From 7cf40bb03b45ecded847b569f4f5c95327719300 Mon Sep 17 00:00:00 2001 From: Matt Jones <47545907+SoundMatt@users.noreply.github.com> Date: Tue, 28 Jul 2026 20:13:20 -0700 Subject: [PATCH 1/8] fix(sarif): tool.driver.name is canonical "go-FuSa", not "gofusa" (#81) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit x-FuSa spec §2.9 MUST: tool.driver.name = the §1.1 tool name ("go-FuSa"), not the "gofusa" binary name. check --format sarif hardcoded the binary name instead, so the SARIF tool identity diverged from every other JSON document's "tool" field (which already correctly emits "go-FuSa"), violating §2.9's format-invariance rule in spirit. Adds a regression test asserting tool.driver.name == "go-FuSa" in the rendered SARIF log. Closes #81 Signed-off-by: Matt Jones <47545907+SoundMatt@users.noreply.github.com> --- sarif/sarif.go | 4 +++- sarif/sarif_test.go | 29 +++++++++++++++++++++++++++++ 2 files changed, 32 insertions(+), 1 deletion(-) diff --git a/sarif/sarif.go b/sarif/sarif.go index f03b5a2..584672c 100644 --- a/sarif/sarif.go +++ b/sarif/sarif.go @@ -103,7 +103,9 @@ func Render(w io.Writer, findings []fusa.Finding, toolVersion string) error { Runs: []sarifRun{{ Tool: sarifTool{ Driver: sarifDriver{ - Name: "gofusa", + // §2.9 MUST: tool.driver.name is the canonical `tool` + // name (§1.1, "go-FuSa"), not the "gofusa" binary name. + Name: "go-FuSa", Version: toolVersion, InformationURI: "https://github.com/SoundMatt/go-FuSa", Rules: rules, diff --git a/sarif/sarif_test.go b/sarif/sarif_test.go index fa6d11a..e4d67c5 100644 --- a/sarif/sarif_test.go +++ b/sarif/sarif_test.go @@ -42,6 +42,35 @@ func TestRender_SARIFVersion(t *testing.T) { } } +// TestRender_DriverName verifies tool.driver.name is the canonical §1.1 +// tool name "go-FuSa" — never the "gofusa" binary name — per §2.9's MUST. +// +//fusa:test REQ-SARIF002 +func TestRender_DriverName(t *testing.T) { + var buf bytes.Buffer + if err := sarif.Render(&buf, nil, "0.17.0"); err != nil { + t.Fatalf("Render: %v", err) + } + var out struct { + Runs []struct { + Tool struct { + Driver struct { + Name string `json:"name"` + } `json:"driver"` + } `json:"tool"` + } `json:"runs"` + } + if err := json.Unmarshal(buf.Bytes(), &out); err != nil { + t.Fatalf("invalid JSON: %v\n%s", err, buf.String()) + } + if len(out.Runs) != 1 { + t.Fatalf("expected 1 run, got %d", len(out.Runs)) + } + if out.Runs[0].Tool.Driver.Name != "go-FuSa" { + t.Errorf("tool.driver.name = %q, want canonical tool name \"go-FuSa\"", out.Runs[0].Tool.Driver.Name) + } +} + func TestRender_FindingLevel(t *testing.T) { cases := []struct { sev fusa.Severity From db9d0f7b540293bb33300dc91ef9d98894bd8538 Mon Sep 17 00:00:00 2001 From: Matt Jones <47545907+SoundMatt@users.noreply.github.com> Date: Tue, 28 Jul 2026 20:13:31 -0700 Subject: [PATCH 2/8] fix(gapreport): standards gap-report standard field uses canonical id (#77) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit x-FuSa spec §2.4.1 MUST: "standard" is a canonical lowercase id (e.g. "iso26262"), never a display string. 5 of 6 standards commands (all but slsa) passed a hand-built display string into gapreport.New instead: iso26262 -> "ISO 26262 ASIL-B" now -> "iso26262" do178 -> "DO-178C DAL-B" now -> "do178c" iec61508 -> "IEC 61508 SIL-2" now -> "iec61508" iso21434 -> "ISO 21434 CAL-1" now -> "iso21434" unece -> "UN R.155" now -> "unece-r155" iec62443 -> "iec62443" now -> "iec62443-4-2" (missing part suffix) The ASIL/SIL/DAL/CAL rating has no home in the canonical enum (§2.4.1) and is dropped from the field entirely — it remains available on each package's internal Report struct (rep.ASIL/DAL/SIL/CAL), it just never belonged in the canonical gap-report's "standard" value. iec62443's fix also adds the spec-mandated multi-part suffix identifying which IEC 62443 part is supported (this package assesses IEC 62443-4-2 per its own package doc). slsa already emitted the correct "slsa" and is unchanged. Adds/tightens a JSON-envelope regression test in each affected package asserting the exact canonical id. Closes #77 Signed-off-by: Matt Jones <47545907+SoundMatt@users.noreply.github.com> --- do178/do178.go | 5 ++++- do178/do178_test.go | 10 ++++++++++ iec61508/iec61508.go | 5 ++++- iec61508/iec61508_test.go | 10 ++++++++++ iec62443/assess.go | 4 +++- iec62443/assess_test.go | 6 ++++-- iso21434/iso21434.go | 5 ++++- iso21434/iso21434_test.go | 9 +++++++++ iso26262/iso26262.go | 5 ++++- iso26262/iso26262_test.go | 10 ++++++++++ unece/unece.go | 5 ++++- unece/unece_test.go | 6 ++++-- 12 files changed, 70 insertions(+), 10 deletions(-) diff --git a/do178/do178.go b/do178/do178.go index 6e07776..843f5a4 100644 --- a/do178/do178.go +++ b/do178/do178.go @@ -513,7 +513,10 @@ func Render(w io.Writer, rep *Report, format string) error { } func toGapReport(rep *Report) *gapreport.Report { - gr := gapreport.New(rep.Project, "DO-178C "+string(rep.DAL)) + // §2.4.1: standard is a canonical lowercase id, never a display string — + // the DAL rating has no home in the canonical enum and is dropped here + // (it remains available on the internal Report via rep.DAL). + gr := gapreport.New(rep.Project, "do178c") for _, obj := range rep.Objectives { if obj.Status == StatusNA { continue diff --git a/do178/do178_test.go b/do178/do178_test.go index a3ff8ea..fc87d53 100644 --- a/do178/do178_test.go +++ b/do178/do178_test.go @@ -2,6 +2,7 @@ package do178_test import ( "bytes" + "encoding/json" "os" "path/filepath" "strings" @@ -160,6 +161,15 @@ func TestRender_JSON(t *testing.T) { if !strings.Contains(buf.String(), `"standard"`) { t.Error("missing standard field in JSON") } + // §2.4.1: standard MUST be the canonical lowercase id, never a display + // string like "DO-178C DAL-B". + var doc map[string]interface{} + if err := json.Unmarshal(buf.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v", err) + } + if doc["standard"] != "do178c" { + t.Errorf("standard = %v, want canonical id \"do178c\"", doc["standard"]) + } } //fusa:test REQ-DO178-003 diff --git a/iec61508/iec61508.go b/iec61508/iec61508.go index d8fd6cc..60293a2 100644 --- a/iec61508/iec61508.go +++ b/iec61508/iec61508.go @@ -356,7 +356,10 @@ func Render(w io.Writer, rep *Report, format string) error { } func toGapReport(rep *Report) *gapreport.Report { - gr := gapreport.New(rep.Project, "IEC 61508 "+string(rep.SIL)) + // §2.4.1: standard is a canonical lowercase id, never a display string — + // the SIL rating has no home in the canonical enum and is dropped here + // (it remains available on the internal Report via rep.SIL). + gr := gapreport.New(rep.Project, "iec61508") for _, obj := range rep.Objectives { if obj.Status == StatusNA { continue diff --git a/iec61508/iec61508_test.go b/iec61508/iec61508_test.go index 344025a..e39dbfc 100644 --- a/iec61508/iec61508_test.go +++ b/iec61508/iec61508_test.go @@ -3,6 +3,7 @@ package iec61508_test import ( "bytes" "context" + "encoding/json" "os" "path/filepath" "strings" @@ -165,6 +166,15 @@ func TestRender_JSON(t *testing.T) { if !strings.Contains(buf.String(), `"standard"`) { t.Error("missing standard field in JSON") } + // §2.4.1: standard MUST be the canonical lowercase id, never a display + // string like "IEC 61508 SIL-2". + var doc map[string]interface{} + if err := json.Unmarshal(buf.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v", err) + } + if doc["standard"] != "iec61508" { + t.Errorf("standard = %v, want canonical id \"iec61508\"", doc["standard"]) + } } //fusa:test REQ-IEC61508-003 diff --git a/iec62443/assess.go b/iec62443/assess.go index 6e96867..f49e32a 100644 --- a/iec62443/assess.go +++ b/iec62443/assess.go @@ -274,7 +274,9 @@ func Render(w io.Writer, rep *Report, format string) error { } func toGapReport(rep *Report) *gapreport.Report { - gr := gapreport.New(rep.Project, "iec62443") + // §2.4.1: standard is a canonical lowercase id with the required part + // suffix — this package assesses IEC 62443-4-2 (see package doc). + gr := gapreport.New(rep.Project, "iec62443-4-2") for _, obj := range rep.Objectives { gobj := gapreport.Objective{ ID: obj.ID, diff --git a/iec62443/assess_test.go b/iec62443/assess_test.go index 01fffb7..e23bcb0 100644 --- a/iec62443/assess_test.go +++ b/iec62443/assess_test.go @@ -220,8 +220,10 @@ func TestRender_JSON(t *testing.T) { if err := json.Unmarshal(buf.Bytes(), &doc); err != nil { t.Fatalf("JSON parse: %v", err) } - if doc["standard"] != "iec62443" { - t.Errorf("standard = %v, want iec62443", doc["standard"]) + // §2.4.1: standard is the canonical lowercase id with the required part + // suffix, never a display string or a bare "iec62443". + if doc["standard"] != "iec62443-4-2" { + t.Errorf("standard = %v, want iec62443-4-2", doc["standard"]) } if doc["kind"] != "gap-report" { t.Errorf("kind = %v, want gap-report", doc["kind"]) diff --git a/iso21434/iso21434.go b/iso21434/iso21434.go index 5f81d48..9c50b6f 100644 --- a/iso21434/iso21434.go +++ b/iso21434/iso21434.go @@ -217,7 +217,10 @@ func Render(w io.Writer, rep *Report, format string) error { } func toGapReport(rep *Report) *gapreport.Report { - gr := gapreport.New(rep.Project, "ISO 21434 "+string(rep.CAL)) + // §2.4.1: standard is a canonical lowercase id, never a display string — + // the CAL rating has no home in the canonical enum and is dropped here + // (it remains available on the internal Report via rep.CAL). + gr := gapreport.New(rep.Project, "iso21434") for _, obj := range rep.Objectives { if obj.Status == StatusNA { continue diff --git a/iso21434/iso21434_test.go b/iso21434/iso21434_test.go index a4233d4..7e6db79 100644 --- a/iso21434/iso21434_test.go +++ b/iso21434/iso21434_test.go @@ -230,6 +230,15 @@ func TestRender_JSON(t *testing.T) { if len(parsed.Objectives) == 0 { t.Error("expected objectives in JSON output") } + // §2.4.1: standard MUST be the canonical lowercase id, never a display + // string like "ISO 21434 CAL-2". + var doc map[string]interface{} + if err := json.Unmarshal(buf.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v", err) + } + if doc["standard"] != "iso21434" { + t.Errorf("standard = %v, want canonical id \"iso21434\"", doc["standard"]) + } } // TestRender_UnknownFormat verifies error on unknown format. diff --git a/iso26262/iso26262.go b/iso26262/iso26262.go index aea7dcb..fcd598f 100644 --- a/iso26262/iso26262.go +++ b/iso26262/iso26262.go @@ -328,7 +328,10 @@ func Render(w io.Writer, rep *Report, format string) error { // toGapReport converts the internal Report to the canonical §9.3 gap-report shape. func toGapReport(rep *Report) *gapreport.Report { - gr := gapreport.New(rep.Project, "ISO 26262 "+string(rep.ASIL)) + // §2.4.1: standard is a canonical lowercase id, never a display string — + // the ASIL rating has no home in the canonical enum and is dropped here + // (it remains available on the internal Report via rep.ASIL). + gr := gapreport.New(rep.Project, "iso26262") for _, obj := range rep.Objectives { if obj.Status == StatusNA { continue diff --git a/iso26262/iso26262_test.go b/iso26262/iso26262_test.go index 13c512b..346634e 100644 --- a/iso26262/iso26262_test.go +++ b/iso26262/iso26262_test.go @@ -3,6 +3,7 @@ package iso26262_test import ( "bytes" "context" + "encoding/json" "os" "path/filepath" "strings" @@ -164,6 +165,15 @@ func TestRender_JSON(t *testing.T) { if !strings.Contains(buf.String(), `"standard"`) { t.Error("missing standard field in JSON") } + // §2.4.1: standard MUST be the canonical lowercase id, never a display + // string like "ISO 26262 ASIL-B". + var doc map[string]interface{} + if err := json.Unmarshal(buf.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v", err) + } + if doc["standard"] != "iso26262" { + t.Errorf("standard = %v, want canonical id \"iso26262\"", doc["standard"]) + } } //fusa:test REQ-ISO26262-003 diff --git a/unece/unece.go b/unece/unece.go index 6113488..eaff977 100644 --- a/unece/unece.go +++ b/unece/unece.go @@ -157,7 +157,10 @@ func Render(w io.Writer, rep *Report, format string) error { } func toGapReport(rep *Report) *gapreport.Report { - gr := gapreport.New(rep.Project, "UN R.155") + // §2.4.1: standard is a canonical lowercase id, never a display string — + // this package assesses UN R.155 only (unece → "unece-r155" and/or + // "unece-r156"; go-FuSa currently implements the R.155 part). + gr := gapreport.New(rep.Project, "unece-r155") for _, cat := range rep.Categories { gobj := gapreport.Objective{ ID: cat.ID, diff --git a/unece/unece_test.go b/unece/unece_test.go index 8b09fd5..081a0e1 100644 --- a/unece/unece_test.go +++ b/unece/unece_test.go @@ -187,8 +187,10 @@ func TestRender_JSON(t *testing.T) { if err := json.Unmarshal(buf.Bytes(), &parsed); err != nil { t.Fatalf("Render json: invalid JSON: %v", err) } - if parsed.Standard == "" { - t.Error("missing standard field in JSON") + // §2.4.1: standard MUST be the canonical lowercase id, never a display + // string like "UN R.155". + if parsed.Standard != "unece-r155" { + t.Errorf("standard = %q, want canonical id \"unece-r155\"", parsed.Standard) } if len(parsed.Objectives) == 0 { t.Error("expected objectives in JSON output") From b52b4be9c45ea3d95d956e3b763207299c82c784 Mon Sep 17 00:00:00 2001 From: Matt Jones <47545907+SoundMatt@users.noreply.github.com> Date: Tue, 28 Jul 2026 20:13:59 -0700 Subject: [PATCH 3/8] fix(cli): check/report envelope standard field uses canonical id (#78) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit x-FuSa spec §2.4.1 MUST: the JSON envelope's "standard" is a canonical lowercase id, never a display string. cmd_check.go/cmd_report.go wrote cfg.Project.Standard verbatim into rep.Standard, leaking go-FuSa's internal uppercase/no-space Standard enum spelling (e.g. "ISO26262") into the envelope instead of the canonical "iso26262". Adds config.Standard.CanonicalID(), the inverse of the existing internal canonicalStandard mapping, and uses it at both call sites. StandardGeneric/empty both map to "" so the omitempty envelope field is dropped rather than emitting a non-canonical value. Closes #78 Signed-off-by: Matt Jones <47545907+SoundMatt@users.noreply.github.com> --- .fusa-reqs.json | 6 ++ cmd/gofusa/cmd_check.go | 4 +- cmd/gofusa/cmd_envelope_standard_test.go | 86 ++++++++++++++++++++++++ cmd/gofusa/cmd_report.go | 4 +- config/config.go | 27 ++++++++ config/config_test.go | 27 ++++++++ 6 files changed, 152 insertions(+), 2 deletions(-) create mode 100644 cmd/gofusa/cmd_envelope_standard_test.go diff --git a/.fusa-reqs.json b/.fusa-reqs.json index 96cb95c..86958e8 100644 --- a/.fusa-reqs.json +++ b/.fusa-reqs.json @@ -2436,6 +2436,12 @@ "text": "Config accepts both go-FuSa's legacy .fusa.json shape (top-level \"version\", \"standard\"/\"asil\"/\"sil\" nested under \"project\") and the x-FuSa spec §1.2.1 shape (top-level \"configVersion\", top-level \"standard\"/\"asil\"/\"sil\"/\"dal\", and the spec's legacy flat \"project\": \"name\" string). Load and Save normalise whichever fields are present into both locations, canonicalising the standard id case-insensitively onto go-FuSa's internal enum, so a spec-compliant .fusa.json written by another x-FuSa tool loads without error and go-FuSa's own init output satisfies both shapes at once.", "standard": "x-FuSa" }, + { + "id": "REQ-CFG010", + "title": "Standard.CanonicalID maps the