Discussion: CWE-based policies for Assurance Assertions #144
Labels
Assertion Framework
enhancement
New feature or request
Frontend
GHC_OSD
Grace Hopper Conference Open Source Day Issues
good first issue
Good for newcomers
help wanted
Extra attention is needed
How should we represent CWEs for assertions?
Option 1 - Each CWE gets it's own policy (auto-generated):
Option 2 - We roll up CWEs according to our own collections, or by the CWE 'childOf' hierarchy.
Option 3 - We don't use CWEs at all.
Thoughts?
The text was updated successfully, but these errors were encountered: