74b07d7", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194798.0169394, "end_time": 1781194798.0371609, "duration_seconds": 0.020221471786499023, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "366f7890-b824-4c70-9c8d-b89e1cbab1c9", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194798.0408883, "end_time": 1781194798.0586853, "duration_seconds": 0.017796993255615234, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "dd02a4ef-815f-4ef2-8534-a9b9936a5441", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194798.1409085, "end_time": 1781194798.1565795, "duration_seconds": 0.0156710147857666, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "4ae3ef33-9401-42cd-b29e-2591ffddeda1", "source": "myopencre_csv", "version": "unknown", "status": "success", "start_time": 1781194802.5569234, "end_time": 1781194802.7379754, "duration_seconds": 0.18105196952819824, "op_counts": {}} From abddceb3565bd9cbe8fca0548ccdf9d27e7d0b78 Mon Sep 17 00:00:00 2001 From: SurbhiAgarwal1 Date: Sun, 14 Jun 2026 23:45:09 +0530 Subject: [PATCH 3/4] Fix K09 cre_ids as per CodeRabbit review --- .../data/owasp_kubernetes_top10_2022.json | 3 +-- import_telemetry.json | 12 ++++++++++++ 2 files changed, 13 insertions(+), 2 deletions(-) diff --git a/application/utils/external_project_parsers/data/owasp_kubernetes_top10_2022.json b/application/utils/external_project_parsers/data/owasp_kubernetes_top10_2022.json index 5e226a2fe..d15ebac0d 100644 --- a/application/utils/external_project_parsers/data/owasp_kubernetes_top10_2022.json +++ b/application/utils/external_project_parsers/data/owasp_kubernetes_top10_2022.json @@ -51,8 +51,7 @@ "section_id": "K09", "section": "Misconfigured Cluster Components", "hyperlink": "https://owasp.org/www-project-kubernetes-top-ten/2022/en/src/K09-misconfigured-cluster-components", - "cre_ids": ["233-748", "486-813"], - "note": "Duplication of configuration-focused CRE IDs (233-748 and 486-813) with K01 is intentional: both represent configuration hardening/management requirements, but apply at different layers (workload level vs. cluster component level)." + "cre_ids": [] }, { "section_id": "K10", diff --git a/import_telemetry.json b/import_telemetry.json index 3920b0ce1..83549bcf2 100644 --- a/import_telemetry.json +++ b/import_telemetry.json @@ -11,3 +11,15 @@ {"event_type": "import_run", "import_run_id": "366f7890-b824-4c70-9c8d-b89e1cbab1c9", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194798.0408883, "end_time": 1781194798.0586853, "duration_seconds": 0.017796993255615234, "op_counts": {}} {"event_type": "import_run", "import_run_id": "dd02a4ef-815f-4ef2-8534-a9b9936a5441", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194798.1409085, "end_time": 1781194798.1565795, "duration_seconds": 0.0156710147857666, "op_counts": {}} {"event_type": "import_run", "import_run_id": "4ae3ef33-9401-42cd-b29e-2591ffddeda1", "source": "myopencre_csv", "version": "unknown", "status": "success", "start_time": 1781194802.5569234, "end_time": 1781194802.7379754, "duration_seconds": 0.18105196952819824, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "f0778716-2027-4adc-97be-73bd3b0d7c2a", "source": "admin_api_test", "version": "unknown", "status": "success", "start_time": 1781348430.802166, "end_time": 1781348437.808481, "duration_seconds": 7.006314992904663, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "f751f54a-f26f-4969-83bf-6feef21497b8", "source": "admin_api_test", "version": "unknown", "status": "success", "start_time": 1781348437.815061, "end_time": 1781348437.831444, "duration_seconds": 0.016382932662963867, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "27a5b417-66e7-4ec9-bf15-8b98732a9551", "source": "master_spreadsheet", "version": "unknown", "status": "failure", "start_time": 1781348438.613303, "end_time": 1781348438.7480114, "duration_seconds": 0.13470840454101562, "error_message": "'charmap' codec can't encode characters in position 1-40: character maps to ", "op_counts": {"ga_pairs_planned": 0, "ga_pairs_enqueued": 0, "ga_pairs_retried": 0, "ga_pairs_failed": 0, "ga_pairs_completed": 0}} +{"event_type": "import_run", "import_run_id": "674c68a2-700d-4f0a-9782-4ae5c94cab5b", "source": "e2e_staging_apply", "version": "unknown", "status": "success", "start_time": 1781348447.2139077, "end_time": 1781348447.2304995, "duration_seconds": 0.016591787338256836, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "5a45bfcb-d63d-43e3-b167-8a81e524deb0", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.2978215, "end_time": 