diff --git a/.fusa-reqs.json b/.fusa-reqs.json index 96cb95c..63b0151 100644 --- a/.fusa-reqs.json +++ b/.fusa-reqs.json @@ -2436,12 +2436,24 @@ "text": "Config accepts both go-FuSa's legacy .fusa.json shape (top-level \"version\", \"standard\"/\"asil\"/\"sil\" nested under \"project\") and the x-FuSa spec §1.2.1 shape (top-level \"configVersion\", top-level \"standard\"/\"asil\"/\"sil\"/\"dal\", and the spec's legacy flat \"project\": \"name\" string). Load and Save normalise whichever fields are present into both locations, canonicalising the standard id case-insensitively onto go-FuSa's internal enum, so a spec-compliant .fusa.json written by another x-FuSa tool loads without error and go-FuSa's own init output satisfies both shapes at once.", "standard": "x-FuSa" }, + { + "id": "REQ-CFG010", + "title": "Standard.CanonicalID maps the internal enum back to the x-FuSa spec §2.4.1 canonical lowercase id", + "text": "Standard.CanonicalID() is the inverse of the internal canonicalStandard mapping: it returns the x-FuSa spec §2.4.1 canonical lowercase standard id (e.g. \"iso26262\") for go-FuSa's internal enum value (e.g. StandardISO26262), so JSON envelope fields (check/report's top-level \"standard\", §3.2) never leak the internal uppercase, no-space enum spelling. StandardGeneric and an empty Standard both map to the empty string so callers omit the field rather than emit a non-canonical value.", + "standard": "x-FuSa spec section 2.4.1" + }, { "id": "REQ-QUALIFY010", "title": "Per-case qualification result status enum (PASS/FAIL/SKIP/ERROR)", "text": "Each qualification case result carries a results[].result status string that is one of PASS, FAIL, SKIP, or ERROR, per x-FuSa spec §6. Infrastructure failures (unable to set up or run the synthetic case) report ERROR; a case that runs to completion but doesn't match its expectation reports FAIL; a matching case reports PASS.", "standard": "x-FuSa" }, + { + "id": "REQ-QUALIFY011", + "title": "gofusa qualify accepts --dir and --format flags per x-FuSa spec §6", + "text": "gofusa qualify defines --dir (project root directory; affects the default --output location, mirroring how other commands resolve projectRoot) and --format text|json (both write the same qualification report; the flag is accepted without error) per the CLI surface documented in x-FuSa spec §6, instead of erroring with \"flag provided but not defined\" when either is passed.", + "standard": "x-FuSa spec section 6" + }, { "id": "REQ-ATT001", "title": "Attestation struct for x-FuSa spec section 1.6.2", diff --git a/CHANGELOG.md b/CHANGELOG.md index 6d5be16..e25d696 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,40 @@ Dates reference the merged commit timestamp. ## [Unreleased] +## v0.46.0 — 2026-07-28 (deep-audit round 2: standard ids, SARIF, tara/qualify/audit-pack) + +### Fixed +- **SARIF `tool.driver.name` is now the canonical `"go-FuSa"`** (x-FuSa spec + §2.9 MUST), not the `"gofusa"` binary name — the one output format whose + tool identity had diverged from every other JSON document (go-FuSa#81). +- **Standards gap-report `standard` field is now the §2.4.1 canonical + lowercase id** in all six commands (go-FuSa#77). `iso26262`/`do178`/ + `iec61508`/`iso21434`/`unece` no longer bake the ASIL/SIL/DAL/CAL rating + into the id (`"ISO 26262 ASIL-B"` → `"iso26262"`, etc.), and `iec62443` + now carries the required part suffix (`"iec62443"` → `"iec62443-4-2"`). +- **`check`/`report`'s JSON envelope `standard` field is now the canonical + lowercase id** instead of go-FuSa's internal uppercase/no-space enum + spelling (e.g. `"ISO26262"`) — new `config.Standard.CanonicalID()` + (go-FuSa#78). +- **`tara --output-dir` now auto-creates the target directory**, matching + the identical `--output-dir` handling `fmea`/`safety-case` already had + (go-FuSa#83). +- **`qualify` now accepts the documented `--dir`/`--format` flags** (x-FuSa + spec §6) instead of erroring with "flag provided but not defined" + (go-FuSa#82). +- **`audit-pack` no longer silently drops `tara.json`/`tara.md`/ + `cyber-report.json` and other evidence types** added after its + `EvidenceFiles` list was last updated — extended with the missing §1.2/ + §1.3 filenames plus a glob for the open-ended + `-gap-report.json` family (go-FuSa#79). +- **`tara`'s `threats[]` no longer includes `_test.go` fixtures** as "asset + under threat" entries (x-FuSa spec §1.6 rule 4 MUST) — `tara.Scan` now + excludes test-fixture-sourced CYBER findings the same way + `CountProjectFiles` already excludes them from the `assetsInProject` + denominator, so `summary.assetsAnalyzed`/`coveragePct` are now + internally consistent with the report's own `assetInventoryMethod` text + (go-FuSa#80). + ## v0.45.0 — 2026-07-28 (declare x-FuSa spec v1.15.0 conformance) ### Changed diff --git a/README.md b/README.md index b87eb42..d825d24 100644 --- a/README.md +++ b/README.md @@ -285,7 +285,7 @@ docker build -t go-fusa . docker run --rm -v "$(pwd)":/project go-fusa check ``` -Published tags: `latest`, `0.45`, `0.45.0` (and matching semver for every release). +Published tags: `latest`, `0.46`, `0.46.0` (and matching semver for every release). ## Standards coverage diff --git a/auditpack/auditpack.go b/auditpack/auditpack.go index b10cdb8..a1d32a0 100644 --- a/auditpack/auditpack.go +++ b/auditpack/auditpack.go @@ -20,6 +20,7 @@ import ( "io" "os" "path/filepath" + "sort" "time" fusa "github.com/SoundMatt/go-FuSa" @@ -57,16 +58,31 @@ type AuditManifest struct { Files []AuditManifestEntry `json:"files"` } -// EvidenceFiles is the ordered list of evidence file names that Pack collects. +// EvidenceFiles is the ordered list of evidence file names that Pack collects +// — every x-FuSa spec §1.2 input file and §1.3 generated-evidence file that +// has a fixed name (everything except the `-gap-report.json` +// family, which Pack discovers separately via a glob since the set of +// standards is open-ended — see gapReportGlob). // //fusa:req REQ-AUDIT001 var EvidenceFiles = []string{ + // §1.2 input/config files. ".fusa.json", ".fusa-reqs.json", + ".fusa-hara.json", ".fusa-evidence.json", + ".fusa-dispositions.json", + ".fusa-problems.json", + ".fusa-model-trace.json", + // §1.3 generated evidence. "check-report.json", "fmea.json", "fmea.csv", + "tara.json", + "tara.md", + "cyber-report.json", + "coupling-report.json", + "comp-report.json", "boundary.mermaid", "boundary.dot", "safety-case.json", @@ -79,6 +95,13 @@ var EvidenceFiles = []string{ "vuln.json", } +// gapReportGlob matches the open-ended §1.3 `-gap-report.json` +// family (e.g. iso26262-gap-report.json, slsa-gap-report.json, +// iec62443-4-2-gap-report.json, misra-c-gap-report.json) — a fixed name list +// can't enumerate every standard id a future tool version might add, so Pack +// discovers these by pattern instead. +const gapReportGlob = "*-gap-report.json" + // Pack bundles all present evidence files from projectRoot into a ZIP archive // at outputPath. It returns the AuditManifest describing what was packed. // @@ -104,6 +127,7 @@ func Pack(projectRoot, outputPath string) (*AuditManifest, error) { path string } var present []fileEntry + seen := make(map[string]bool, len(EvidenceFiles)) for _, name := range EvidenceFiles { path := filepath.Join(projectRoot, name) entry, err := hashFile(path, name) @@ -115,6 +139,31 @@ func Pack(projectRoot, outputPath string) (*AuditManifest, error) { } manifest.Files = append(manifest.Files, entry) present = append(present, fileEntry{name: name, path: path}) + seen[name] = true + } + + // §1.3 `-gap-report.json` files (open-ended set of standards — + // see gapReportGlob doc comment). Sorted for deterministic manifest + // ordering across filesystems/platforms. + gapReportNames, globErr := discoverGapReports(projectRoot) + if globErr != nil { + return nil, fmt.Errorf("auditpack: glob gap reports: %w", globErr) + } + for _, name := range gapReportNames { + if seen[name] { + continue + } + path := filepath.Join(projectRoot, name) + entry, hashErr := hashFile(path, name) + if hashErr != nil { + if os.IsNotExist(hashErr) { + continue + } + return nil, fmt.Errorf("auditpack: hash %s: %w", name, hashErr) + } + manifest.Files = append(manifest.Files, entry) + present = append(present, fileEntry{name: name, path: path}) + seen[name] = true } // Create ZIP @@ -156,6 +205,24 @@ func Pack(projectRoot, outputPath string) (*AuditManifest, error) { // ─── helpers ───────────────────────────────────────────────────────────────── +// discoverGapReports returns the base names (not full paths) of every +// `-gap-report.json` file present directly under projectRoot, +// sorted lexicographically for deterministic manifest/ZIP ordering. +// +//fusa:req REQ-AUDIT001 +func discoverGapReports(projectRoot string) ([]string, error) { + matches, err := filepath.Glob(filepath.Join(projectRoot, gapReportGlob)) + if err != nil { + return nil, err + } + names := make([]string, 0, len(matches)) + for _, m := range matches { + names = append(names, filepath.Base(m)) + } + sort.Strings(names) + return names, nil +} + func hashFile(path, name string) (AuditManifestEntry, error) { f, err := os.Open(path) if err != nil { diff --git a/auditpack/auditpack_test.go b/auditpack/auditpack_test.go index 859b4ea..0a12be9 100644 --- a/auditpack/auditpack_test.go +++ b/auditpack/auditpack_test.go @@ -193,6 +193,73 @@ func TestPack_IncludesFusaConfig(t *testing.T) { } } +// TestPack_IncludesNewerEvidenceTypes is a regression test for the audit-pack +// silently dropping tara.json/tara.md/cyber-report.json and other evidence +// types added after EvidenceFiles was last updated (x-FuSa spec §8 MUST: +// "every §1.2 input file and every §1.3 generated file that exists at the +// project root"). +// +//fusa:test REQ-AUDIT001 +func TestPack_IncludesNewerEvidenceTypes(t *testing.T) { + files := testutil.MinimalProject() + for _, name := range []string{ + // §1.2 input files not previously collected. + ".fusa-hara.json", + ".fusa-dispositions.json", + ".fusa-problems.json", + ".fusa-model-trace.json", + // §1.3 generated evidence not previously collected. + "tara.json", + "tara.md", + "cyber-report.json", + "coupling-report.json", + "comp-report.json", + // §1.3 open-ended -gap-report.json family. + "iso26262-gap-report.json", + "slsa-gap-report.json", + } { + files[name] = `{"kind":"test"}` + } + dir := testutil.ProjectDir(t, files) + outPath := filepath.Join(t.TempDir(), auditpack.AuditPackFile) + + manifest, err := auditpack.Pack(dir, outPath) + if err != nil { + t.Fatalf("Pack: %v", err) + } + + packed := make(map[string]bool, len(manifest.Files)) + for _, entry := range manifest.Files { + packed[entry.Path] = true + } + names := zipFileNames(t, outPath) + inZip := make(map[string]bool, len(names)) + for _, n := range names { + inZip[n] = true + } + + for _, want := range []string{ + ".fusa-hara.json", + ".fusa-dispositions.json", + ".fusa-problems.json", + ".fusa-model-trace.json", + "tara.json", + "tara.md", + "cyber-report.json", + "coupling-report.json", + "comp-report.json", + "iso26262-gap-report.json", + "slsa-gap-report.json", + } { + if !packed[want] { + t.Errorf("manifest missing %q", want) + } + if !inZip[want] { + t.Errorf("ZIP missing %q", want) + } + } +} + // ─── engine rule ───────────────────────────────────────────────────────────── func runEngine(t *testing.T, files map[string]string) []fusa.Finding { diff --git a/cmd/gofusa/cmd_check.go b/cmd/gofusa/cmd_check.go index d8852ed..1aeda4b 100644 --- a/cmd/gofusa/cmd_check.go +++ b/cmd/gofusa/cmd_check.go @@ -73,7 +73,9 @@ func runCheck(args []string, stdout, stderr io.Writer) int { rep := report.New(projectRoot, result.Findings) rep.NoSummary = *noSummary - rep.Standard = string(cfg.Project.Standard) + // §2.4.1: the envelope's "standard" is a canonical lowercase id, never + // go-FuSa's internal uppercase/no-space enum spelling. + rep.Standard = cfg.Project.Standard.CanonicalID() switch cfg.Project.Standard { case "IEC61508": rep.SIL = cfg.Project.ASIL diff --git a/cmd/gofusa/cmd_envelope_standard_test.go b/cmd/gofusa/cmd_envelope_standard_test.go new file mode 100644 index 0000000..43ea697 --- /dev/null +++ b/cmd/gofusa/cmd_envelope_standard_test.go @@ -0,0 +1,86 @@ +package main + +import ( + "bytes" + "encoding/json" + "path/filepath" + "testing" + + "github.com/SoundMatt/go-FuSa/config" +) + +// ─── check/report envelope "standard" field (x-FuSa spec §2.4.1) ───────────── +// +// Regression coverage for: the JSON envelope's top-level "standard" field +// must be the canonical lowercase id (e.g. "iso26262"), never go-FuSa's +// internal uppercase/no-space Standard enum spelling (e.g. "ISO26262"). + +//fusa:test REQ-CLI005 +func TestRunCheck_JSONFormat_CanonicalStandardID(t *testing.T) { + dir := t.TempDir() + cfg := config.Default("github.com/x/y", "y") + cfg.Standard = config.StandardISO26262 + cfg.Project.Standard = config.StandardISO26262 + if err := config.Save(filepath.Join(dir, config.ConfigFile), cfg); err != nil { + t.Fatalf("Save config: %v", err) + } + + var out, errBuf bytes.Buffer + code := runCheck([]string{"--dir", dir, "--format", "json"}, &out, &errBuf) + if code != 0 && code != 1 { + t.Fatalf("unexpected exit %d: %s", code, errBuf.String()) + } + + var doc map[string]interface{} + if err := json.Unmarshal(out.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v\n%s", err, out.String()) + } + if doc["standard"] != "iso26262" { + t.Errorf("check envelope standard = %v, want canonical id \"iso26262\" (not \"ISO26262\")", doc["standard"]) + } +} + +//fusa:test REQ-CLI005 +func TestRunReport_JSONFormat_CanonicalStandardID(t *testing.T) { + dir := t.TempDir() + cfg := config.Default("github.com/x/y", "y") + cfg.Standard = config.StandardDO178C + cfg.Project.Standard = config.StandardDO178C + if err := config.Save(filepath.Join(dir, config.ConfigFile), cfg); err != nil { + t.Fatalf("Save config: %v", err) + } + + var out, errBuf bytes.Buffer + code := runReport([]string{"--dir", dir, "--format", "json"}, &out, &errBuf) + if code != 0 && code != 1 { + t.Fatalf("unexpected exit %d: %s", code, errBuf.String()) + } + + var doc map[string]interface{} + if err := json.Unmarshal(out.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v\n%s", err, out.String()) + } + if doc["standard"] != "do178c" { + t.Errorf("report envelope standard = %v, want canonical id \"do178c\" (not \"DO178C\")", doc["standard"]) + } +} + +//fusa:test REQ-CLI005 +func TestRunCheck_JSONFormat_GenericStandardOmitted(t *testing.T) { + dir := t.TempDir() + // config.Default already uses StandardGeneric; no .fusa.json written so + // config.Default("", ...) applies via ErrNoConfig fallback. + var out, errBuf bytes.Buffer + code := runCheck([]string{"--dir", dir, "--format", "json"}, &out, &errBuf) + if code != 0 && code != 1 { + t.Fatalf("unexpected exit %d: %s", code, errBuf.String()) + } + + var doc map[string]interface{} + if err := json.Unmarshal(out.