Create the web scaffolding for the Companion Edition

[sydseter]

Similarly as with the Website App Edition.

Create the web pages for the Companion Edition.

The source files are here:

https://github.com/OWASP/cornucopia/blob/master/source/companion-cards-1.0.yaml
https://github.com/OWASP/cornucopia/blob/master/source/companion-mappings-1.0.yaml

We need the following routes (see ):

cornucopia.owasp.org/cards/{card code}

https://cornucopia.owasp.org/edition/companion/{card code}/1.0/en

https://cornucopia.owasp.org/edition/companion/{card code}/1.0

https://cornucopia.owasp.org/edition/companion/{card code}

https://cornucopia.owasp.org/edition/companion

The Edition should also have it's cards browsable from: https://cornucopia.owasp.org/cards and https://cornucopia.owasp.org/edition/companion

A folder called "companion-cards-1.0.yaml" need to be created in https://github.com/OWASP/cornucopia/tree/master/cornucopia.owasp.org/data/cards

In the folder there need to be a folder for each of the suites in the edition:

llm, agentic-ai, cloud, frontend, devops, social-engineering, automated-threats

Under each of the suites you should have a folder with the card codes:

E.g:

llm -> LLM{2-A},
agentic-ai -> AAI{2-A},
cloud -> CLD{2-A},
frontend -> FRE{2-A},
devops -> DVO{2-A},
social-engineering -> SE{2-A},
automated-threats -> BOT{2-A},

Each of the card folders (e.g: LLM2) should have two files:

explanation.md
technical-note.md

Both the files can be empty.

The colores for the suites should be grey for now: #dbdbdb

Not all the suites has a description and mapping. These descriptions and mapping will be added later to the source files.

Create a new taxonomy component similarly as with mobileAppCardTaxonomy.svelte and call it companionCardTaxonomy.svelte

The mapping codes can be pure text. They don't need to link to anywhere, for now.

Make sure the cards in the card browser for the companion edition has similar dimensions has for the Website App version.

[ayman-art]

Hi @sydseter can you assign this to me?

[sydseter]

@ayman-art you are assigned. Thank you for your time.

[sydseter]

I changed my mind about the

explanation.md

files.

explanation.md should contain the template:

## Scenario: <name>'s ... scenario

### Example

## Threat Modeling

### STRIDE

### What can go wrong?

### What are we going to do about it?

technical-note.md should be empty

The text below the headlines will be filled out later.

Don't worry about qlty complaning about technical-note.md
I will take care of it.

[sydseter]

Please note that the file https://github.com/OWASP/cornucopia/blob/master/source/companion-mappings-1.0.yaml was just updated.

The mapping values are not identical across the suites so you need to deal with the fact that they might be missing.

[ayman-art]

Thanks for the assignment and the clarifications, I'll reach out if I have any questions.

[Adarshkumar0509]

@sydseter I noticed this issue is currently assigned, but I don’t see any linked PR yet. If it’s okay, may I work on this issue? I’d be happy to take it up. Please let me know. Thanks!

[sydseter]

@Adarshkumar0509 it’s taken.

[Adarshkumar0509]

@sydseter Understood I will be around if any help is needed later.

[ayman-art]

Hi @sydseter, @rewtd
The PR is ready for review, I've included detailed notes to make it easy to follow.
Let me know if you have any questions or feedback!
Thanks