Class OwaspApiCatalog

Namespace

Kuestenlogik.Bowire.Security.Scanner

Assembly

Kuestenlogik.Bowire.Security.Scanner.dll

Canonical OWASP API Security Top 10 (2023) taxonomy — the structured backbone of the --suite=owasp-api scan mode. Scan findings tag themselves with an APIn-2023-… OWASP id (see OwaspApi); this catalog rolls those tags up into the ten Top-10 entries so a scan can report per-entry covered / clean / vulnerable status. Public so the workbench Security rail + API can enumerate the ten entries independently of any single scan run.

public static class OwaspApiCatalog

Inheritance

object

OwaspApiCatalog

Inherited Members

object.GetType()

object.MemberwiseClone()

object.ToString()

object.Equals(object)

object.Equals(object, object)

object.ReferenceEquals(object, object)

object.GetHashCode()

Properties

Entries

The ten OWASP API Security Top 10 (2023) entries, in order.

public static IReadOnlyList<OwaspApiEntry> Entries { get; }

Property Value

IReadOnlyList<OwaspApiEntry>

Methods

Match(string?)

Map a finding's OwaspApi tag (e.g. API8-2023-SECMISCONF) to its Top-10 entry, or null when the tag is absent or doesn't follow the APIn-2023- convention.

public static OwaspApiEntry? Match(string? owaspApiTag)

Parameters

owaspApiTag string

Returns

OwaspApiEntry