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v\n%s", err, out.String()) + } + if v, ok := doc["standard"]; ok && v != "" { + t.Errorf("check envelope standard for generic project = %v, want omitted/empty", v) + } +} diff --git a/cmd/gofusa/cmd_qualify.go b/cmd/gofusa/cmd_qualify.go index c9c993c..d54fa2f 100644 --- a/cmd/gofusa/cmd_qualify.go +++ b/cmd/gofusa/cmd_qualify.go @@ -25,6 +25,14 @@ func runQualify(args []string, stdout, stderr io.Writer) int { } var ( + // §6: qualify accepts --dir/--format for CLI-surface parity with the + // other §9.1 MUST commands, even though the qualification suite + // itself always runs the same built-in synthetic cases regardless of + // project content — --dir only affects the default --output + // location (mirroring how other commands resolve projectRoot). + //fusa:req REQ-QUALIFY011 + dir = fs.String("dir", "", "project root directory (default: current directory); only affects the default --output location") + format = fs.String("format", "text", "output format: text, json (both write the same qualification report; controls stdout presentation)") outputFile = fs.String("output", "", "path for the JSON qualification report (default: ./qualify-report.json)") // Feature 2 — tool qualification display //fusa:req REQ-QUALIFY007 @@ -42,14 +50,27 @@ func runQualify(args []string, stdout, stderr io.Writer) int { return code } - outPath := *outputFile - if outPath == "" { - wd, err := os.Getwd() + switch *format { + case "text", "json", "": + // ok + default: + fmt.Fprintf(stderr, "gofusa qualify: unknown format %q (must be text or json)\n", *format) + return fusa.ExitUsage + } + + projectRoot := *dir + if projectRoot == "" { + var err error + projectRoot, err = os.Getwd() if err != nil { fmt.Fprintf(stderr, "gofusa qualify: get working directory: %v\n", err) return fusa.ExitRuntime } - outPath = filepath.Join(wd, qualify.ReportFile) + } + + outPath := *outputFile + if outPath == "" { + outPath = filepath.Join(projectRoot, qualify.ReportFile) } fmt.Fprintf(stdout, "Running %d qualification case(s)...\n", len(qualify.BuiltinCases())) diff --git a/cmd/gofusa/cmd_qualify_flags_test.go b/cmd/gofusa/cmd_qualify_flags_test.go new file mode 100644 index 0000000..1b2a65f --- /dev/null +++ b/cmd/gofusa/cmd_qualify_flags_test.go @@ -0,0 +1,61 @@ +package main + +import ( + "bytes" + "os" + "path/filepath" + "testing" +) + +// ─── qualify --dir/--format (x-FuSa spec §6) ────────────────────────────────── +// +// Regression coverage for: gofusa qualify erroring with exit 2 ("flag +// provided but not defined") when --dir or --format is passed, even though +// §6 documents both as part of qualify's CLI surface. + +//fusa:test REQ-QUALIFY011 +func TestRunQualify_FormatFlag(t *testing.T) { + dir := t.TempDir() + outFile := filepath.Join(dir, "qualify.json") + var out, errBuf bytes.Buffer + code := runQualify([]string{"--format", "json", "--output", outFile}, &out, &errBuf) + if code != 0 { + t.Errorf("runQualify --format json: exit %d, stderr: %s", code, errBuf.String()) + } + if _, err := os.Stat(outFile); err != nil { + t.Error("qualification report not written") + } +} + +//fusa:test REQ-QUALIFY011 +func TestRunQualify_DirFlag(t *testing.T) { + dir := t.TempDir() + var out, errBuf bytes.Buffer + code := runQualify([]string{"--dir", dir}, &out, &errBuf) + if code != 0 { + t.Errorf("runQualify --dir: exit %d, stderr: %s", code, errBuf.String()) + } + // --output not given, so the report should land under --dir. + if _, err := os.Stat(filepath.Join(dir, "qualify-report.json")); err != nil { + t.Errorf("qualification report not written under --dir: %v", err) + } +} + +//fusa:test REQ-QUALIFY011 +func TestRunQualify_DirAndFormatFlags(t *testing.T) { + dir := t.TempDir() + var out, errBuf bytes.Buffer + code := runQualify([]string{"--dir", dir, "--format", "json"}, &out, &errBuf) + if code != 0 { + t.Errorf("runQualify --dir --format json: exit %d, stderr: %s", code, errBuf.String()) + } +} + +//fusa:test REQ-QUALIFY011 +func TestRunQualify_InvalidFormat(t *testing.T) { + var out, errBuf bytes.Buffer + code := runQualify([]string{"--format", "xml"}, &out, &errBuf) + if code != 2 { + t.Errorf("runQualify --format xml: expected exit 2, got %d", code) + } +} diff --git a/cmd/gofusa/cmd_report.go b/cmd/gofusa/cmd_report.go index 428d8fd..faa50bc 100644 --- a/cmd/gofusa/cmd_report.go +++ b/cmd/gofusa/cmd_report.go @@ -72,7 +72,9 @@ func runReport(args []string, stdout, stderr io.Writer) int { } rep := report.New(projectRoot, result.Findings) - rep.Standard = string(cfg.Project.Standard) + // §2.4.1: the envelope's "standard" is a canonical lowercase id, never + // go-FuSa's internal uppercase/no-space enum spelling. + rep.Standard = cfg.Project.Standard.CanonicalID() switch cfg.Project.Standard { case "IEC61508": rep.SIL = cfg.Project.ASIL diff --git a/cmd/gofusa/cmd_tara.go b/cmd/gofusa/cmd_tara.go index ab08d6e..ed32d7b 100644 --- a/cmd/gofusa/cmd_tara.go +++ b/cmd/gofusa/cmd_tara.go @@ -80,6 +80,13 @@ func runTara(args []string, stdout, stderr io.Writer) int { return fusa.ExitRuntime } + // Auto-create --output-dir if it doesn't exist yet, matching the + // fmea/safety-case sibling commands' §9.2 --output-dir handling. + if err := os.MkdirAll(outDir, 0o750); err != nil { + fmt.Fprintf(stderr, "gofusa tara: mkdir: %v\n", err) + return fusa.ExitRuntime + } + // x-FuSa spec §1.6.2 MUST: carry forward any existing attestation from // the prior saved tara.json before overwriting it — a fresh tara.Scan // never has one of its own. Staleness (a content change since the diff --git a/cmd/gofusa/cmd_v024f_test.go b/cmd/gofusa/cmd_v024f_test.go index f875454..c7fa046 100644 --- a/cmd/gofusa/cmd_v024f_test.go +++ b/cmd/gofusa/cmd_v024f_test.go @@ -601,10 +601,10 @@ func TestRunDo178_InvalidDALv2(t *testing.T) { //fusa:test REQ-CLI019 func TestRunTara_WithOutputDir(t *testing.T) { dir := t.TempDir() + // outDir is deliberately NOT pre-created — tara --output-dir MUST + // auto-create it, matching fmea/safety-case's identical --output-dir + // handling (they don't require the caller to mkdir first either). outDir := filepath.Join(dir, "tara-out") - if err := os.MkdirAll(outDir, 0o750); err != nil { - t.Fatal(err) - } if err := os.WriteFile(filepath.Join(dir, "go.mod"), []byte("module example.com/test\n\ngo 1.22\n"), 0o644); err != nil { t.Fatal(err) } @@ -613,6 +613,12 @@ func TestRunTara_WithOutputDir(t *testing.T) { if code != 0 { t.Errorf("unexpected exit %d: %s", code, errBuf.String()) } + if _, err := os.Stat(filepath.Join(outDir, "tara.json")); err != nil { + t.Errorf("tara.json not created in auto-created output dir: %v", err) + } + if _, err := os.Stat(filepath.Join(outDir, "tara.md")); err != nil { + t.Errorf("tara.md not created in auto-created output dir: %v", err) + } } // ─── runMetricsRecord error paths ───────────────────────────────────────────── diff --git a/config/config.go b/config/config.go index e0445d2..e3e7c64 100644 --- a/config/config.go +++ b/config/config.go @@ -256,6 +256,33 @@ func canonicalStandard(s Standard) Standard { } } +// CanonicalID returns the x-FuSa spec §2.4.1 canonical lowercase standard id +// for s (e.g. StandardISO26262 -> "iso26262"), the inverse of +// canonicalStandard. StandardGeneric and an empty Standard both map to "" +// — §2.4.1 defines no id for "generic", so callers writing a JSON envelope's +// `standard` field (§3.2) MUST omit the field rather than emit a +// non-canonical value. A value that isn't one of go-FuSa's internal +// constants is lowercased and returned verbatim (§2.4.1: an unrecognised id +// MUST be treated verbatim, never rejected). +// +//fusa:req REQ-CFG010 +func (s Standard) CanonicalID() string { + switch s { + case StandardISO26262: + return "iso26262" + case StandardIEC61508: + return "iec61508" + case StandardISO21434: + return "iso21434" + case StandardDO178C: + return "do178c" + case StandardGeneric, "": + return "" + default: + return strings.ToLower(string(s)) + } +} + // Validate returns an error if cfg contains inconsistencies. // //fusa:req REQ-CFG003 diff --git a/config/config_test.go b/config/config_test.go index 466f6e7..27c65ad 100644 --- a/config/config_test.go +++ b/config/config_test.go @@ -159,6 +159,33 @@ func TestStandard_Identifiers(t *testing.T) { } } +// TestStandard_CanonicalID verifies Standard.CanonicalID() is the inverse of +// the internal canonicalStandard mapping, producing the x-FuSa spec §2.4.1 +// canonical lowercase id — never go-FuSa's internal uppercase/no-space +// enum spelling (e.g. "ISO26262"), and never the empty/"generic" value as +// anything but "". +// +//fusa:test REQ-CFG010 +func TestStandard_CanonicalID(t *testing.T) { + cases := []struct { + std config.Standard + want string + }{ + {config.StandardISO26262, "iso26262"}, + {config.StandardIEC61508, "iec61508"}, + {config.StandardISO21434, "iso21434"}, + {config.StandardDO178C, "do178c"}, + {config.StandardGeneric, ""}, + {config.Standard(""), ""}, + {config.Standard("unrecognised-id"), "unrecognised-id"}, + } + for _, c := range cases { + if got := c.std.CanonicalID(); got != c.want { + t.Errorf("Standard(%q).CanonicalID() = %q, want %q", c.std, got, c.want) + } + } +} + func TestSave_FileCreated(t *testing.T) { dir := t.TempDir() path := filepath.Join(dir, config.ConfigFile) diff --git a/do178/do178.go b/do178/do178.go index 6e07776..843f5a4 100644 --- a/do178/do178.go +++ b/do178/do178.go @@ -513,7 +513,10 @@ func Render(w io.Writer, rep *Report, format string) error { } func toGapReport(rep *Report) *gapreport.Report { - gr := gapreport.New(rep.Project, "DO-178C "+string(rep.DAL)) + // §2.4.1: standard is a canonical lowercase id, never a display string — + // the DAL rating has no home in the canonical enum and is dropped here + // (it remains available on the internal Report via rep.DAL). + gr := gapreport.New(rep.Project, "do178c") for _, obj := range rep.Objectives { if obj.Status == StatusNA { continue diff --git a/do178/do178_test.go b/do178/do178_test.go index a3ff8ea..fc87d53 100644 --- a/do178/do178_test.go +++ b/do178/do178_test.go @@ -2,6 +2,7 @@ package do178_test import ( "bytes" + "encoding/json" "os" "path/filepath" "strings" @@ -160,6 +161,15 @@ func TestRender_JSON(t *testing.T) { if !strings.Contains(buf.String(), `"standard"`) { t.Error("missing standard field in JSON") } + // §2.4.1: standard MUST be the canonical lowercase id, never a display + // string like "DO-178C DAL-B". + var doc map[string]interface{} + if err := json.Unmarshal(buf.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v", err) + } + if doc["standard"] != "do178c" { + t.Errorf("standard = %v, want canonical id \"do178c\"", doc["standard"]) + } } //fusa:test REQ-DO178-003 diff --git a/docs/tool-safety-manual.md b/docs/tool-safety-manual.md index fb6e9d6..ae4399e 100644 --- a/docs/tool-safety-manual.md +++ b/docs/tool-safety-manual.md @@ -1,6 +1,6 @@ # go-FuSa Tool Safety Manual -**Version:** 0.45.0 +**Version:** 0.46.0 **Module:** `github.com/SoundMatt/go-FuSa` **License:** Mozilla Public License 2.0 **Standards addressed:** ISO 26262, IEC 61508, ISO 21434, DO-178C diff --git a/fusa.go b/fusa.go index e3d7207..48f028b 100644 --- a/fusa.go +++ b/fusa.go @@ -23,7 +23,7 @@ import ( ) // Version is the current release of go-FuSa. -const Version = "0.45.0" +const Version = "0.46.0" // SpecVersion is the x-FuSa spec version this release implements. const SpecVersion = "1.15.0" diff --git a/iec61508/iec61508.go b/iec61508/iec61508.go index d8fd6cc..60293a2 100644 --- a/iec61508/iec61508.go +++ b/iec61508/iec61508.go @@ -356,7 +356,10 @@ func Render(w io.Writer, rep *Report, format string) error { } func toGapReport(rep *Report) *gapreport.Report { - gr := gapreport.New(rep.Project, "IEC 61508 "+string(rep.SIL)) + // §2.4.1: standard is a canonical lowercase id, never a display string — + // the SIL rating has no home in the canonical enum and is dropped here + // (it remains available on the internal Report via rep.SIL). + gr := gapreport.New(rep.Project, "iec61508") for _, obj := range rep.Objectives { if obj.Status == StatusNA { continue diff --git a/iec61508/iec61508_test.go b/iec61508/iec61508_test.go index 344025a..e39dbfc 100644 --- a/iec61508/iec61508_test.go +++ b/iec61508/iec61508_test.go @@ -3,6 +3,7 @@ package iec61508_test import ( "bytes" "context" + "encoding/json" "os" "path/filepath" "strings" @@ -165,6 +166,15 @@ func TestRender_JSON(t *testing.T) { if !strings.Contains(buf.String(), `"standard"`) { t.Error("missing standard field in JSON") } + // §2.4.1: standard MUST be the canonical lowercase id, never a display + // string like "IEC 61508 SIL-2". + var doc map[string]interface{} + if err := json.Unmarshal(buf.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v", err) + } + if doc["standard"] != "iec61508" { + t.Errorf("standard = %v, want canonical id \"iec61508\"", doc["standard"]) + } } //fusa:test REQ-IEC61508-003 diff --git a/iec62443/assess.go b/iec62443/assess.go index 6e96867..f49e32a 100644 --- a/iec62443/assess.go +++ b/iec62443/assess.go @@ -274,7 +274,9 @@ func Render(w io.Writer, rep *Report, format string) error { } func toGapReport(rep *Report) *gapreport.Report { - gr := gapreport.New(rep.Project, "iec62443") + // §2.4.1: standard is a canonical lowercase id with the required part + // suffix — this package assesses IEC 62443-4-2 (see package doc). + gr := gapreport.New(rep.Project, "iec62443-4-2") for _, obj := range rep.Objectives { gobj := gapreport.Objective{ ID: obj.ID, diff --git a/iec62443/assess_test.go b/iec62443/assess_test.go index 01fffb7..e23bcb0 100644 --- a/iec62443/assess_test.go +++ b/iec62443/assess_test.go @@ -220,8 +220,10 @@ func TestRender_JSON(t *testing.T) { if err := json.Unmarshal(buf.Bytes(), &doc); err != nil { t.Fatalf("JSON parse: %v", err) } - if doc["standard"] != "iec62443" { - t.Errorf("standard = %v, want iec62443", doc["standard"]) + // §2.4.1: standard is the canonical lowercase id with the required part + // suffix, never a display string or a bare "iec62443". + if doc["standard"] != "iec62443-4-2" { + t.Errorf("standard = %v, want iec62443-4-2", doc["standard"]) } if doc["kind"] != "gap-report" { t.Errorf("kind = %v, want gap-report", doc["kind"]) diff --git a/iso21434/iso21434.go b/iso21434/iso21434.go index 5f81d48..9c50b6f 100644 --- a/iso21434/iso21434.go +++ b/iso21434/iso21434.go @@ -217,7 +217,10 @@ func Render(w io.Writer, rep *Report, format string) error { } func toGapReport(rep *Report) *gapreport.Report { - gr := gapreport.New(rep.Project, "ISO 21434 "+string(rep.CAL)) + // §2.4.1: standard is a canonical lowercase id, never a display string — + // the CAL rating has no home in the canonical enum and is dropped here + // (it remains available on the internal Report via rep.CAL). + gr := gapreport.New(rep.Project, "iso21434") for _, obj := range rep.Objectives { if obj.Status == StatusNA { continue diff --git a/iso21434/iso21434_test.go b/iso21434/iso21434_test.go index a4233d4..7e6db79 100644 --- a/iso21434/iso21434_test.go +++ b/iso21434/iso21434_test.go @@ -230,6 +230,15 @@ func TestRender_JSON(t *testing.T) { if len(parsed.Objectives) == 0 { t.Error("expected objectives in JSON output") } + // §2.4.1: standard MUST be the canonical lowercase id, never a display + // string like "ISO 21434 CAL-2". + var doc map[string]interface{} + if err := json.Unmarshal(buf.