internal enum back to the x-FuSa spec §2.4.1 canonical lowercase id", + "text": "Standard.CanonicalID() is the inverse of the internal canonicalStandard mapping: it returns the x-FuSa spec §2.4.1 canonical lowercase standard id (e.g. \"iso26262\") for go-FuSa's internal enum value (e.g. StandardISO26262), so JSON envelope fields (check/report's top-level \"standard\", §3.2) never leak the internal uppercase, no-space enum spelling. StandardGeneric and an empty Standard both map to the empty string so callers omit the field rather than emit a non-canonical value.", + "standard": "x-FuSa spec section 2.4.1" + }, { "id": "REQ-QUALIFY010", "title": "Per-case qualification result status enum (PASS/FAIL/SKIP/ERROR)", diff --git a/cmd/gofusa/cmd_check.go b/cmd/gofusa/cmd_check.go index d8852ed..1aeda4b 100644 --- a/cmd/gofusa/cmd_check.go +++ b/cmd/gofusa/cmd_check.go @@ -73,7 +73,9 @@ func runCheck(args []string, stdout, stderr io.Writer) int { rep := report.New(projectRoot, result.Findings) rep.NoSummary = *noSummary - rep.Standard = string(cfg.Project.Standard) + // §2.4.1: the envelope's "standard" is a canonical lowercase id, never + // go-FuSa's internal uppercase/no-space enum spelling. + rep.Standard = cfg.Project.Standard.CanonicalID() switch cfg.Project.Standard { case "IEC61508": rep.SIL = cfg.Project.ASIL diff --git a/cmd/gofusa/cmd_envelope_standard_test.go b/cmd/gofusa/cmd_envelope_standard_test.go new file mode 100644 index 0000000..43ea697 --- /dev/null +++ b/cmd/gofusa/cmd_envelope_standard_test.go @@ -0,0 +1,86 @@ +package main + +import ( + "bytes" + "encoding/json" + "path/filepath" + "testing" + + "github.com/SoundMatt/go-FuSa/config" +) + +// ─── check/report envelope "standard" field (x-FuSa spec §2.4.1) ───────────── +// +// Regression coverage for: the JSON envelope's top-level "standard" field +// must be the canonical lowercase id (e.g. "iso26262"), never go-FuSa's +// internal uppercase/no-space Standard enum spelling (e.g. "ISO26262"). + +//fusa:test REQ-CLI005 +func TestRunCheck_JSONFormat_CanonicalStandardID(t *testing.T) { + dir := t.TempDir() + cfg := config.Default("github.com/x/y", "y") + cfg.Standard = config.StandardISO26262 + cfg.Project.Standard = config.StandardISO26262 + if err := config.Save(filepath.Join(dir, config.ConfigFile), cfg); err != nil { + t.Fatalf("Save config: %v", err) + } + + var out, errBuf bytes.Buffer + code := runCheck([]string{"--dir", dir, "--format", "json"}, &out, &errBuf) + if code != 0 && code != 1 { + t.Fatalf("unexpected exit %d: %s", code, errBuf.String()) + } + + var doc map[string]interface{} + if err := json.Unmarshal(out.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v\n%s", err, out.String()) + } + if doc["standard"] != "iso26262" { + t.Errorf("check envelope standard = %v, want canonical id \"iso26262\" (not \"ISO26262\")", doc["standard"]) + } +} + +//fusa:test REQ-CLI005 +func TestRunReport_JSONFormat_CanonicalStandardID(t *testing.T) { + dir := t.TempDir() + cfg := config.Default("github.com/x/y", "y") + cfg.Standard = config.StandardDO178C + cfg.Project.Standard = config.StandardDO178C + if err := config.Save(filepath.Join(dir, config.ConfigFile), cfg); err != nil { + t.Fatalf("Save config: %v", err) + } + + var out, errBuf bytes.Buffer + code := runReport([]string{"--dir", dir, "--format", "json"}, &out, &errBuf) + if code != 0 && code != 1 { + t.Fatalf("unexpected exit %d: %s", code, errBuf.String()) + } + + var doc map[string]interface{} + if err := json.Unmarshal(out.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v\n%s", err, out.String()) + } + if doc["standard"] != "do178c" { + t.Errorf("report envelope standard = %v, want canonical id \"do178c\" (not \"DO178C\")", doc["standard"]) + } +} + +//fusa:test REQ-CLI005 +func TestRunCheck_JSONFormat_GenericStandardOmitted(t *testing.T) { + dir := t.TempDir() + // config.Default already uses StandardGeneric; no .fusa.json written so + // config.Default("", ...) applies via ErrNoConfig fallback. + var out, errBuf bytes.Buffer + code := runCheck([]string{"--dir", dir, "--format", "json"}, &out, &errBuf) + if code != 0 && code != 1 { + t.Fatalf("unexpected exit %d: %s", code, errBuf.String()) + } + + var doc map[string]interface{} + if err := json.Unmarshal(out.Bytes(), &doc); err != nil { + t.Fatalf("JSON parse: %v\n%s", err, out.String()) + } + if v, ok := doc["standard"]; ok && v != "" { + t.Errorf("check envelope standard for generic project = %v, want omitted/empty", v) + } +} diff --git a/cmd/gofusa/cmd_report.go b/cmd/gofusa/cmd_report.go index 428d8fd..faa50bc 100644 --- a/cmd/gofusa/cmd_report.go +++ b/cmd/gofusa/cmd_report.go @@ -72,7 +72,9 @@ func runReport(args []string, stdout, stderr io.Writer) int { } rep := report.New(projectRoot, result.Findings) - rep.Standard = string(cfg.Project.Standard) + // §2.4.1: the envelope's "standard" is a canonical lowercase id, never + // go-FuSa's internal uppercase/no-space enum spelling. + rep.Standard = cfg.Project.Standard.CanonicalID() switch cfg.Project.Standard { case "IEC61508": rep.SIL = cfg.Project.ASIL diff --git a/config/config.go b/config/config.go index e0445d2..e3e7c64 100644 --- a/config/config.go +++ b/config/config.go @@ -256,6 +256,33 @@ func canonicalStandard(s Standard) Standard { } } +// CanonicalID returns the x-FuSa spec §2.4.1 canonical lowercase standard id +// for s (e.g. StandardISO26262 -> "iso26262"), the inverse of +// canonicalStandard. StandardGeneric and an empty Standard both map to "" +// — §2.4.1 defines no id for "generic", so callers writing a JSON envelope's +// `standard` field (§3.2) MUST omit the field rather than emit a +// non-canonical value. A value that isn't one of go-FuSa's internal +// constants is lowercased and returned verbatim (§2.4.1: an unrecognised id +// MUST be treated verbatim, never rejected). +// +//fusa:req REQ-CFG010 +func (s Standard) CanonicalID() string { + switch s { + case StandardISO26262: + return "iso26262" + case StandardIEC61508: + return "iec61508" + case StandardISO21434: + return "iso21434" + case StandardDO178C: + return "do178c" + case StandardGeneric, "": + return "" + default: + return strings.ToLower(string(s)) + } +} + // Validate returns an error if cfg contains inconsistencies. // //fusa:req REQ-CFG003 diff --git a/config/config_test.go b/config/config_test.go index 466f6e7..27c65ad 100644 --- a/config/config_test.go +++ b/config/config_test.go @@ -159,6 +159,33 @@ func TestStandard_Identifiers(t *testing.T) { } } +// TestStandard_CanonicalID verifies Standard.CanonicalID() is the inverse of +// the internal canonicalStandard mapping, producing the x-FuSa spec §2.4.1 +// canonical lowercase id — never go-FuSa's internal uppercase/no-space +// enum spelling (e.g. "ISO26262"), and never the empty/"generic" value as +// anything but "". +// +//fusa:test REQ-CFG010 +func TestStandard_CanonicalID(t *testing.T) { + cases := []struct { + std config.Standard + want string + }{ + {config.StandardISO26262, "iso26262"}, + {config.StandardIEC61508, "iec61508"}, + {config.StandardISO21434, "iso21434"}, + {config.StandardDO178C, "do178c"}, + {config.StandardGeneric, ""}, + {config.Standard(""), ""}, + {config.Standard("unrecognised-id"), "unrecognised-id"}, + } + for _, c := range cases { + if got := c.std.CanonicalID(); got != c.want { + t.Errorf("Standard(%q).CanonicalID() = %q, want %q", c.std, got, c.want) + } + } +} + func TestSave_FileCreated(t *testing.T) { dir := t.TempDir() path := filepath.Join(dir, config.ConfigFile) From 48b56336e9c458112161492c0279241fce55aff6 Mon Sep 17 00:00:00 2001 From: Matt Jones <47545907+SoundMatt@users.noreply.github.com> Date: Tue, 28 Jul 2026 20:14:10 -0700 Subject: [PATCH 4/8] fix(cli): tara --output-dir auto-creates the directory (#83) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit tara's --output-dir handling didn't create the target directory, unlike its sibling §9.2 evidence-artifact commands fmea/safety-case, which both already call os.MkdirAll. Running "gofusa tara --output-dir " surfaced a raw "open ... no such file or directory" OS error and exited 3, instead of writing tara.json/tara.md like the other two commands do into a freshly created directory. Adds an os.MkdirAll(outDir, 0o750) call matching fmea/safety-case, and strengthens the existing TestRunTara_WithOutputDir test to stop pre-creating the output directory (which had been silently masking this exact bug) and assert both tara.json and tara.md now exist afterward. Closes #83 Signed-off-by: Matt Jones <47545907+SoundMatt@users.noreply.github.com> --- cmd/gofusa/cmd_tara.go | 7 +++++++ cmd/gofusa/cmd_v024f_test.go | 12 +++++++++--- 2 files changed, 16 insertions(+), 3 deletions(-) diff --git a/cmd/gofusa/cmd_tara.go b/cmd/gofusa/cmd_tara.go index ab08d6e..ed32d7b 100644 --- a/cmd/gofusa/cmd_tara.go +++ b/cmd/gofusa/cmd_tara.go @@ -80,6 +80,13 @@ func runTara(args []string, stdout, stderr io.Writer) int { return fusa.ExitRuntime } + // Auto-create --output-dir if it doesn't exist yet, matching the + // fmea/safety-case sibling commands' §9.2 --output-dir handling. + if err := os.MkdirAll(outDir, 0o750); err != nil { + fmt.Fprintf(stderr, "gofusa tara: mkdir: %v\n", err) + return fusa.ExitRuntime + } + // x-FuSa spec §1.6.2 MUST: carry forward any existing attestation from // the prior saved tara.json before overwriting it — a fresh tara.Scan // never has one of its own. Staleness (a content change since the diff --git a/cmd/gofusa/cmd_v024f_test.go b/cmd/gofusa/cmd_v024f_test.go index f875454..c7fa046 100644 --- a/cmd/gofusa/cmd_v024f_test.go +++ b/cmd/gofusa/cmd_v024f_test.go @@ -601,10 +601,10 @@ func TestRunDo178_InvalidDALv2(t *testing.T) { //fusa:test REQ-CLI019 func TestRunTara_WithOutputDir(t *testing.T) { dir := t.TempDir() + // outDir is deliberately NOT pre-created — tara --output-dir MUST + // auto-create it, matching fmea/safety-case's identical --output-dir + // handling (they don't require the caller to mkdir first either). outDir := filepath.Join(dir, "tara-out") - if err := os.MkdirAll(outDir, 0o750); err != nil { - t.Fatal(err) - } if err := os.WriteFile(filepath.Join(dir, "go.mod"), []byte("module example.com/test\n\ngo 1.22\n"), 0o644); err != nil { t.Fatal(err) } @@ -613,6 +613,12 @@ func TestRunTara_WithOutputDir(t *testing.T) { if code != 0 { t.Errorf("unexpected exit %d: %s", code, errBuf.String()) } + if _, err := os.Stat(filepath.Join(outDir, "tara.json")); err != nil { + t.Errorf("tara.json not created in auto-created output dir: %v", err) + } + if _, err := os.Stat(filepath.Join(outDir, "tara.md")); err != nil { + t.Errorf("tara.md not created in auto-created output dir: %v", err) + } } // ─── runMetricsRecord error paths ───────────────────────────────────────────── From 18952dd4117a85361aa8a5de39c015c382604163 Mon Sep 17 00:00:00 2001 From: Matt Jones <47545907+SoundMatt@users.noreply.github.com> Date: Tue, 28 Jul 2026 20:14:33 -0700 Subject: [PATCH 5/8] =?UTF-8?q?fix(cli):=20qualify=20accepts=20--dir/--for?= =?UTF-8?q?mat=20flags=20per=20x-FuSa=20spec=20=C2=A76=20(#82)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit §6: "fusa qualify [--dir ] [--format text|json] [--output ]". gofusa qualify's flag set only defined -output plus the qualification-metadata flags — passing --dir or --format failed with "flag provided but not defined" (exit 2), including the exact "--format json" invocation §6's own machine-contract language calls out as required ("Any command whose JSON FuSaOps consumes MUST support --format json"). Adds both flags: --format is validated to text/json (both currently produce the same qualification report — the qualification suite itself always runs the same built-in synthetic cases regardless of project content, so there's no format-dependent content to diverge on) and --dir now resolves a projectRoot used to default --output's location, mirroring how every other command resolves projectRoot. Closes #82 Signed-off-by: Matt Jones <47545907+SoundMatt@users.noreply.github.com> --- .fusa-reqs.json | 6 +++ cmd/gofusa/cmd_qualify.go | 29 +++++++++++-- cmd/gofusa/cmd_qualify_flags_test.go | 61 ++++++++++++++++++++++++++++ 3 files changed, 92 insertions(+), 4 deletions(-) create mode 100644 cmd/gofusa/cmd_qualify_flags_test.go diff --git a/.fusa-reqs.json b/.fusa-reqs.json index 86958e8..63b0151 100644 --- a/.fusa-reqs.json +++ b/.fusa-reqs.json @@ -2448,6 +2448,12 @@ "text": "Each qualification case result carries a results[].result status string that is one of PASS, FAIL, SKIP, or ERROR, per x-FuSa spec §6. Infrastructure failures (unable to set up or run the synthetic case) report ERROR; a case that runs to completion but doesn't match its expectation reports FAIL; a matching case reports PASS.", "standard": "x-FuSa" }, + { + "id": "REQ-QUALIFY011", + "title": "gofusa qualify accepts --dir and --format flags per x-FuSa spec §6", + "text": "gofusa qualify defines --dir (project root directory; affects the default --output location, mirroring how other commands resolve projectRoot) and --format text|json (both write the same qualification report; the flag is accepted without error) per the CLI surface documented in x-FuSa spec §6, instead of erroring with \"flag provided but not defined\" when either is passed.", + "standard": "x-FuSa spec section 6" + }, { "id": "REQ-ATT001", "title": "Attestation struct for x-FuSa spec section 1.6.2", diff --git a/cmd/gofusa/cmd_qualify.go b/cmd/gofusa/cmd_qualify.go index c9c993c..d54fa2f 100644 --- a/cmd/gofusa/cmd_qualify.go +++ b/cmd/gofusa/cmd_qualify.go @@ -25,6 +25,14 @@ func runQualify(args []string, stdout, stderr io.Writer) int { } var ( + // §6: qualify accepts --dir/--format for CLI-surface parity with the + // other §9.1 MUST commands, even though the qualification suite + // itself always runs the same built-in synthetic cases regardless of + // project content — --dir only affects the default --output + // location (mirroring how other commands resolve projectRoot). + //fusa:req REQ-QUALIFY011 + dir = fs.String("dir", "", "project root directory (default: current directory); only affects the default --output location") + format = fs.String("format", "text", "output format: text, json (both write the same qualification report; controls stdout presentation)") outputFile = fs.String("output", "", "path for the JSON qualification report (default: ./qualify-report.json)") // Feature 2 — tool qualification display //fusa:req REQ-QUALIFY007 @@ -42,14 +50,27 @@ func runQualify(args []string, stdout, stderr io.Writer) int { return code } - outPath := *outputFile - if outPath == "" { - wd, err := os.Getwd() + switch *format { + case "text", "json", "": + // ok + default: + fmt.Fprintf(stderr, "gofusa qualify: unknown format %q (must be text or json)\n", *format) + return fusa.ExitUsage + } + + projectRoot := *dir + if projectRoot == "" { + var err error + projectRoot, err = os.Getwd() if err != nil { fmt.Fprintf(stderr, "gofusa qualify: get working directory: %v\n", err) return fusa.ExitRuntime } - outPath = filepath.Join(wd, qualify.ReportFile) + } + + outPath := *outputFile + if outPath == "" { + outPath = filepath.Join(projectRoot, qualify.ReportFile) } fmt.Fprintf(stdout, "Running %d qualification case(s)...