Added CWE

SonarSource · Dec 19, 2023 · aefbc62 · aefbc62
1 parent dcac610
commit aefbc62
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 1 deletion.
diff --git a/rules/S6865/kubernetes/metadata.json b/rules/S6865/kubernetes/metadata.json
@@ -12,6 +12,11 @@
   "ruleSpecification": "RSPEC-6865",
   "sqKey": "S6865",
   "scope": "All",
+  "securityStandards": {
+    "CWE": [
+      306
+    ]
+  },
   "defaultQualityProfiles": ["Sonar way"],
   "quickfix": "unknown",
   "code": {

diff --git a/rules/S6865/kubernetes/rule.adoc b/rules/S6865/kubernetes/rule.adoc
@@ -94,7 +94,9 @@ The automounting of service account tokens can be disabled by setting `automount
 
 //=== Articles & blog posts
 //=== Conference presentations
-//=== Standards
+=== Standards
+
+* CWE - https://cwe.mitre.org/data/definitions/306[CWE-306 - Missing Authentication for Critical Function]
 //=== External coding guidelines
 //=== Benchmarks