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v", err) + } + if doc["standard"] != "iso21434" { + t.Errorf("standard = %v, want canonical id \"iso21434\"", doc["standard"]) + } } // TestRender_UnknownFormat verifies error on unknown format. diff --git a/iso26262/iso26262.go b/iso26262/iso26262.go index aea7dcb..fcd598f 100644 --- a/iso26262/iso26262.go +++ b/iso26262/iso26262.go @@ -328,7 +328,10 @@ func Render(w io.Writer, rep *Report, format string) error { // toGapReport converts the internal Report to the canonical §9.3 gap-report shape. func toGapReport(rep *Report) *gapreport.Report { - gr := gapreport.New(rep.Project, "ISO 26262 "+string(rep.ASIL)) + // §2.4.1: standard is a canonical lowercase id, never a display string — + // the ASIL rating has no home in the canonical enum and is dropped here + // (it remains available on the internal Report via rep.ASIL). + gr := gapreport.New(rep.Project, "iso26262") for _, obj := range rep.Objectives { if obj.Status == StatusNA { continue diff --git a/iso26262/iso26262_test.go b/iso26262/iso26262_test.go index 13c512b..346634e 100644 --- a/iso26262/iso26262_test.go +++ b/iso26262/iso26262_test.go @@ -3,6 +3,7 @@ package iso26262_test import ( "bytes" "context" + "encoding/json" "os" "path/filepath" "strings" @@ -164,6 +165,15 @@ func TestRender_JSON(t *testing.T) { if !strings.Contains(buf.String(), `"standard"`) { t.Error("missing standard field in JSON") } + // §2.4.1: standard MUST be the canonical lowercase id, never a display + // string like "ISO 26262 ASIL-B". + var doc map[string]interface{} + if err := json.Unmarshal(buf.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v", err) + } + if doc["standard"] != "iso26262" { + t.Errorf("standard = %v, want canonical id \"iso26262\"", doc["standard"]) + } } //fusa:test REQ-ISO26262-003 diff --git a/sarif/sarif.go b/sarif/sarif.go index f03b5a2..584672c 100644 --- a/sarif/sarif.go +++ b/sarif/sarif.go @@ -103,7 +103,9 @@ func Render(w io.Writer, findings []fusa.Finding, toolVersion string) error { Runs: []sarifRun{{ Tool: sarifTool{ Driver: sarifDriver{ - Name: "gofusa", + // §2.9 MUST: tool.driver.name is the canonical `tool` + // name (§1.1, "go-FuSa"), not the "gofusa" binary name. + Name: "go-FuSa", Version: toolVersion, InformationURI: "https://github.com/SoundMatt/go-FuSa", Rules: rules, diff --git a/sarif/sarif_test.go b/sarif/sarif_test.go index fa6d11a..e4d67c5 100644 --- a/sarif/sarif_test.go +++ b/sarif/sarif_test.go @@ -42,6 +42,35 @@ func TestRender_SARIFVersion(t *testing.T) { } } +// TestRender_DriverName verifies tool.driver.name is the canonical §1.1 +// tool name "go-FuSa" — never the "gofusa" binary name — per §2.9's MUST. +// +//fusa:test REQ-SARIF002 +func TestRender_DriverName(t *testing.T) { + var buf bytes.Buffer + if err := sarif.Render(&buf, nil, "0.17.0"); err != nil { + t.Fatalf("Render: %v", err) + } + var out struct { + Runs []struct { + Tool struct { + Driver struct { + Name string `json:"name"` + } `json:"driver"` + } `json:"tool"` + } `json:"runs"` + } + if err := json.Unmarshal(buf.Bytes(), &out); err != nil { + t.Fatalf("invalid JSON: %v\n%s", err, buf.String()) + } + if len(out.Runs) != 1 { + t.Fatalf("expected 1 run, got %d", len(out.Runs)) + } + if out.Runs[0].Tool.Driver.Name != "go-FuSa" { + t.Errorf("tool.driver.name = %q, want canonical tool name \"go-FuSa\"", out.Runs[0].Tool.Driver.Name) + } +} + func TestRender_FindingLevel(t *testing.T) { cases := []struct { sev fusa.Severity diff --git a/tara.json b/tara.json index 8d57fad..497e7ad 100644 --- a/tara.json +++ b/tara.json @@ -1,10480 +1,50 @@ { - "schemaVersion": "1.14", + "schemaVersion": "1.15", "kind": "tara-report", "tool": "go-FuSa", - "toolVersion": "0.43.0", + "toolVersion": "0.46.0", "language": "go", - "generatedAt": "2026-07-28T22:40:07.013585Z", + "generatedAt": "2026-07-29T03:16:05.497006Z", "format": "go-FuSa TARA v1", "module": "github.com/SoundMatt/go-FuSa", "threats": [ { "id": "TARA-001", - "asset": "impact_test.go", - "threat": "Command injection from variable input enables arbitrary command execution", - "stride": [ - "E", - "R" - ], - "cwe": "CWE-78", - "attackVector": "Network", - "attackFeasibility": "medium", - "impact": { - "safety": "critical", - "financial": "moderate", - "operational": "negligible", - "privacy": "negligible" - }, - "risk": "critical", - "treatment": "mitigate", - "securityLevel": 3, - "mitigations": [ - "Use exec.Command with fixed command and sanitised args" - ], - "currentControl": "Use exec.Command with fixed command and sanitised args", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 23 - }, - "cyberRuleId": "CYBER005", - "sourceFile": "impact/impact_test.go", - "sourceLine": 23 - }, - { - "id": "TARA-002", - "asset": "impact_test.go", - "threat": "Command injection from variable input enables arbitrary command execution", - "stride": [ - "E", - "R" - ], - "cwe": "CWE-78", - "attackVector": "Network", - "attackFeasibility": "medium", - "impact": { - "safety": "critical", - "financial": "moderate", - "operational": "negligible", - "privacy": "negligible" - }, - "risk": "critical", - "treatment": "mitigate", - "securityLevel": 3, - "mitigations": [ - "Use exec.Command with fixed command and sanitised args" - ], - "currentControl": "Use exec.Command with fixed command and sanitised args", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 35 - }, - "cyberRuleId": "CYBER005", - "sourceFile": "impact/impact_test.go", - "sourceLine": 35 - }, - { - "id": "TARA-003", - "asset": "cmd_trace_funccov_test.go", - "threat": "Integer narrowing conversion causes silent data truncation", - "stride": [ - "T", - "D" - ], - "cwe": "CWE-190", - "standard": "MISRA Rule 10.3", - "attackVector": "Local", - "attackFeasibility": "low", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "moderate", - "privacy": "negligible" - }, - "risk": "low", - "treatment": "mitigate", - "securityLevel": 1, - "mitigations": [ - "Add range check before conversion" - ], - "currentControl": "Add range check before conversion", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_trace_funccov_test.go", - "line": 77 - }, - "cyberRuleId": "CYBER009", - "sourceFile": "cmd/gofusa/cmd_trace_funccov_test.go", - "sourceLine": 77 - }, - { - "id": "TARA-004", - "asset": "cmd_trace_reqcov_test.go", - "threat": "Integer narrowing conversion causes silent data truncation", - "stride": [ - "T", - "D" - ], - "cwe": "CWE-190", - "standard": "MISRA Rule 10.3", - "attackVector": "Local", - "attackFeasibility": "low", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "moderate", - "privacy": "negligible" - }, - "risk": "low", - "treatment": "mitigate", - "securityLevel": 1, - "mitigations": [ - "Add range check before conversion" - ], - "currentControl": "Add range check before conversion", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_trace_reqcov_test.go", - "line": 125 - }, - "cyberRuleId": "CYBER009", - "sourceFile": "cmd/gofusa/cmd_trace_reqcov_test.go", - "sourceLine": 125 - }, - { - "id": "TARA-005", - "asset": "summary.go", - "threat": "Integer narrowing conversion causes silent data truncation", - "stride": [ - "T", - "D" - ], - "cwe": "CWE-190", - "standard": "MISRA Rule 10.3", - "attackVector": "Local", - "attackFeasibility": "low", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "moderate", - "privacy": "negligible" - }, - "risk": "low", - "treatment": "mitigate", - "securityLevel": 1, - "mitigations": [ - "Add range check before conversion" - ], - "currentControl": "Add range check before conversion", - "residualRisk": "Low after remediation", - "location": { - "file": "report/summary.go", - "line": 149 - }, - "cyberRuleId": "CYBER009", - "sourceFile": "report/summary.go", - "sourceLine": 149 - }, - { - "id": "TARA-006", - "asset": "cmd_slsa_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_slsa_test.go", - "line": 112 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "cmd/gofusa/cmd_slsa_test.go", - "sourceLine": 112 - }, - { - "id": "TARA-007", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 372 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 372 - }, - { - "id": "TARA-008", - "asset": "coverage_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coverage/coverage_test.go", - "line": 25 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "coverage/coverage_test.go", - "sourceLine": 25 - }, - { - "id": "TARA-009", - "asset": "do178_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 62 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "do178/do178_test.go", - "sourceLine": 62 - }, - { - "id": "TARA-010", - "asset": "do178_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 223 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "do178/do178_test.go", - "sourceLine": 223 - }, - { - "id": "TARA-011", - "asset": "fusa_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 256 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "fusa_test.go", - "sourceLine": 256 - }, - { - "id": "TARA-012", - "asset": "fusa_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 275 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "fusa_test.go", - "sourceLine": 275 - }, - { - "id": "TARA-013", - "asset": "fusa_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 293 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "fusa_test.go", - "sourceLine": 293 - }, - { - "id": "TARA-014", - "asset": "iec61508_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 61 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 61 - }, - { - "id": "TARA-015", - "asset": "assess_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec62443/assess_test.go", - "line": 17 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "iec62443/assess_test.go", - "sourceLine": 17 - }, - { - "id": "TARA-016", - "asset": "iso26262_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 62 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 62 - }, - { - "id": "TARA-017", - "asset": "sas_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sas/sas_test.go", - "line": 81 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "sas/sas_test.go", - "sourceLine": 81 - }, - { - "id": "TARA-018", - "asset": "sci_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sci/sci_test.go", - "line": 73 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "sci/sci_test.go", - "sourceLine": 73 - }, - { - "id": "TARA-019", - "asset": "assess_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 38 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 38 - }, - { - "id": "TARA-020", - "asset": "assess_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 66 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 66 - }, - { - "id": "TARA-021", - "asset": "assess_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 99 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 99 - }, - { - "id": "TARA-022", - "asset": "assess_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 129 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 129 - }, - { - "id": "TARA-023", - "asset": "cmd_comp_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_comp_test.go", - "line": 17 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_comp_test.go", - "sourceLine": 17 - }, - { - "id": "TARA-024", - "asset": "cmd_comp_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_comp_test.go", - "line": 42 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_comp_test.go", - "sourceLine": 42 - }, - { - "id": "TARA-025", - "asset": "cmd_comp_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_comp_test.go", - "line": 58 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_comp_test.go", - "sourceLine": 58 - }, - { - "id": "TARA-026", - "asset": "cmd_comp_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_comp_test.go", - "line": 89 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_comp_test.go", - "sourceLine": 89 - }, - { - "id": "TARA-027", - "asset": "cmd_comp_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_comp_test.go", - "line": 111 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_comp_test.go", - "sourceLine": 111 - }, - { - "id": "TARA-028", - "asset": "cmd_comp_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_comp_test.go", - "line": 151 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_comp_test.go", - "sourceLine": 151 - }, - { - "id": "TARA-029", - "asset": "cmd_coupling_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_coupling_test.go", - "line": 14 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_coupling_test.go", - "sourceLine": 14 - }, - { - "id": "TARA-030", - "asset": "cmd_coupling_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_coupling_test.go", - "line": 18 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_coupling_test.go", - "sourceLine": 18 - }, - { - "id": "TARA-031", - "asset": "cmd_coupling_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_coupling_test.go", - "line": 36 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_coupling_test.go", - "sourceLine": 36 - }, - { - "id": "TARA-032", - "asset": "cmd_coupling_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_coupling_test.go", - "line": 39 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_coupling_test.go", - "sourceLine": 39 - }, - { - "id": "TARA-033", - "asset": "cmd_hooks.