\n", len(qualify.BuiltinCases())) diff --git a/cmd/gofusa/cmd_qualify_flags_test.go b/cmd/gofusa/cmd_qualify_flags_test.go new file mode 100644 index 0000000..1b2a65f --- /dev/null +++ b/cmd/gofusa/cmd_qualify_flags_test.go @@ -0,0 +1,61 @@ +package main + +import ( + "bytes" + "os" + "path/filepath" + "testing" +) + +// ─── qualify --dir/--format (x-FuSa spec §6) ────────────────────────────────── +// +// Regression coverage for: gofusa qualify erroring with exit 2 ("flag +// provided but not defined") when --dir or --format is passed, even though +// §6 documents both as part of qualify's CLI surface. + +//fusa:test REQ-QUALIFY011 +func TestRunQualify_FormatFlag(t *testing.T) { + dir := t.TempDir() + outFile := filepath.Join(dir, "qualify.json") + var out, errBuf bytes.Buffer + code := runQualify([]string{"--format", "json", "--output", outFile}, &out, &errBuf) + if code != 0 { + t.Errorf("runQualify --format json: exit %d, stderr: %s", code, errBuf.String()) + } + if _, err := os.Stat(outFile); err != nil { + t.Error("qualification report not written") + } +} + +//fusa:test REQ-QUALIFY011 +func TestRunQualify_DirFlag(t *testing.T) { + dir := t.TempDir() + var out, errBuf bytes.Buffer + code := runQualify([]string{"--dir", dir}, &out, &errBuf) + if code != 0 { + t.Errorf("runQualify --dir: exit %d, stderr: %s", code, errBuf.String()) + } + // --output not given, so the report should land under --dir. + if _, err := os.Stat(filepath.Join(dir, "qualify-report.json")); err != nil { + t.Errorf("qualification report not written under --dir: %v", err) + } +} + +//fusa:test REQ-QUALIFY011 +func TestRunQualify_DirAndFormatFlags(t *testing.T) { + dir := t.TempDir() + var out, errBuf bytes.Buffer + code := runQualify([]string{"--dir", dir, "--format", "json"}, &out, &errBuf) + if code != 0 { + t.Errorf("runQualify --dir --format json: exit %d, stderr: %s", code, errBuf.String()) + } +} + +//fusa:test REQ-QUALIFY011 +func TestRunQualify_InvalidFormat(t *testing.T) { + var out, errBuf bytes.Buffer + code := runQualify([]string{"--format", "xml"}, &out, &errBuf) + if code != 2 { + t.Errorf("runQualify --format xml: expected exit 2, got %d", code) + } +} From a6528715f272993c015858ba8fcfa4c937f06719 Mon Sep 17 00:00:00 2001 From: Matt Jones <47545907+SoundMatt@users.noreply.github.com> Date: Tue, 28 Jul 2026 20:14:40 -0700 Subject: [PATCH 6/8] fix(auditpack): include tara/cyber/coupling/comp/hara and gap-report evidence (#79) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit x-FuSa spec §8 MUST: the pack MUST include every §1.2 input file and every §1.3 generated file that exists at the project root. EvidenceFiles was a fixed list dated before tara/hara/cyber/coupling/comp support existed, so audit-pack silently dropped tara.json, tara.md, cyber-report.json, coupling-report.json, comp-report.json, .fusa-hara.json, .fusa-dispositions.json, .fusa-problems.json, .fusa-model-trace.json, and the entire open-ended -gap-report.json family — with no warning that any of it was missing from the evidence bundle. Extends EvidenceFiles with the missing fixed-name §1.2/§1.3 files, and adds a discoverGapReports glob step for the -gap-report.json family (whose standard-id set is open-ended, so a fixed list can't enumerate it), sorted for deterministic manifest/ZIP ordering. Closes #79 Signed-off-by: Matt Jones <47545907+SoundMatt@users.noreply.github.com> --- auditpack/auditpack.go | 69 ++++++++++++++++++++++++++++++++++++- auditpack/auditpack_test.go | 67 +++++++++++++++++++++++++++++++++++ 2 files changed, 135 insertions(+), 1 deletion(-) diff --git a/auditpack/auditpack.go b/auditpack/auditpack.go index b10cdb8..a1d32a0 100644 --- a/auditpack/auditpack.go +++ b/auditpack/auditpack.go @@ -20,6 +20,7 @@ import ( "io" "os" "path/filepath" + "sort" "time" fusa "github.com/SoundMatt/go-FuSa" @@ -57,16 +58,31 @@ type AuditManifest struct { Files []AuditManifestEntry `json:"files"` } -// EvidenceFiles is the ordered list of evidence file names that Pack collects. +// EvidenceFiles is the ordered list of evidence file names that Pack collects +// — every x-FuSa spec §1.2 input file and §1.3 generated-evidence file that +// has a fixed name (everything except the `-gap-report.json` +// family, which Pack discovers separately via a glob since the set of +// standards is open-ended — see gapReportGlob). // //fusa:req REQ-AUDIT001 var EvidenceFiles = []string{ + // §1.2 input/config files. ".fusa.json", ".fusa-reqs.json", + ".fusa-hara.json", ".fusa-evidence.json", + ".fusa-dispositions.json", + ".fusa-problems.json", + ".fusa-model-trace.json", + // §1.3 generated evidence. "check-report.json", "fmea.json", "fmea.csv", + "tara.json", + "tara.md", + "cyber-report.json", + "coupling-report.json", + "comp-report.json", "boundary.mermaid", "boundary.dot", "safety-case.json", @@ -79,6 +95,13 @@ var EvidenceFiles = []string{ "vuln.json", } +// gapReportGlob matches the open-ended §1.3 `-gap-report.json` +// family (e.g. iso26262-gap-report.json, slsa-gap-report.json, +// iec62443-4-2-gap-report.json, misra-c-gap-report.json) — a fixed name list +// can't enumerate every standard id a future tool version might add, so Pack +// discovers these by pattern instead. +const gapReportGlob = "*-gap-report.json" + // Pack bundles all present evidence files from projectRoot into a ZIP archive // at outputPath. It returns the AuditManifest describing what was packed. // @@ -104,6 +127,7 @@ func Pack(projectRoot, outputPath string) (*AuditManifest, error) { path string } var present []fileEntry + seen := make(map[string]bool, len(EvidenceFiles)) for _, name := range EvidenceFiles { path := filepath.Join(projectRoot, name) entry, err := hashFile(path, name) @@ -115,6 +139,31 @@ func Pack(projectRoot, outputPath string) (*AuditManifest, error) { } manifest.Files = append(manifest.Files, entry) present = append(present, fileEntry{name: name, path: path}) + seen[name] = true + } + + // §1.3 `-gap-report.json` files (open-ended set of standards — + // see gapReportGlob doc comment). Sorted for deterministic manifest + // ordering across filesystems/platforms. + gapReportNames, globErr := discoverGapReports(projectRoot) + if globErr != nil { + return nil, fmt.Errorf("auditpack: glob gap reports: %w", globErr) + } + for _, name := range gapReportNames { + if seen[name] { + continue + } + path := filepath.Join(projectRoot, name) + entry, hashErr := hashFile(path, name) + if hashErr != nil { + if os.IsNotExist(hashErr) { + continue + } + return nil, fmt.Errorf("auditpack: hash %s: %w", name, hashErr) + } + manifest.Files = append(manifest.Files, entry) + present = append(present, fileEntry{name: name, path: path}) + seen[name] = true } // Create ZIP @@ -156,6 +205,24 @@ func Pack(projectRoot, outputPath string) (*AuditManifest, error) { // ─── helpers ───────────────────────────────────────────────────────────────── +// discoverGapReports returns the base names (not full paths) of every +// `-gap-report.json` file present directly under projectRoot, +// sorted lexicographically for deterministic manifest/ZIP ordering. +// +//fusa:req REQ-AUDIT001 +func discoverGapReports(projectRoot string) ([]string, error) { + matches, err := filepath.Glob(filepath.Join(projectRoot, gapReportGlob)) + if err != nil { + return nil, err + } + names := make([]string, 0, len(matches)) + for _, m := range matches { + names = append(names, filepath.Base(m)) + } + sort.Strings(names) + return names, nil +} + func hashFile(path, name string) (AuditManifestEntry, error) { f, err := os.Open(path) if err != nil { diff --git a/auditpack/auditpack_test.go b/auditpack/auditpack_test.go index 859b4ea..0a12be9 100644 --- a/auditpack/auditpack_test.go +++ b/auditpack/auditpack_test.go @@ -193,6 +193,73 @@ func TestPack_IncludesFusaConfig(t *testing.T) { } } +// TestPack_IncludesNewerEvidenceTypes is a regression test for the audit-pack +// silently dropping tara.json/tara.md/cyber-report.json and other evidence +// types added after EvidenceFiles was last updated (x-FuSa spec §8 MUST: +// "every §1.2 input file and every §1.3 generated file that exists at the +// project root"). +// +//fusa:test REQ-AUDIT001 +func TestPack_IncludesNewerEvidenceTypes(t *testing.T) { + files := testutil.MinimalProject() + for _, name := range []string{ + // §1.2 input files not previously collected. + ".fusa-hara.json", + ".fusa-dispositions.json", + ".fusa-problems.json", + ".fusa-model-trace.json", + // §1.3 generated evidence not previously collected. + "tara.json", + "tara.md", + "cyber-report.json", + "coupling-report.json", + "comp-report.json", + // §1.3 open-ended -gap-report.json family. + "iso26262-gap-report.json", + "slsa-gap-report.json", + } { + files[name] = `{"kind":"test"}` + } + dir := testutil.ProjectDir(t, files) + outPath := filepath.Join(t.TempDir(), auditpack.AuditPackFile) + + manifest, err := auditpack.Pack(dir, outPath) + if err != nil { + t.Fatalf("Pack: %v", err) + } + + packed := make(map[string]bool, len(manifest.Files)) + for _, entry := range manifest.Files { + packed[entry.Path] = true + } + names := zipFileNames(t, outPath) + inZip := make(map[string]bool, len(names)) + for _, n := range names { + inZip[n] = true + } + + for _, want := range []string{ + ".fusa-hara.json", + ".fusa-dispositions.json", + ".fusa-problems.json", + ".fusa-model-trace.json", + "tara.json", + "tara.md", + "cyber-report.json", + "coupling-report.json", + "comp-report.json", + "iso26262-gap-report.json", + "slsa-gap-report.json", + } { + if !packed[want] { + t.Errorf("manifest missing %q", want) + } + if !inZip[want] { + t.Errorf("ZIP missing %q", want) + } + } +} + // ─── engine rule ───────────────────────────────────────────────────────────── func runEngine(t *testing.T, files map[string]string) []fusa.Finding { From 2a17818e0ec66f04bcd544311db30cc2543e99fb Mon Sep 17 00:00:00 2001 From: Matt Jones <47545907+SoundMatt@users.noreply.github.com> Date: Tue, 28 Jul 2026 20:14:49 -0700 Subject: [PATCH 7/8] fix(tara): exclude _test.go fixtures from threats[] (#80) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit x-FuSa spec §1.6 rule 4 MUST ("Real referents only"): an entry naming a file MUST refer to an actual file in the analyzed project, not a test fixture mistaken for one. tara.Scan built threats[] directly and unfiltered from cyber.Scan's findings, which legitimately include _test.go files (security issues in test code are still worth flagging in check's own CYBER category) — but those same findings, unfiltered, were also becoming TARA "asset under threat" entries. This directly contradicted the report's own summary.assetInventoryMethod text, which already documents (correctly) that assetsInProject counts only non-test .go files via CountProjectFiles. tara.Scan now skips any cyber finding whose Location.File ends in "_test.go" before building a ThreatEntry, reusing the same suffix exclusion CountProjectFiles already applies to the assetsInProject denominator (so assetsAnalyzed/coveragePct in summary are now internally consistent with assetInventoryMethod's stated method too). Entry IDs stay sequential from TARA-001 across the filtered set, with no gaps left by excluded entries. Closes #80 Signed-off-by: Matt Jones <47545907+SoundMatt@users.noreply.github.com> --- tara/tara.go | 14 +++++++++++++- tara/tara_test.go | 43 +++++++++++++++++++++++++++++++++++++++++++ 2 files changed, 56 insertions(+), 1 deletion(-) diff --git a/tara/tara.go b/tara/tara.go index c4b53c8..788f711 100644 --- a/tara/tara.go +++ b/tara/tara.go @@ -140,7 +140,18 @@ func Scan(projectRoot string, cyberFindings []fusa.Finding) (*Report, error) { Module: readModule(projectRoot), } - for i, f := range cyberFindings { + // §1.6 rule 4 (Real referents only, MUST): threats[] entries must name a + // real project asset, never a test fixture mistaken for one. cyber.Scan + // legitimately includes findings in _test.go files (security issues in + // test code are still worth flagging there), but those findings aren't + // real deployed assets, so they're excluded here before becoming TARA + // "asset under threat" entries — the same _test.go exclusion + // CountProjectFiles already applies to the assetsInProject denominator. + i := 0 + for _, f := range cyberFindings { + if strings.HasSuffix(f.Location.File, "_test.go") { + continue + } meta, ok := ruleMeta[f.RuleID] if !ok { meta = threatMeta{ @@ -181,6 +192,7 @@ func Scan(projectRoot string, cyberFindings []fusa.Finding) (*Report, error) { SourceLine: f.Location.Line, } report.Entries = append(report.Entries, entry) + i++ } sort.Slice(report.Entries, func(i, j int) bool { diff --git a/tara/tara_test.go b/tara/tara_test.go index 6670ce6..5a22490 100644 --- a/tara/tara_test.go +++ b/tara/tara_test.go @@ -109,6 +109,49 @@ func TestScan_IDSequential(t *testing.T) { } } +// TestScan_ExcludesTestFixtureFindings is a regression test for threats[] +// being sourced from _test.go fixtures instead of real project assets +// (x-FuSa spec §1.6 rule 4 MUST: "Real referents only" — a `file` entry MUST +// refer to an actual file in the analyzed project, not a test fixture +// mistaken for one). cyber.Scan findings in _test.go files are legitimate +// for check's own CYBER category, but MUST NOT become TARA "asset under +// threat" entries. +// +//fusa:test REQ-TARA003 +func TestScan_ExcludesTestFixtureFindings(t *testing.T) { + dir := testutil.ProjectDir(t, map[string]string{ + "go.mod": "module example.com/test\ngo 1.22\n", + }) + findings := []fusa.Finding{ + makeFinding("CYBER001", fusa.SeverityWarning, "impact/impact_test.go", 23), + makeFinding("CYBER002", fusa.SeverityWarning, "real/asset.go", 10), + makeFinding("CYBER003", fusa.SeverityInfo, "another_test.go", 5), + } + report, err := tara.Scan(dir, findings) + if err != nil { + t.Fatalf("Scan: %v", err) + } + if len(report.Entries) != 1 { + t.Fatalf("expected 1 non-test entry, got %d: %+v", len(report.Entries), report.Entries) + } + for _, e := range report.Entries { + if strings.HasSuffix(e.SourceFile, "_test.go") { + t.Errorf("entry %q sourced from test fixture %q, want real project file only", e.ID, e.SourceFile) + } + } + if report.Entries[0].SourceFile != "real/asset.go" { + t.Errorf("SourceFile = %q, want %q", report.Entries[0].SourceFile, "real/asset.go") + } + // The surviving entry's ID should still be sequential from TARA-001, not + // carry a gap from the filtered-out test-fixture entries. + if report.Entries[0].ID != "TARA-001" { + t.Errorf("ID = %q, want \"TARA-001\" (no gap from filtered entries)", report.Entries[0].ID) + } + if report.Summary.AssetsAnalyzed != 1 { + t.Errorf("summary.assetsAnalyzed = %d, want 1 (test fixtures excluded)", report.Summary.AssetsAnalyzed) + } +} + func padded(n int) string { if n < 10 { return "00" + string(rune('0'+n)) From 297e87d84e2e4b9dd3ad124541312c29503c53e4 Mon Sep 17 00:00:00 2001 From: Matt Jones <47545907+SoundMatt@users.noreply.github.com> Date: Tue, 28 Jul 2026 20:16:47 -0700 Subject: [PATCH 8/8] =?UTF-8?q?chore:=20v0.46.0=20=E2=80=94=20deep-audit?= =?UTF-8?q?=20round=202=20fixes?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps the release version and regenerates the repo's own committed tara.json/tara.md with the fixed binary, which is itself a live demonstration of #80's fix: threats[] drops from 321 entries (318 of which were _test.go fixtures) down to the 3 real project-asset threats that were always the correct result. Closes #77, closes #78, closes #79, closes #80, closes #81, closes #82, closes #83 Signed-off-by: Matt Jones <47545907+SoundMatt@users.noreply.github.com> --- CHANGELOG.md | 34 + README.md | 2 +- docs/tool-safety-manual.md | 2 +- fusa.go | 2 +- tara.json | 10556 +---------------------------------- tara.md | 328 +- 6 files changed, 72 insertions(+), 10852 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 6d5be16..e25d696 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -7,6 +7,40 @@ Dates reference the merged commit timestamp. ## [Unreleased] +## v0.46.0 — 2026-07-28 (deep-audit round 2: standard ids, SARIF, tara/qualify/audit-pack) + +### Fixed +- **SARIF `tool.driver.name` is now the canonical `"go-FuSa"`** (x-FuSa spec + §2.9 MUST), not the `"gofusa"` binary name — the one output format whose + tool identity had diverged from every other JSON document (go-FuSa#81). +- **Standards gap-report `standard` field is now the §2.4.1 canonical + lowercase id** in all six commands (go-FuSa#77). `iso26262`/`do178`/ + `iec61508`/`iso21434`/`unece` no longer bake the ASIL/SIL/DAL/CAL rating + into the id (`"ISO 26262 ASIL-B"` → `"iso26262"`, etc.), and `iec62443` + now carries the required part suffix (`"iec62443"` → `"iec62443-4-2"`). +- **`check`/`report`'s JSON envelope `standard` field is now the canonical + lowercase id** instead of go-FuSa's internal uppercase/no-space enum + spelling (e.g. `"ISO26262"`) — new `config.Standard.CanonicalID()` + (go-FuSa#78). +- **`tara --output-dir` now auto-creates the target directory**, matching + the identical `--output-dir` handling `fmea`/`safety-case` already had + (go-FuSa#83). +- **`qualify` now accepts the documented `--dir`/`--format` flags** (x-FuSa + spec §6) instead of erroring with "flag provided but not defined" + (go-FuSa#82). +- **`audit-pack` no longer silently drops `tara.json`/`tara.md`/ + `cyber-report.json` and other evidence types** added after its + `EvidenceFiles` list was last updated — extended with the missing §1.2/ + §1.3 filenames plus a glob for the open-ended + `-gap-report.json` family (go-FuSa#79). +- **`tara`'s `threats[]` no longer includes `_test.go` fixtures** as "asset + under threat" entries (x-FuSa spec §1.6 rule 4 MUST) — `tara.Scan` now + excludes test-fixture-sourced CYBER findings the same way + `CountProjectFiles` already excludes them from the `assetsInProject` + denominator, so `summary.assetsAnalyzed`/`coveragePct` are now + internally consistent with the report's own `assetInventoryMethod` text + (go-FuSa#80). + ## v0.45.0 — 2026-07-28 (declare x-FuSa spec v1.15.0 conformance) ### Changed diff --git a/README.md b/README.md index b87eb42..d825d24 100644 --- a/README.md +++ b/README.md @@ -285,7 +285,7 @@ docker build -t go-fusa . docker run --rm -v "$(pwd)":/project go-fusa check ``` -Published tags: `latest`, `0.45`, `0.45.0` (and matching semver for every release). +Published tags: `latest`, `0.46`, `0.46.0` (and matching semver for every release). ## Standards coverage diff --git a/docs/tool-safety-manual.md b/docs/tool-safety-manual.md index fb6e9d6..ae4399e 100644 --- a/docs/tool-safety-manual.md +++ b/docs/tool-safety-manual.md @@ -1,6 +1,6 @@ # go-FuSa Tool Safety Manual -**Version:** 0.45.0 +**Version:** 0.46.0 **Module:** `github.com/SoundMatt/go-FuSa` **License:** Mozilla Public License 2.0 **Standards addressed:** ISO 26262, IEC 61508, ISO 21434, DO-178C diff --git a/fusa.go b/fusa.go index e3d7207..48f028b 100644 --- a/fusa.go +++ b/fusa.go @@ -23,7 +23,7 @@ import ( ) // Version is the current release of go-FuSa. -const Version = "0.45.0" +const Version = "0.46.0" // SpecVersion is the x-FuSa spec version this release implements. const SpecVersion = "1.15.0" diff --git a/tara.json b/tara.json index 8d57fad..497e7ad 100644 --- a/tara.json +++ b/tara.json @@ -1,10480 +1,50 @@ { - "schemaVersion": "1.14", + "schemaVersion": "1.15", "kind": "tara-report", "tool": "go-FuSa", - "toolVersion": "0.43.0", + "toolVersion": "0.46.0", "language": "go", - "generatedAt": "2026-07-28T22:40:07.013585Z", + "generatedAt": "2026-07-29T03:16:05.497006Z", "format": "go-FuSa TARA v1", "module": "github.com/SoundMatt/go-FuSa", "threats": [ { "id": "TARA-001", - "asset": "impact_test.go", - "threat": "Command injection from variable input enables arbitrary command execution", - "stride": [ - "E", - "R" - ], - "cwe": "CWE-78", - "attackVector": "Network", - "attackFeasibility": "medium", - "impact": { - "safety": "critical", - "financial": "moderate", - "operational": "negligible", - "privacy": "negligible" - }, - "risk": "critical", - "treatment": "mitigate", - "securityLevel": 3, - "mitigations": [ - "Use exec.Command with fixed command and sanitised args" - ], - "currentControl": "Use exec.Command with fixed command and sanitised args", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 23 - }, - "cyberRuleId": "CYBER005", - "sourceFile": "impact/impact_test.go", - "sourceLine": 23 - }, - { - "id": "TARA-002", - "asset": "impact_test.go", - "threat": "Command injection from variable input enables arbitrary command execution", - "stride": [ - "E", - "R" - ], - "cwe": "CWE-78", - "attackVector": "Network", - "attackFeasibility": "medium", - "impact": { - "safety": "critical", - "financial": "moderate", - "operational": "negligible", - "privacy": "negligible" - }, - "risk": "critical", - "treatment": "mitigate", - "securityLevel": 3, - "mitigations": [ - "Use exec.Command with fixed command and sanitised args" - ], - "currentControl": "Use exec.Command with fixed command and sanitised args", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 35 - }, - "cyberRuleId": "CYBER005", - "sourceFile": "impact/impact_test.go", - "sourceLine": 35 - }, - { - "id": "TARA-003", - "asset": "cmd_trace_funccov_test.go", - "threat": "Integer narrowing conversion causes silent data truncation", - "stride": [ - "T", - "D" - ], - "cwe": "CWE-190", - "standard": "MISRA Rule 10.3", - "attackVector": "Local", - "attackFeasibility": "low", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "moderate", - "privacy": "negligible" - }, - "risk": "low", - "treatment": "mitigate", - "securityLevel": 1, - "mitigations": [ - "Add range check before conversion" - ], - "currentControl": "Add range check before conversion", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_trace_funccov_test.go", - "line": 77 - }, - "cyberRuleId": "CYBER009", - "sourceFile": "cmd/gofusa/cmd_trace_funccov_test.go", - "sourceLine": 77 - }, - { - "id": "TARA-004", - "asset": "cmd_trace_reqcov_test.go", - "threat": "Integer narrowing conversion causes silent data truncation", - "stride": [ - "T", - "D" - ], - "cwe": "CWE-190", - "standard": "MISRA Rule 10.3", - "attackVector": "Local", - "attackFeasibility": "low", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "moderate", - "privacy": "negligible" - }, - "risk": "low", - "treatment": "mitigate", - "securityLevel": 1, - "mitigations": [ - "Add range check before conversion" - ], - "currentControl": "Add range check before conversion", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_trace_reqcov_test.go", - "line": 125 - }, - "cyberRuleId": "CYBER009", - "sourceFile": "cmd/gofusa/cmd_trace_reqcov_test.go", - "sourceLine": 125 - }, - { - "id": "TARA-005", - "asset": "summary.go", - "threat": "Integer narrowing conversion causes silent data truncation", - "stride": [ - "T", - "D" - ], - "cwe": "CWE-190", - "standard": "MISRA Rule 