From 9b033383abd80c9e3cb67b2c3122fd15ab6684dc Mon Sep 17 00:00:00 2001 From: Olivier Leduc Date: Mon, 17 Jun 2024 17:05:19 -0400 Subject: [PATCH] BST-11165: boost-sca rules cleanup Since this scanner is a combination of the sbom-sca & license scanner, its rules are now just importing from those scanners making sure they are in sync. --- scanners/boostsecurityio/boost-sca/rules.yaml | 17 +---------------- 1 file changed, 1 insertion(+), 16 deletions(-) diff --git a/scanners/boostsecurityio/boost-sca/rules.yaml b/scanners/boostsecurityio/boost-sca/rules.yaml index b933e734..b9070e6a 100644 --- a/scanners/boostsecurityio/boost-sca/rules.yaml +++ b/scanners/boostsecurityio/boost-sca/rules.yaml @@ -1,18 +1,3 @@ import: - - boostsecurityio/sca-cve + - boostsecurityio/sbom-sca - boostsecurityio/oss-license - -rules: - dependency-with-malicious-behaviour: - categories: - - ALL - - boost-baseline - - boost-hardened - - supply-chain - - vulnerable-and-outdated-components - - dependency-with-malicious-behaviour - description: The dependency has been identified by the community to have malicious behaviour. - name: dependency-with-malicious-behaviour - group: top10-vulnerable-components - pretty_name: Dependency with known malicious behaviour - ref: https://github.com/ossf/malicious-packages/tree/main/osv/malicious