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_hooks.go", - "line": 84 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_hooks.go", - "sourceLine": 84 - }, - { - "id": "TARA-034", - "asset": "cmd_iec62443_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_iec62443_test.go", - "line": 119 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_iec62443_test.go", - "sourceLine": 119 - }, - { - "id": "TARA-035", - "asset": "cmd_pathrel_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_pathrel_test.go", - "line": 25 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_pathrel_test.go", - "sourceLine": 25 - }, - { - "id": "TARA-036", - "asset": "cmd_pathrel_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_pathrel_test.go", - "line": 71 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_pathrel_test.go", - "sourceLine": 71 - }, - { - "id": "TARA-037", - "asset": "cmd_slsa_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_slsa_test.go", - "line": 115 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_slsa_test.go", - "sourceLine": 115 - }, - { - "id": "TARA-038", - "asset": "cmd_slsa_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_slsa_test.go", - "line": 119 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_slsa_test.go", - "sourceLine": 119 - }, - { - "id": "TARA-039", - "asset": "cmd_v018_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v018_test.go", - "line": 142 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v018_test.go", - "sourceLine": 142 - }, - { - "id": "TARA-040", - "asset": "cmd_v018_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v018_test.go", - "line": 159 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v018_test.go", - "sourceLine": 159 - }, - { - "id": "TARA-041", - "asset": "cmd_v018_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v018_test.go", - "line": 175 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v018_test.go", - "sourceLine": 175 - }, - { - "id": "TARA-042", - "asset": "cmd_v018_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v018_test.go", - "line": 215 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v018_test.go", - "sourceLine": 215 - }, - { - "id": "TARA-043", - "asset": "cmd_v018_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v018_test.go", - "line": 249 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v018_test.go", - "sourceLine": 249 - }, - { - "id": "TARA-044", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 260 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 260 - }, - { - "id": "TARA-045", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 365 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 365 - }, - { - "id": "TARA-046", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 368 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 368 - }, - { - "id": "TARA-047", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 394 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 394 - }, - { - "id": "TARA-048", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 416 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 416 - }, - { - "id": "TARA-049", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 433 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 433 - }, - { - "id": "TARA-050", - "asset": "cmd_v021_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v021_test.go", - "line": 41 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v021_test.go", - "sourceLine": 41 - }, - { - "id": "TARA-051", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 24 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 24 - }, - { - "id": "TARA-052", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 36 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 36 - }, - { - "id": "TARA-053", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 59 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 59 - }, - { - "id": "TARA-054", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 66 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 66 - }, - { - "id": "TARA-055", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 118 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 118 - }, - { - "id": "TARA-056", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 135 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 135 - }, - { - "id": "TARA-057", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 152 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 152 - }, - { - "id": "TARA-058", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 175 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 175 - }, - { - "id": "TARA-059", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 191 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 191 - }, - { - "id": "TARA-060", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 196 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 196 - }, - { - "id": "TARA-061", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 237 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 237 - }, - { - "id": "TARA-062", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 257 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 257 - }, - { - "id": "TARA-063", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 274 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 274 - }, - { - "id": "TARA-064", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 298 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 298 - }, - { - "id": "TARA-065", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 319 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 319 - }, - { - "id": "TARA-066", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 338 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 338 - }, - { - "id": "TARA-067", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 346 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 346 - }, - { - "id": "TARA-068", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 357 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 357 - }, - { - "id": "TARA-069", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 371 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 371 - }, - { - "id": "TARA-070", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 385 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 385 - }, - { - "id": "TARA-071", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 395 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 395 - }, - { - "id": "TARA-072", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 478 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 478 - }, - { - "id": "TARA-073", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 495 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 495 - }, - { - "id": "TARA-074", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 523 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 523 - }, - { - "id": "TARA-075", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 540 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 540 - }, - { - "id": "TARA-076", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 146 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 146 - }, - { - "id": "TARA-077", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 158 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 158 - }, - { - "id": "TARA-078", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 225 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 225 - }, - { - "id": "TARA-079", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 237 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 237 - }, - { - "id": "TARA-080", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 257 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 257 - }, - { - "id": "TARA-081", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 266 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 266 - }, - { - "id": "TARA-082", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 289 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 289 - }, - { - "id": "TARA-083", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 317 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 317 - }, - { - "id": "TARA-084", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 323 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 323 - }, - { - "id": "TARA-085", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 340 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 340 - }, - { - "id": "TARA-086", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 469 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 469 - }, - { - "id": "TARA-087", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 496 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 496 - }, - { - "id": "TARA-088", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 610 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 610 - }, - { - "id": "TARA-089", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 727 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 727 - }, - { - "id": "TARA-090", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 735 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 735 - }, - { - "id": "TARA-091", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 741 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 741 - }, - { - "id": "TARA-092", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 766 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 766 - }, - { - "id": "TARA-093", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 780 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 780 - }, - { - "id": "TARA-094", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 820 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 820 - }, - { - "id": "TARA-095", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 823 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 823 - }, - { - "id": "TARA-096", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 890 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 890 - }, - { - "id": "TARA-097", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 927 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 927 - }, - { - "id": "TARA-098", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 60 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 60 - }, - { - "id": "TARA-099", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 69 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 69 - }, - { - "id": "TARA-100", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 153 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 153 - }, - { - "id": "TARA-101", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 166 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 166 - }, - { - "id": "TARA-102", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 222 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 222 - }, - { - "id": "TARA-103", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 441 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 441 - }, - { - "id": "TARA-104", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 454 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 454 - }, - { - "id": "TARA-105", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 539 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 539 - }, - { - "id": "TARA-106", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 566 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 566 - }, - { - "id": "TARA-107", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 605 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 605 - }, - { - "id": "TARA-108", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 675 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 675 - }, - { - "id": "TARA-109", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 723 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 723 - }, - { - "id": "TARA-110", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 744 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 744 - }, - { - "id": "TARA-111", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 764 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 764 - }, - { - "id": "TARA-112", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 225 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 225 - }, - { - "id": "TARA-113", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 238 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 238 - }, - { - "id": "TARA-114", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 253 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 253 - }, - { - "id": "TARA-115", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 496 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 496 - }, - { - "id": "TARA-116", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 515 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 515 - }, - { - "id": "TARA-117", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 518 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 518 - }, - { - "id": "TARA-118", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 534 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 534 - }, - { - "id": "TARA-119", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 567 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 567 - }, - { - "id": "TARA-120", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 705 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 705 - }, - { - "id": "TARA-121", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 736 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 736 - }, - { - "id": "TARA-122", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 752 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 752 - }, - { - "id": "TARA-123", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 758 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 758 - }, - { - "id": "TARA-124", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 888 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 888 - }, - { - "id": "TARA-125", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 914 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 914 - }, - { - "id": "TARA-126", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 937 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 937 - }, - { - "id": "TARA-127", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 963 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 963 - }, - { - "id": "TARA-128", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 988 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 988 - }, - { - "id": "TARA-129", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 1067 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 1067 - }, - { - "id": "TARA-130", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 17 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 17 - }, - { - "id": "TARA-131", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 39 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 39 - }, - { - "id": "TARA-132", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 68 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 68 - }, - { - "id": "TARA-133", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 86 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 86 - }, - { - "id": "TARA-134", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 122 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 122 - }, - { - "id": "TARA-135", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 235 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 235 - }, - { - "id": "TARA-136", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 254 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 254 - }, - { - "id": "TARA-137", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 271 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 271 - }, - { - "id": "TARA-138", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 285 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 285 - }, - { - "id": "TARA-139", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 299 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 299 - }, - { - "id": "TARA-140", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 314 