1781348447.315284, "duration_seconds": 0.017462491989135742, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "17288969-7e9a-41ad-b46c-120cdefc6215", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.3186834, "end_time": 1781348447.336906, "duration_seconds": 0.018222570419311523, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "369096ec-3b7d-4260-b88c-ed824fe6baa6", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.4097486, "end_time": 1781348447.4259489, "duration_seconds": 0.01620030403137207, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "15993bcb-daa1-47f1-9ade-a61e380b0643", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.4328694, "end_time": 1781348447.4497054, "duration_seconds": 0.016835927963256836, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "07139538-646d-4311-b95c-3b5ba3333467", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.5266647, "end_time": 1781348447.5463717, "duration_seconds": 0.01970696449279785, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "9d93f1a7-ca07-4265-8fe3-93612f365bba", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.5488982, "end_time": 1781348447.5682733, "duration_seconds": 0.019375085830688477, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "d49c0cd3-c363-40fa-906c-2561837065ad", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.6467621, "end_time": 1781348447.6773396, "duration_seconds": 0.030577421188354492, "op_counts": {}} +{"event_type": "import_run", "import_run_id": "f3404b28-99bf-4f99-be1a-43f8d2c69f08", "source": "myopencre_csv", "version": "unknown", "status": "success", "start_time": 1781348452.3531053, "end_time": 1781348452.5849285, "duration_seconds": 0.23182320594787598, "op_counts": {}} From e16cf6392c4c12f80d918f4ce96698c79cb8fb7c Mon Sep 17 00:00:00 2001 From: SurbhiAgarwal1 Date: Mon, 15 Jun 2026 00:34:51 +0530 Subject: [PATCH 4/4] Remove accidentally committed import_telemetry.json artifact --- import_telemetry.json | 25 ------------------------- 1 file changed, 25 deletions(-) delete mode 100644 import_telemetry.json diff --git a/import_telemetry.json b/import_telemetry.json deleted file mode 100644 index 83549bcf2..000000000 --- a/import_telemetry.json +++ /dev/null @@ -1,25 +0,0 @@ -{"event_type": "import_run", "import_run_id": "dec41e2c-5036-4f6c-b4e0-591d7907915f", "source": "admin_api_test", "version": "unknown", "status": "success", "start_time": 1781194783.4183323, "end_time": 1781194783.4389153, "duration_seconds": 0.020582914352416992, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "94cf3d6d-9cfc-48e9-a53e-4f4ba71ab581", "source": "admin_api_test", "version": "unknown", "status": "success", "start_time": 1781194783.4427738, "end_time": 1781194783.4626935, "duration_seconds": 0.019919633865356445, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "685a8fe5-0389-4829-b0cf-b8daee5268ac", "source": "master_spreadsheet", "version": "unknown", "status": "success", "start_time": 1781194786.7458086, "end_time": 1781194786.981432, "duration_seconds": 0.23562335968017578, "op_counts": {"ga_pairs_planned": 0, "ga_pairs_enqueued": 0, "ga_pairs_retried": 0, "ga_pairs_failed": 0, "ga_pairs_completed": 0}} -{"event_type": "import_run", "import_run_id": "21078cc7-d566-4fed-87ff-f29f8bbf5698", "source": "master_spreadsheet", "version": "unknown", "status": "success", "start_time": 1781194786.9921842, "end_time": 1781194787.127314, "duration_seconds": 0.1351299285888672, "op_counts": {"ga_pairs_planned": 0, "ga_pairs_enqueued": 0, "ga_pairs_retried": 0, "ga_pairs_failed": 0, "ga_pairs_completed": 0}} -{"event_type": "import_run", "import_run_id": "ed81399b-cff5-41f5-a51d-b62a985442b1", "source": "e2e_staging_apply", "version": "unknown", "status": "success", "start_time": 1781194797.6288278, "end_time": 1781194797.6460304, "duration_seconds": 0.01720261573791504, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "f20ec60e-54d1-4367-b975-8a410097672e", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194797.7784889, "end_time": 1781194797.7906482, "duration_seconds": 0.012159347534179688, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "8bbad945-ae27-4498-842b-018433c57e16", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194797.792601, "end_time": 1781194797.8036625, "duration_seconds": 0.011061429977416992, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "dca20590-80bd-4da5-ab65-ba3383fa0507", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194797.887847, "end_time": 