Security
Security specifications enforce protection against common vulnerabilities, secret leaks, and supply chain attacks.
Specs
| ID |
Description |
Severity |
Tools |
| SEC-001 |
No Hardcoded Secrets |
critical |
spotbugs, sonarqube |
| SEC-002 |
No Known Vulnerable Dependencies |
critical |
sonarqube, spotbugs |
| SEC-003 |
No High/Critical Static Analysis Findings |
major |
sonarqube |
| SEC-004 |
Vulnerability Management SLA Compliance |
major |
sonarqube |
| Tool |
Specs |
| SonarQube |
SEC-001, SEC-002, SEC-003, SEC-004 |
| SpotBugs |
SEC-001, SEC-002 |
References