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 314 - }, - { - "id": "TARA-141", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 330 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 330 - }, - { - "id": "TARA-142", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 336 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 336 - }, - { - "id": "TARA-143", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 506 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 506 - }, - { - "id": "TARA-144", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 640 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 640 - }, - { - "id": "TARA-145", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 136 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 136 - }, - { - "id": "TARA-146", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 171 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 171 - }, - { - "id": "TARA-147", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 185 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 185 - }, - { - "id": "TARA-148", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 203 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 203 - }, - { - "id": "TARA-149", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 222 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 222 - }, - { - "id": "TARA-150", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 241 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 241 - }, - { - "id": "TARA-151", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 349 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 349 - }, - { - "id": "TARA-152", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 442 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 442 - }, - { - "id": "TARA-153", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 459 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 459 - }, - { - "id": "TARA-154", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 476 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 476 - }, - { - "id": "TARA-155", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 506 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 506 - }, - { - "id": "TARA-156", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 523 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 523 - }, - { - "id": "TARA-157", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 531 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 531 - }, - { - "id": "TARA-158", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 608 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 608 - }, - { - "id": "TARA-159", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 680 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 680 - }, - { - "id": "TARA-160", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 701 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 701 - }, - { - "id": "TARA-161", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 705 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 705 - }, - { - "id": "TARA-162", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 720 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 720 - }, - { - "id": "TARA-163", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 745 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 745 - }, - { - "id": "TARA-164", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 778 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 778 - }, - { - "id": "TARA-165", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 792 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 792 - }, - { - "id": "TARA-166", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 835 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 835 - }, - { - "id": "TARA-167", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 883 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 883 - }, - { - "id": "TARA-168", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 903 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 903 - }, - { - "id": "TARA-169", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 964 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 964 - }, - { - "id": "TARA-170", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 999 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 999 - }, - { - "id": "TARA-171", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 245 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 245 - }, - { - "id": "TARA-172", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 260 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 260 - }, - { - "id": "TARA-173", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 263 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 263 - }, - { - "id": "TARA-174", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 279 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 279 - }, - { - "id": "TARA-175", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 495 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 495 - }, - { - "id": "TARA-176", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 506 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 506 - }, - { - "id": "TARA-177", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 524 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 524 - }, - { - "id": "TARA-178", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 527 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 527 - }, - { - "id": "TARA-179", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 569 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 569 - }, - { - "id": "TARA-180", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 574 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 574 - }, - { - "id": "TARA-181", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 593 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 593 - }, - { - "id": "TARA-182", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 628 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 628 - }, - { - "id": "TARA-183", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 662 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 662 - }, - { - "id": "TARA-184", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 703 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 703 - }, - { - "id": "TARA-185", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 747 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 747 - }, - { - "id": "TARA-186", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 751 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 751 - }, - { - "id": "TARA-187", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 36 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 36 - }, - { - "id": "TARA-188", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 65 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 65 - }, - { - "id": "TARA-189", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 86 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 86 - }, - { - "id": "TARA-190", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 99 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 99 - }, - { - "id": "TARA-191", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 114 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 114 - }, - { - "id": "TARA-192", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 130 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 130 - }, - { - "id": "TARA-193", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 162 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 162 - }, - { - "id": "TARA-194", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 184 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 184 - }, - { - "id": "TARA-195", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 201 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 201 - }, - { - "id": "TARA-196", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 218 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 218 - }, - { - "id": "TARA-197", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 238 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 238 - }, - { - "id": "TARA-198", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 264 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 264 - }, - { - "id": "TARA-199", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 308 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 308 - }, - { - "id": "TARA-200", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 326 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 326 - }, - { - "id": "TARA-201", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 425 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 425 - }, - { - "id": "TARA-202", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 448 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 448 - }, - { - "id": "TARA-203", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 467 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 467 - }, - { - "id": "TARA-204", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 479 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 479 - }, - { - "id": "TARA-205", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 496 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 496 - }, - { - "id": "TARA-206", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 527 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 527 - }, - { - "id": "TARA-207", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 547 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 547 - }, - { - "id": "TARA-208", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 615 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 615 - }, - { - "id": "TARA-209", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 34 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 34 - }, - { - "id": "TARA-210", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 97 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 97 - }, - { - "id": "TARA-211", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 113 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 113 - }, - { - "id": "TARA-212", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 203 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 203 - }, - { - "id": "TARA-213", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 214 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 214 - }, - { - "id": "TARA-214", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 229 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 229 - }, - { - "id": "TARA-215", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 393 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 393 - }, - { - "id": "TARA-216", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 413 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 413 - }, - { - "id": "TARA-217", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 429 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 429 - }, - { - "id": "TARA-218", - "asset": "conform_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/conform_test.go", - "line": 22 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/conform_test.go", - "sourceLine": 22 - }, - { - "id": "TARA-219", - "asset": "conform_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/conform_test.go", - "line": 25 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/conform_test.go", - "sourceLine": 25 - }, - { - "id": "TARA-220", - "asset": "comp_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "comp/comp_extra_test.go", - "line": 165 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "comp/comp_extra_test.go", - "sourceLine": 165 - }, - { - "id": "TARA-221", - "asset": "comp_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "comp/comp_extra_test.go", - "line": 168 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "comp/comp_extra_test.go", - "sourceLine": 168 - }, - { - "id": "TARA-222", - "asset": "comp_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "comp/comp_extra_test.go", - "line": 244 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "comp/comp_extra_test.go", - "sourceLine": 244 - }, - { - "id": "TARA-223", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 43 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 43 - }, - { - "id": "TARA-224", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 67 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 67 - }, - { - "id": "TARA-225", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 74 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 74 - }, - { - "id": "TARA-226", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 100 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 100 - }, - { - "id": "TARA-227", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 106 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 106 - }, - { - "id": "TARA-228", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 129 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 129 - }, - { - "id": "TARA-229", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 132 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 132 - }, - { - "id": "TARA-230", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 154 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 154 - }, - { - "id": "TARA-231", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 157 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 157 - }, - { - "id": "TARA-232", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 180 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 180 - }, - { - "id": "TARA-233", - "asset": "coupling_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_test.go", - "line": 26 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_test.go", - "sourceLine": 26 - }, - { - "id": "TARA-234", - "asset": "coverage_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coverage/coverage_test.go", - "line": 37 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coverage/coverage_test.go", - "sourceLine": 37 - }, - { - "id": "TARA-235", - "asset": "coverage_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coverage/coverage_test.go", - "line": 40 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coverage/coverage_test.go", - "sourceLine": 40 - }, - { - "id": "TARA-236", - "asset": "disposition_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "disposition/disposition_test.go", - "line": 35 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "disposition/disposition_test.go", - "sourceLine": 35 - }, - { - "id": "TARA-237", - "asset": "disposition_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "disposition/disposition_test.go", - "line": 51 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "disposition/disposition_test.go", - "sourceLine": 51 - }, - { - "id": "TARA-238", - "asset": "disposition_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "disposition/disposition_test.go", - "line": 