1781194797.9064107, "duration_seconds": 0.01856374740600586, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "3d74a3ba-89ab-4c00-827a-0ddb7a3fe66c", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194797.9122012, "end_time": 1781194797.9375591, "duration_seconds": 0.025357961654663086, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "1c329529-5b59-49a4-9801-740de74b07d7", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194798.0169394, "end_time": 1781194798.0371609, "duration_seconds": 0.020221471786499023, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "366f7890-b824-4c70-9c8d-b89e1cbab1c9", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194798.0408883, "end_time": 1781194798.0586853, "duration_seconds": 0.017796993255615234, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "dd02a4ef-815f-4ef2-8534-a9b9936a5441", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781194798.1409085, "end_time": 1781194798.1565795, "duration_seconds": 0.0156710147857666, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "4ae3ef33-9401-42cd-b29e-2591ffddeda1", "source": "myopencre_csv", "version": "unknown", "status": "success", "start_time": 1781194802.5569234, "end_time": 1781194802.7379754, "duration_seconds": 0.18105196952819824, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "f0778716-2027-4adc-97be-73bd3b0d7c2a", "source": "admin_api_test", "version": "unknown", "status": "success", "start_time": 1781348430.802166, "end_time": 1781348437.808481, "duration_seconds": 7.006314992904663, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "f751f54a-f26f-4969-83bf-6feef21497b8", "source": "admin_api_test", "version": "unknown", "status": "success", "start_time": 1781348437.815061, "end_time": 1781348437.831444, "duration_seconds": 0.016382932662963867, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "27a5b417-66e7-4ec9-bf15-8b98732a9551", "source": "master_spreadsheet", "version": "unknown", "status": "failure", "start_time": 1781348438.613303, "end_time": 1781348438.7480114, "duration_seconds": 0.13470840454101562, "error_message": "'charmap' codec can't encode characters in position 1-40: character maps to ", "op_counts": {"ga_pairs_planned": 0, "ga_pairs_enqueued": 0, "ga_pairs_retried": 0, "ga_pairs_failed": 0, "ga_pairs_completed": 0}} -{"event_type": "import_run", "import_run_id": "674c68a2-700d-4f0a-9782-4ae5c94cab5b", "source": "e2e_staging_apply", "version": "unknown", "status": "success", "start_time": 1781348447.2139077, "end_time": 1781348447.2304995, "duration_seconds": 0.016591787338256836, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "5a45bfcb-d63d-43e3-b167-8a81e524deb0", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.2978215, "end_time": 1781348447.315284, "duration_seconds": 0.017462491989135742, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "17288969-7e9a-41ad-b46c-120cdefc6215", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.3186834, "end_time": 1781348447.336906, "duration_seconds": 0.018222570419311523, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "369096ec-3b7d-4260-b88c-ed824fe6baa6", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.4097486, "end_time": 1781348447.4259489, "duration_seconds": 0.01620030403137207, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "15993bcb-daa1-47f1-9ade-a61e380b0643", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.4328694, "end_time": 1781348447.4497054, "duration_seconds": 0.016835927963256836, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "07139538-646d-4311-b95c-3b5ba3333467", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.5266647, "end_time": 1781348447.5463717, "duration_seconds": 0.01970696449279785, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "9d93f1a7-ca07-4265-8fe3-93612f365bba", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.5488982, "end_time": 1781348447.5682733, "duration_seconds": 0.019375085830688477, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "d49c0cd3-c363-40fa-906c-2561837065ad", "source": "test_phase2", "version": "unknown", "status": "success", "start_time": 1781348447.6467621, "end_time": 1781348447.6773396, "duration_seconds": 0.030577421188354492, "op_counts": {}} -{"event_type": "import_run", "import_run_id": "f3404b28-99bf-4f99-be1a-43f8d2c69f08", "source": "myopencre_csv", "version": "unknown", "status": "success", "start_time": 1781348452.3531053, "end_time": 1781348452.5849285, "duration_seconds": 0.23182320594787598, "op_counts": {}}