OWASP / OWASP/mas-website

Add support for folder-based MASTG-TEST

Open
#41 0 comments 1 reaction 1 assignee View on GitHub

Nobody has claimed this yet.

Dominant language
TypeScript
Stars
13
Forks
13
Avg merge
9h 13m
Merged PRs (30d)
10

Description

Currently, tests in tests-beta/ are structured like OWASP/mastg/tests-beta/**/**/MASTG-TEST-****.md.

We need to update this to OWASP/mastg/tests-beta/**/**/MASTG-TEST-****/MASTG-TEST-****.md similar to how our demos/ work. But still support OWASP/mastg/tests-beta/**/**/MASTG-TEST-****.md for backwards compatibility for now.

In addition to that, tests in the MASTG-TEST-****/ folders will support one or more testing methods.

Each method is a method-*.md file (e.g. method-1.md, method-2.md, etc.)

---
platform: android
type: static
---

Some intro...

## Steps

...

## Observation

...

The automation will inject any existing methods into the main MASTG-TEST-****.md file before the Evaluation section.

---
platform: android
title: References to APIs and Permissions for Accessing External Storage
id: MASTG-TEST-0202
...
type: [<<add unique list of types from methods>>]
---

## Overview

...

<<inject methods here>>

## Evaluation

...

Example:

ls OWASP/mastg/tests-beta/android/MASVS-STORAGE/MASTG-TEST-0202/
MASTG-TEST-0202.md
method-1.md
method-2.md
method-3.md
method-4.md

Would render as:

---
platform: android
title: References to APIs and Permissions for Accessing External Storage
id: MASTG-TEST-0202
...
type: [static]
---

## Overview

...

## Method 1 - Static Analysis

Some intro...

### Steps

...

### Observation

...

## Method 2 - Static Analysis

Some intro...

### Steps

...

### Observation

...

## Method 3 - Dynamic Analysis

Some intro...

### Steps

...

### Observation

...

## Method 4 - Network Analysis

Some intro...

### Steps

...

### Observation

...

## Evaluation

...

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.