158 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "disposition/disposition_test.go", - "sourceLine": 158 - }, - { - "id": "TARA-239", - "asset": "disposition_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "disposition/disposition_test.go", - "line": 176 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "disposition/disposition_test.go", - "sourceLine": 176 - }, - { - "id": "TARA-240", - "asset": "do178_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 40 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "do178/do178_test.go", - "sourceLine": 40 - }, - { - "id": "TARA-241", - "asset": "do178_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 66 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "do178/do178_test.go", - "sourceLine": 66 - }, - { - "id": "TARA-242", - "asset": "do178_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 226 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "do178/do178_test.go", - "sourceLine": 226 - }, - { - "id": "TARA-243", - "asset": "do178_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 245 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "do178/do178_test.go", - "sourceLine": 245 - }, - { - "id": "TARA-244", - "asset": "do178_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 309 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "do178/do178_test.go", - "sourceLine": 309 - }, - { - "id": "TARA-245", - "asset": "do178_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 334 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "do178/do178_test.go", - "sourceLine": 334 - }, - { - "id": "TARA-246", - "asset": "fusa_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 261 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "fusa_test.go", - "sourceLine": 261 - }, - { - "id": "TARA-247", - "asset": "fusa_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 264 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "fusa_test.go", - "sourceLine": 264 - }, - { - "id": "TARA-248", - "asset": "fusa_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 279 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "fusa_test.go", - "sourceLine": 279 - }, - { - "id": "TARA-249", - "asset": "fusa_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 296 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "fusa_test.go", - "sourceLine": 296 - }, - { - "id": "TARA-250", - "asset": "hara_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "hara/hara_test.go", - "line": 96 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "hara/hara_test.go", - "sourceLine": 96 - }, - { - "id": "TARA-251", - "asset": "iec61508_gap_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_gap_test.go", - "line": 27 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_gap_test.go", - "sourceLine": 27 - }, - { - "id": "TARA-252", - "asset": "iec61508_gap_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_gap_test.go", - "line": 82 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_gap_test.go", - "sourceLine": 82 - }, - { - "id": "TARA-253", - "asset": "iec61508_gap_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_gap_test.go", - "line": 164 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_gap_test.go", - "sourceLine": 164 - }, - { - "id": "TARA-254", - "asset": "iec61508_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 40 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 40 - }, - { - "id": "TARA-255", - "asset": "iec61508_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 64 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 64 - }, - { - "id": "TARA-256", - "asset": "iec61508_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 198 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 198 - }, - { - "id": "TARA-257", - "asset": "iec61508_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 215 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 215 - }, - { - "id": "TARA-258", - "asset": "iec61508_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 321 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 321 - }, - { - "id": "TARA-259", - "asset": "iec61508_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 342 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 342 - }, - { - "id": "TARA-260", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec62443/assess_test.go", - "line": 20 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec62443/assess_test.go", - "sourceLine": 20 - }, - { - "id": "TARA-261", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 59 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 59 - }, - { - "id": "TARA-262", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 80 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 80 - }, - { - "id": "TARA-263", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 86 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 86 - }, - { - "id": "TARA-264", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 103 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 103 - }, - { - "id": "TARA-265", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 115 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 115 - }, - { - "id": "TARA-266", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 241 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 241 - }, - { - "id": "TARA-267", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 247 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 247 - }, - { - "id": "TARA-268", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 253 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 253 - }, - { - "id": "TARA-269", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 261 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 261 - }, - { - "id": "TARA-270", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 300 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 300 - }, - { - "id": "TARA-271", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 306 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 306 - }, - { - "id": "TARA-272", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 312 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 312 - }, - { - "id": "TARA-273", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 336 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 336 - }, - { - "id": "TARA-274", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 347 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 347 - }, - { - "id": "TARA-275", - "asset": "iso21434_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso21434/iso21434_test.go", - "line": 44 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso21434/iso21434_test.go", - "sourceLine": 44 - }, - { - "id": "TARA-276", - "asset": "iso21434_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso21434/iso21434_test.go", - "line": 63 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso21434/iso21434_test.go", - "sourceLine": 63 - }, - { - "id": "TARA-277", - "asset": "iso21434_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso21434/iso21434_test.go", - "line": 135 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso21434/iso21434_test.go", - "sourceLine": 135 - }, - { - "id": "TARA-278", - "asset": "iso21434_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso21434/iso21434_test.go", - "line": 252 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso21434/iso21434_test.go", - "sourceLine": 252 - }, - { - "id": "TARA-279", - "asset": "iso26262_gap_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_gap_test.go", - "line": 27 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_gap_test.go", - "sourceLine": 27 - }, - { - "id": "TARA-280", - "asset": "iso26262_gap_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_gap_test.go", - "line": 86 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_gap_test.go", - "sourceLine": 86 - }, - { - "id": "TARA-281", - "asset": "iso26262_gap_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_gap_test.go", - "line": 171 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_gap_test.go", - "sourceLine": 171 - }, - { - "id": "TARA-282", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 41 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 41 - }, - { - "id": "TARA-283", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 65 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 65 - }, - { - "id": "TARA-284", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 199 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 199 - }, - { - "id": "TARA-285", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 217 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 217 - }, - { - "id": "TARA-286", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 256 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 256 - }, - { - "id": "TARA-287", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 278 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 278 - }, - { - "id": "TARA-288", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 303 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 303 - }, - { - "id": "TARA-289", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 323 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 323 - }, - { - "id": "TARA-290", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 343 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 343 - }, - { - "id": "TARA-291", - "asset": "metrics_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "metrics/metrics_test.go", - "line": 32 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "metrics/metrics_test.go", - "sourceLine": 32 - }, - { - "id": "TARA-292", - "asset": "metrics_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "metrics/metrics_test.go", - "line": 102 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "metrics/metrics_test.go", - "sourceLine": 102 - }, - { - "id": "TARA-293", - "asset": "metrics_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "metrics/metrics_test.go", - "line": 124 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "metrics/metrics_test.go", - "sourceLine": 124 - }, - { - "id": "TARA-294", - "asset": "metrics_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "metrics/metrics_test.go", - "line": 232 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "metrics/metrics_test.go", - "sourceLine": 232 - }, - { - "id": "TARA-295", - "asset": "metrics_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "metrics/metrics_test.go", - "line": 254 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "metrics/metrics_test.go", - "sourceLine": 254 - }, - { - "id": "TARA-296", - "asset": "pr_engine_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "pr/pr_engine_test.go", - "line": 116 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "pr/pr_engine_test.go", - "sourceLine": 116 - }, - { - "id": "TARA-297", - "asset": "sas_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sas/sas_test.go", - "line": 56 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "sas/sas_test.go", - "sourceLine": 56 - }, - { - "id": "TARA-298", - "asset": "sas_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sas/sas_test.go", - "line": 85 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "sas/sas_test.go", - "sourceLine": 85 - }, - { - "id": "TARA-299", - "asset": "sci_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sci/sci_test.go", - "line": 43 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "sci/sci_test.go", - "sourceLine": 43 - }, - { - "id": "TARA-300", - "asset": "sci_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sci/sci_test.go", - "line": 76 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "sci/sci_test.go", - "sourceLine": 76 - }, - { - "id": "TARA-301", - "asset": "sci_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sci/sci_test.go", - "line": 98 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "sci/sci_test.go", - "sourceLine": 98 - }, - { - "id": "TARA-302", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 42 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 42 - }, - { - "id": "TARA-303", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 47 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 47 - }, - { - "id": "TARA-304", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 69 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 69 - }, - { - "id": "TARA-305", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 73 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 73 - }, - { - "id": "TARA-306", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 76 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 76 - }, - { - "id": "TARA-307", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 102 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 102 - }, - { - "id": "TARA-308", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 106 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 106 - }, - { - "id": "TARA-309", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 132 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 132 - }, - { - "id": "TARA-310", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 154 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 154 - }, - { - "id": "TARA-311", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 176 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 176 - }, - { - "id": "TARA-312", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 196 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 196 - }, - { - "id": "TARA-313", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 215 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 215 - }, - { - "id": "TARA-314", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 312 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 312 - }, - { - "id": "TARA-315", - "asset": "unece_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "unece/unece_test.go", - "line": 57 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "unece/unece_test.go", - "sourceLine": 57 - }, - { - "id": "TARA-316", - "asset": "unece_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "unece/unece_test.go", - "line": 112 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "unece/unece_test.go", - "sourceLine": 112 - }, - { - "id": "TARA-317", - "asset": "vuln_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", + "asset": "summary.go", + "threat": "Integer narrowing conversion causes silent data truncation", "stride": [ - "I", - "T" + "T", + "D" ], - "cwe": "CWE-732", + "cwe": "CWE-190", + "standard": "MISRA Rule 10.3", "attackVector": "Local", - "attackFeasibility": "medium", + "attackFeasibility": "low", "impact": { "safety": "moderate", "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" + "operational": "moderate", + "privacy": "negligible" }, - "risk": "medium", + "risk": "low", "treatment": "mitigate", - "securityLevel": 2, + "securityLevel": 1, "mitigations": [ - "Create file with mode 0640 or stricter" + "Add range check before conversion" ], - "currentControl": "Create file with mode 0640 or stricter", + "currentControl": "Add range check before conversion", "residualRisk": "Low after remediation", "location": { - "file": "vuln/vuln_test.go", - "line": 451 + "file": "report/summary.go", + "line": 149 }, - "cyberRuleId": "CYBER017", - "sourceFile": "vuln/vuln_test.go", - "sourceLine": 451 + "cyberRuleId": "CYBER009", + "sourceFile": "report/summary.go", + "sourceLine": 149 }, { - "id": "TARA-318", - "asset": "vuln_test.go", + "id": "TARA-002", + "asset": "cmd_hooks.go", "threat": "World-readable/writable file allows unauthorised data access or tampering", "stride": [ "I", @@ -10498,15 +68,15 @@ "currentControl": "Create file with mode 0640 or stricter", "residualRisk": "Low after remediation", "location": { - "file": "vuln/vuln_test.go", - "line": 459 + "file": "cmd/gofusa/cmd_hooks.go", + "line": 84 }, "cyberRuleId": "CYBER017", - "sourceFile": "vuln/vuln_test.go", - "sourceLine": 459 + "sourceFile": "cmd/gofusa/cmd_hooks.go", + "sourceLine": 84 }, { - "id": "TARA-319", + "id": "TARA-003", "asset": "cmd_coverage.go", "threat": "TOCTOU race allows attacker to substitute file between check and use", "stride": [ @@ -10537,78 +107,12 @@ "cyberRuleId": "CYBER019", "sourceFile": "cmd/gofusa/cmd_coverage.go", "sourceLine": 46 - }, - { - "id": "TARA-320", - "asset": "cmd_v024b_test.go", - "threat": "TOCTOU race allows attacker to substitute file between check and use", - "stride": [ - "E", - "T" - ], - "cwe": "CWE-362", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "negligible" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Open file directly; handle ENOENT/EEXIST atomically" - ], - "currentControl": "Open file directly; handle ENOENT/EEXIST atomically", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 104 - }, - "cyberRuleId": "CYBER019", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 104 - }, - { - "id": "TARA-321", - "asset": "cmd_v024f_test.go", - "threat": "TOCTOU race allows attacker to substitute file between check and use", - "stride": [ - "E", - "T" - ], - "cwe": "CWE-362", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "negligible" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Open file directly; handle ENOENT/EEXIST atomically" - ], - "currentControl": "Open file directly; handle ENOENT/EEXIST atomically", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 825 - }, - "cyberRuleId": "CYBER019", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 825 } ], "summary": { - "assetsAnalyzed": 45, + "assetsAnalyzed": 3, "assetsInProject": 108, - "coveragePct": 41.666666666666664, + "coveragePct": 2.7777777777777777, "assetInventoryMethod": "every non-test .go source file in the project (excluding vendor/testdata/dot-directories) is treated as one candidate asset (CountProjectFiles); assetsAnalyzed counts the distinct files that ended up with at least one CYBER-derived threat entry — this is file-level granularity, not a deeper per-symbol or per-data-flow asset model" } } diff --git a/tara.md b/tara.md index 8ecb11c..9952cce 100644 --- a/tara.md +++ b/tara.md @@ -1,330 +1,12 @@ # Threat Analysis and Risk Assessment (TARA) **Module:** github.com/SoundMatt/go-FuSa -**Generated:** 2026-07-28T22:40:07Z +**Generated:** 2026-07-29T03:16:05Z **Standard:** ISO/SAE 21434:2021 Clause 15 -**Coverage:** 45 / 108 assets (41.7%) +**Coverage:** 3 / 108 assets (2.8%) | ID | Asset | Threat | STRIDE | CWE | Vector | Feasibility | Impact (S/F/O/P) | Risk | Treatment | SL | Mitigation | |---|---|---|---|---|---|---|---|---|---|---|---| -| TARA-001 | impact_test.go | Command injection from variable input enables arbitrary command execution | E/R | CWE-78 | Network | medium | critical/moderate/negligible/negligible | critical | mitigate | 3 | Use exec.Command with fixed command and sanitised args | -| TARA-002 | impact_test.go | Command injection from variable input enables arbitrary command execution | E/R | CWE-78 | Network | medium | critical/moderate/negligible/negligible | critical | mitigate | 3 | Use exec.Command with fixed command and sanitised args | -| TARA-003 | cmd_trace_funccov_test.go | Integer narrowing conversion causes silent data truncation | T/D | CWE-190 | Local | low | moderate/negligible/moderate/negligible | low | mitigate | 1 | Add range check before conversion | -| TARA-004 | cmd_trace_reqcov_test.go | Integer narrowing conversion causes silent data truncation | T/D | CWE-190 | Local | low | moderate/negligible/moderate/negligible | low | mitigate | 1 | Add range check before conversion | -| TARA-005 | summary.go | Integer narrowing conversion causes silent data truncation | T/D | CWE-190 | Local | low | moderate/negligible/moderate/negligible | low | mitigate | 1 | Add range check before conversion | -| TARA-006 | cmd_slsa_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-007 | cmd_v020_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-008 | coverage_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-009 | do178_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-010 | do178_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-011 | fusa_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-012 | fusa_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-013 | fusa_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-014 | iec61508_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-015 | assess_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-016 | iso26262_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-017 | sas_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-018 | sci_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-019 | assess_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-020 | assess_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-021 | assess_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-022 | assess_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-023 | cmd_comp_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-024 | cmd_comp_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-025 | cmd_comp_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-026 | cmd_comp_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-027 | cmd_comp_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-028 | cmd_comp_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-029 | cmd_coupling_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-030 | cmd_coupling_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-031 | cmd_coupling_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-032 | cmd_coupling_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-033 | cmd_hooks.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-034 | cmd_iec62443_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-035 | cmd_pathrel_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-036 | cmd_pathrel_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-037 | cmd_slsa_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-038 | cmd_slsa_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-039 | cmd_v018_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-040 | cmd_v018_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-041 | cmd_v018_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-042 | cmd_v018_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-043 | cmd_v018_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-044 | cmd_v020_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-045 | cmd_v020_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-046 | cmd_v020_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-047 | cmd_v020_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-048 | cmd_v020_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-049 | cmd_v020_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-050 | cmd_v021_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-051 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-052 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-053 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-054 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-055 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-056 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-057 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-058 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-059 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-060 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-061 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-062 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-063 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-064 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-065 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-066 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-067 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-068 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-069 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-070 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-071 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-072 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-073 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-074 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-075 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-076 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-077 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-078 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-079 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-080 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-081 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-082 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-083 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-084 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-085 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-086 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-087 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-088 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-089 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-090 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-091 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-092 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-093 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-094 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-095 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-096 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-097 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-098 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-099 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-100 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-101 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-102 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-103 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-104 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-105 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-106 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-107 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-108 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-109 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-110 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-111 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-112 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-113 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-114 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-115 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-116 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-117 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-118 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-119 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-120 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-121 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-122 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-123 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-124 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-125 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-126 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-127 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-128 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-129 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-130 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-131 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-132 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-133 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-134 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-135 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-136 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-137 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-138 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-139 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-140 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-141 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-142 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-143 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-144 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-145 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-146 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-147 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-148 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-149 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-150 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-151 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-152 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-153 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-154 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-155 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-156 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-157 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-158 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-159 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-160 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-161 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-162 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-163 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-164 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-165 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-166 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-167 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-168 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-169 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-170 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-171 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-172 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-173 