Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

refs #228: Add OWASP Top 10 to the list of core skills and training r… #229

Open
wants to merge 2 commits into
base: master
Choose a base branch
from

Conversation

lussoluca
Copy link
Contributor

@lussoluca lussoluca commented Dec 20, 2024

User description

…esources


PR Type

Enhancement


Description

  • Added OWASP Top 10 as a required core skill for Software Developers
  • Added OWASP Top 10 documentation link to the Security training resources section
  • Improved table formatting and alignment across the training resources document for better readability
  • Tables now have consistent column spacing and proper markdown formatting

Changes walkthrough 📝

Relevant files
Enhancement
assessing-core-skills.md
Add OWASP Top 10 to core skills requirements                         

content/procedures/assessing-core-skills.md

  • Added OWASP Top 10 to the list of basic understanding requirements for
    Software Developers
  • +1/-0     
    training-resources.md
    Add OWASP Top 10 resource and format tables                           

    content/resources/training-resources.md

  • Added OWASP Top 10 documentation link to the Security section
  • Improved table formatting and alignment throughout the document
  • +64/-63 

    💡 PR-Agent usage: Comment /help "your question" on any pull request to receive relevant information

    @lussoluca
    Copy link
    Contributor Author

    In the context of this MR, I've also formatted the markdown tables to be more human-readable

    @sparkfabrik-ai-bot
    Copy link

    PR Reviewer Guide 🔍

    Here are some key observations to aid the review process:

    ⏱️ Estimated effort to review: 1 🔵⚪⚪⚪⚪
    🧪 No relevant tests
    🔒 No security concerns identified
    ⚡ Recommended focus areas for review

    Documentation Order
    Consider placing OWASP Top 10 higher in the security skills list since it's a fundamental security concept that should be understood before more advanced topics like asymmetric cryptography

    @sparkfabrik-ai-bot
    Copy link

    PR Code Suggestions ✨

    Explore these optional code suggestions:

    CategorySuggestion                                                                                                                                    Score
    Enhancement
    Provide more detailed information about expected knowledge requirements in a skills assessment list

    Consider expanding the OWASP Top 10 entry to include specific key areas that
    developers should understand, similar to other bullet points in the list.

    content/procedures/assessing-core-skills.md [45]

    -* OWASP Top 10
    +* OWASP Top 10 security risks, including injection attacks, broken authentication, and sensitive data exposure
    Suggestion importance[1-10]: 7

    Why: The suggestion meaningfully expands the OWASP Top 10 entry by specifying key security concepts that developers should understand, making the requirements clearer and more actionable.

    7
    Add time estimation and brief context for a training resource to help users plan their learning path

    Consider adding a brief description or duration estimate for the OWASP Top 10
    training material in the Security section, similar to other resources listed.

    content/resources/training-resources.md [71]

    -|                   | [OWASP Top 10 (The OWASP® Foundation)](https://owasp.org/Top10/)                                                                                                                                   |
    +|                   | [OWASP Top 10 (The OWASP® Foundation)](https://owasp.org/Top10/) - Essential web application security risks (2-3 hours)                                                                             |
    Suggestion importance[1-10]: 6

    Why: Adding duration estimates and context helps users better plan their learning journey. This aligns with the document's existing format where other resources include time estimates.

    6

    @paolomainardi
    Copy link
    Member

    @lussoluca appena riesci puoi risolvere i conflitti ?

    @lussoluca lussoluca force-pushed the 228-add-owasp-top-10 branch from 927bc5e to 8709927 Compare February 6, 2025 09:02
    @lussoluca
    Copy link
    Contributor Author

    @paolomainardi fatto

    Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
    Projects
    None yet
    Development

    Successfully merging this pull request may close these issues.

    2 participants