You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
When we create controls, threats and features for a given service (Eg: ObjectStorage), we define common_controls, common_threats and common_features in controls.ymal, threats.yaml and features.yaml under object-storage. For all threats referred by the common_controls in controls.yaml, there should be a mapping in common_threats in threats.yaml. For all features referred by the common_threats in threats.yaml, there should be a mapping in common_features in features.yaml. When doing this manually we may miss to add there ids.
Potential Solutions:
Write a generator to generate common threats and controls when you are given the common_features for the given service.
Extend this as a validator to validate this mapping is correct when all 3 files exist for a given service.
The text was updated successfully, but these errors were encountered:
Feature Request
Description of Problem:
When we create controls, threats and features for a given service (Eg: ObjectStorage), we define common_controls, common_threats and common_features in
controls.ymal
,threats.yaml
andfeatures.yaml
under object-storage. For all threats referred by the common_controls incontrols.yaml
, there should be a mapping in common_threats inthreats.yaml
. For all features referred by the common_threats inthreats.yaml
, there should be a mapping in common_features infeatures.yaml
. When doing this manually we may miss to add there ids.Potential Solutions:
Write a generator to generate common threats and controls when you are given the common_features for the given service.
Extend this as a validator to validate this mapping is correct when all 3 files exist for a given service.
The text was updated successfully, but these errors were encountered: