What's Changed
- Added OWASP's juice shop as a test app example to benchmark
- Extended NuGuard's Best Practices (NGA rules) to add security misconfigurations in the IaC and JWT
- Improved the false positive detection in Redteam judging
Details:
- Static analysis: NGA-027/028/029 security-misconfig rules + IDOR low-ID fallback by @rangoel-nu in #470
- Release: sync develop into main by @rangoel-nu in #473
Full Changelog: v0.9.3...v0.9.4