Skip to content

Comments

feat: Enrich ASVS mapping with Description and Level#2260

Open
InFiNiTy0639 wants to merge 4 commits intoOWASP:masterfrom
InFiNiTy0639:Add-desc
Open

feat: Enrich ASVS mapping with Description and Level#2260
InFiNiTy0639 wants to merge 4 commits intoOWASP:masterfrom
InFiNiTy0639:Add-desc

Conversation

@InFiNiTy0639
Copy link

@InFiNiTy0639 InFiNiTy0639 commented Feb 16, 2026

fix #2246
This PR Enrich ASVS Mapping with Description and Level

Description

This PR updates the convert_capec_map_to_asvs_map.py script to read the ASVS 5.0 JSON source file and enrich the generated webapp-asvs-3.0.yaml mapping file with description and level fields for each ASVS requirement.

Changes

  • Modified scripts/convert_capec_map_to_asvs_map.py :
    1. Added load_json_file utility function.
    2. Added extract_asvs_details function to parse ASVS JSON.
    3. Updated main to load ASVS JSON and pass details for enrichment.
    4. Updated convert_to_output_format to include description and level in the output YAML.

  • Updated source/webapp-asvs-3.0.yaml:
    1. Regenerated file now includes description and level fields for all mapped requirements.

  • Modified tests/scripts/convert_capec_map_to_asvs_map_utest.py :
    1. Updated TestMainFunction to mock the new --asvs-json argument.
    2. Added tests for parsing the new argument.

Verification

  • Ran the conversion script: python scripts/convert_capec_map_to_asvs_map.py -v 3.0 -e webapp
  • Verified that source/webapp-asvs-3.0.yaml was generated without errors.
  • ScreenShot
Screenshot 2026-02-16 140233

@github-actions
Copy link
Contributor

Build artifacts:

Name Link
Output files cornucopia-build-files.2f6e4ecd2cb46a71af538f2904dd2f3efaf36453.zip

@sydseter
Copy link
Collaborator

Great! Thank you for your time!

sydseter
sydseter previously approved these changes Feb 16, 2026
@sydseter
Copy link
Collaborator

@InFiNiTy0639 your commits needs a verified signature.

@InFiNiTy0639
Copy link
Author

Great! Thank you for your time!

Thanks @sydseter For Your Review

@InFiNiTy0639
Copy link
Author

@InFiNiTy0639 your commits needs a verified signature.

@rewtd @cw-owasp Please review this PR Thanks

@sydseter
Copy link
Collaborator

@InFiNiTy0639 your commits must have a verified signature.

@InFiNiTy0639
Copy link
Author

@InFiNiTy0639 your commits must have a verified signature.

@sydseter SSH Signing?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Add Description and level to source/webapp-asvs-3.0.yaml

2 participants