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-174 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-175 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-176 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-177 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-178 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-179 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-180 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-181 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-182 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-183 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-184 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-185 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-186 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-187 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-188 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-189 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-190 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-191 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-192 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-193 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-194 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-195 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-196 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-197 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-198 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-199 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-200 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-201 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-202 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-203 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-204 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-205 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-206 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-207 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-208 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-209 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-210 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-211 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-212 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-213 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-214 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-215 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-216 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-217 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-218 | conform_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-219 | conform_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-220 | comp_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-221 | comp_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-222 | comp_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-223 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-224 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-225 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-226 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-227 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-228 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-229 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-230 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-231 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-232 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-233 | coupling_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-234 | coverage_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-235 | coverage_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-236 | disposition_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-237 | disposition_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-238 | disposition_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-239 | disposition_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-240 | do178_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-241 | do178_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-242 | do178_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-243 | do178_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-244 | do178_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-245 | do178_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-246 | fusa_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-247 | fusa_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-248 | fusa_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-249 | fusa_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-250 | hara_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-251 | iec61508_gap_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-252 | iec61508_gap_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-253 | iec61508_gap_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-254 | iec61508_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-255 | iec61508_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-256 | iec61508_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-257 | iec61508_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-258 | iec61508_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-259 | iec61508_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-260 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-261 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-262 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-263 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-264 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-265 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-266 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-267 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-268 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-269 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-270 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-271 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-272 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-273 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-274 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-275 | iso21434_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-276 | iso21434_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-277 | iso21434_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-278 | iso21434_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-279 | iso26262_gap_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-280 | iso26262_gap_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-281 | iso26262_gap_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-282 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-283 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-284 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-285 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-286 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-287 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-288 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-289 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-290 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-291 | metrics_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-292 | metrics_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-293 | metrics_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-294 | metrics_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-295 | metrics_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-296 | pr_engine_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-297 | sas_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-298 | sas_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-299 | sci_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-300 | sci_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-301 | sci_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-302 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-303 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-304 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-305 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-306 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-307 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-308 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-309 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-310 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-311 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-312 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-313 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-314 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-315 | unece_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-316 | unece_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-317 | vuln_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-318 | vuln_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-319 | cmd_coverage.go | TOCTOU race allows attacker to substitute file between check and use | E/T | CWE-362 | Local | medium | moderate/negligible/negligible/negligible | medium | mitigate | 2 | Open file directly; handle ENOENT/EEXIST atomically | -| TARA-320 | cmd_v024b_test.go | TOCTOU race allows attacker to substitute file between check and use | E/T | CWE-362 | Local | medium | moderate/negligible/negligible/negligible | medium | mitigate | 2 | Open file directly; handle ENOENT/EEXIST atomically | -| TARA-321 | cmd_v024f_test.go | TOCTOU race allows attacker to substitute file between check and use | E/T | CWE-362 | Local | medium | moderate/negligible/negligible/negligible | medium | mitigate | 2 | Open file directly; handle ENOENT/EEXIST atomically | +| TARA-001 | summary.go | Integer narrowing conversion causes silent data truncation | T/D | CWE-190 | Local | low | moderate/negligible/moderate/negligible | low | mitigate | 1 | Add range check before conversion | +| TARA-002 | cmd_hooks.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | +| TARA-003 | cmd_coverage.go | TOCTOU race allows attacker to substitute file between check and use | E/T | CWE-362 | Local | medium | moderate/negligible/negligible/negligible | medium | mitigate | 2 | Open file directly; handle ENOENT/EEXIST atomically | diff --git a/tara/tara.go b/tara/tara.go index c4b53c8..788f711 100644 --- a/tara/tara.go +++ b/tara/tara.go @@ -140,7 +140,18 @@ func Scan(projectRoot string, cyberFindings []fusa.Finding) (*Report, error) { Module: readModule(projectRoot), } - for i, f := range cyberFindings { + // §1.6 rule 4 (Real referents only, MUST): threats[] entries must name a + // real project asset, never a test fixture mistaken for one. cyber.Scan + // legitimately includes findings in _test.go files (security issues in + // test code are still worth flagging there), but those findings aren't + // real deployed assets, so they're excluded here before becoming TARA + // "asset under threat" entries — the same _test.go exclusion + // CountProjectFiles already applies to the assetsInProject denominator. + i := 0 + for _, f := range cyberFindings { + if strings.HasSuffix(f.Location.File, "_test.go") { + continue + } meta, ok := ruleMeta[f.RuleID] if !ok { meta = threatMeta{ @@ -181,6 +192,7 @@ func Scan(projectRoot string, cyberFindings []fusa.Finding) (*Report, error) { SourceLine: f.Location.Line, } report.Entries = append(report.Entries, entry) + i++ } sort.Slice(report.Entries, func(i, j int) bool { diff --git a/tara/tara_test.go b/tara/tara_test.go index 6670ce6..5a22490 100644 --- a/tara/tara_test.go +++ b/tara/tara_test.go @@ -109,6 +109,49 @@ func TestScan_IDSequential(t *testing.T) { } } +// TestScan_ExcludesTestFixtureFindings is a regression test for threats[] +// being sourced from _test.go fixtures instead of real project assets +// (x-FuSa spec §1.6 rule 4 MUST: "Real referents only" — a `file` entry MUST +// refer to an actual file in the analyzed project, not a test fixture +// mistaken for one). cyber.Scan findings in _test.go files are legitimate +// for check's own CYBER category, but MUST NOT become TARA "asset under +// threat" entries. +// +//fusa:test REQ-TARA003 +func TestScan_ExcludesTestFixtureFindings(t *testing.T) { + dir := testutil.ProjectDir(t, map[string]string{ + "go.mod": "module example.com/test\ngo 1.22\n", + }) + findings := []fusa.Finding{ + makeFinding("CYBER001", fusa.SeverityWarning, "impact/impact_test.go", 23), + makeFinding("CYBER002", fusa.SeverityWarning, "real/asset.go", 10), + makeFinding("CYBER003", fusa.SeverityInfo, "another_test.go", 5), + } + report, err := tara.Scan(dir, findings) + if err != nil { + t.Fatalf("Scan: %v", err) + } + if len(report.Entries) != 1 { + t.Fatalf("expected 1 non-test entry, got %d: %+v", len(report.Entries), report.Entries) + } + for _, e := range report.Entries { + if strings.HasSuffix(e.SourceFile, "_test.go") { + t.Errorf("entry %q sourced from test fixture %q, want real project file only", e.ID, e.SourceFile) + } + } + if report.Entries[0].SourceFile != "real/asset.go" { + t.Errorf("SourceFile = %q, want %q", report.Entries[0].SourceFile, "real/asset.go") + } + // The surviving entry's ID should still be sequential from TARA-001, not + // carry a gap from the filtered-out test-fixture entries. + if report.Entries[0].ID != "TARA-001" { + t.Errorf("ID = %q, want \"TARA-001\" (no gap from filtered entries)", report.Entries[0].ID) + } + if report.Summary.AssetsAnalyzed != 1 { + t.Errorf("summary.assetsAnalyzed = %d, want 1 (test fixtures excluded)", report.Summary.AssetsAnalyzed) + } +} + func padded(n int) string { if n < 10 { return "00" + string(rune('0'+n)) diff --git a/unece/unece.go b/unece/unece.go index 6113488..eaff977 100644 --- a/unece/unece.go +++ b/unece/unece.go @@ -157,7 +157,10 @@ func Render(w io.Writer, rep *Report, format string) error { } func toGapReport(rep *Report) *gapreport.Report { - gr := gapreport.New(rep.Project, "UN R.155") + // §2.4.1: standard is a canonical lowercase id, never a display string — + // this package assesses UN R.155 only (unece → "unece-r155" and/or + // "unece-r156"; go-FuSa currently implements the R.155 part). + gr := gapreport.New(rep.Project, "unece-r155") for _, cat := range rep.Categories { gobj := gapreport.Objective{ ID: cat.ID, diff --git a/unece/unece_test.go b/unece/unece_test.go index 8b09fd5..081a0e1 100644 --- a/unece/unece_test.go +++ b/unece/unece_test.go @@ -187,8 +187,10 @@ func TestRender_JSON(t *testing.T) { if err := json.Unmarshal(buf.Bytes(), &parsed); err != nil { t.Fatalf("Render json: invalid JSON: %v", err) } - if parsed.Standard == "" { - t.Error("missing standard field in JSON") + // §2.4.1: standard MUST be the canonical lowercase id, never a display + // string like "UN R.155". + if parsed.Standard != "unece-r155" { + t.Errorf("standard = %q, want canonical id \"unece-r155\"", parsed.Standard) } if len(parsed.Objectives) == 0 { t.Error("expected objectives in JSON output")