10.3", - "attackVector": "Local", - "attackFeasibility": "low", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "moderate", - "privacy": "negligible" - }, - "risk": "low", - "treatment": "mitigate", - "securityLevel": 1, - "mitigations": [ - "Add range check before conversion" - ], - "currentControl": "Add range check before conversion", - "residualRisk": "Low after remediation", - "location": { - "file": "report/summary.go", - "line": 149 - }, - "cyberRuleId": "CYBER009", - "sourceFile": "report/summary.go", - "sourceLine": 149 - }, - { - "id": "TARA-006", - "asset": "cmd_slsa_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_slsa_test.go", - "line": 112 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "cmd/gofusa/cmd_slsa_test.go", - "sourceLine": 112 - }, - { - "id": "TARA-007", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 372 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 372 - }, - { - "id": "TARA-008", - "asset": "coverage_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coverage/coverage_test.go", - "line": 25 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "coverage/coverage_test.go", - "sourceLine": 25 - }, - { - "id": "TARA-009", - "asset": "do178_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 62 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "do178/do178_test.go", - "sourceLine": 62 - }, - { - "id": "TARA-010", - "asset": "do178_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 223 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "do178/do178_test.go", - "sourceLine": 223 - }, - { - "id": "TARA-011", - "asset": "fusa_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 256 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "fusa_test.go", - "sourceLine": 256 - }, - { - "id": "TARA-012", - "asset": "fusa_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 275 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "fusa_test.go", - "sourceLine": 275 - }, - { - "id": "TARA-013", - "asset": "fusa_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 293 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "fusa_test.go", - "sourceLine": 293 - }, - { - "id": "TARA-014", - "asset": "iec61508_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 61 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 61 - }, - { - "id": "TARA-015", - "asset": "assess_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec62443/assess_test.go", - "line": 17 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "iec62443/assess_test.go", - "sourceLine": 17 - }, - { - "id": "TARA-016", - "asset": "iso26262_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 62 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 62 - }, - { - "id": "TARA-017", - "asset": "sas_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sas/sas_test.go", - "line": 81 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "sas/sas_test.go", - "sourceLine": 81 - }, - { - "id": "TARA-018", - "asset": "sci_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sci/sci_test.go", - "line": 73 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "sci/sci_test.go", - "sourceLine": 73 - }, - { - "id": "TARA-019", - "asset": "assess_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 38 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 38 - }, - { - "id": "TARA-020", - "asset": "assess_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 66 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 66 - }, - { - "id": "TARA-021", - "asset": "assess_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 99 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 99 - }, - { - "id": "TARA-022", - "asset": "assess_test.go", - "threat": "World-readable/writable directory allows unauthorised file access", - "stride": [ - "E", - "I" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create directory with mode 0750 or stricter" - ], - "currentControl": "Create directory with mode 0750 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 129 - }, - "cyberRuleId": "CYBER016", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 129 - }, - { - "id": "TARA-023", - "asset": "cmd_comp_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_comp_test.go", - "line": 17 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_comp_test.go", - "sourceLine": 17 - }, - { - "id": "TARA-024", - "asset": "cmd_comp_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_comp_test.go", - "line": 42 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_comp_test.go", - "sourceLine": 42 - }, - { - "id": "TARA-025", - "asset": "cmd_comp_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_comp_test.go", - "line": 58 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_comp_test.go", - "sourceLine": 58 - }, - { - "id": "TARA-026", - "asset": "cmd_comp_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_comp_test.go", - "line": 89 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_comp_test.go", - "sourceLine": 89 - }, - { - "id": "TARA-027", - "asset": "cmd_comp_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_comp_test.go", - "line": 111 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_comp_test.go", - "sourceLine": 111 - }, - { - "id": "TARA-028", - "asset": "cmd_comp_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_comp_test.go", - "line": 151 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_comp_test.go", - "sourceLine": 151 - }, - { - "id": "TARA-029", - "asset": "cmd_coupling_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_coupling_test.go", - "line": 14 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_coupling_test.go", - "sourceLine": 14 - }, - { - "id": "TARA-030", - "asset": "cmd_coupling_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_coupling_test.go", - "line": 18 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_coupling_test.go", - "sourceLine": 18 - }, - { - "id": "TARA-031", - "asset": "cmd_coupling_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_coupling_test.go", - "line": 36 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_coupling_test.go", - "sourceLine": 36 - }, - { - "id": "TARA-032", - "asset": "cmd_coupling_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_coupling_test.go", - "line": 39 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_coupling_test.go", - "sourceLine": 39 - }, - { - "id": "TARA-033", - "asset": "cmd_hooks.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_hooks.go", - "line": 84 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_hooks.go", - "sourceLine": 84 - }, - { - "id": "TARA-034", - "asset": "cmd_iec62443_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_iec62443_test.go", - "line": 119 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_iec62443_test.go", - "sourceLine": 119 - }, - { - "id": "TARA-035", - "asset": "cmd_pathrel_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_pathrel_test.go", - "line": 25 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_pathrel_test.go", - "sourceLine": 25 - }, - { - "id": "TARA-036", - "asset": "cmd_pathrel_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_pathrel_test.go", - "line": 71 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_pathrel_test.go", - "sourceLine": 71 - }, - { - "id": "TARA-037", - "asset": "cmd_slsa_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_slsa_test.go", - "line": 115 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_slsa_test.go", - "sourceLine": 115 - }, - { - "id": "TARA-038", - "asset": "cmd_slsa_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_slsa_test.go", - "line": 119 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_slsa_test.go", - "sourceLine": 119 - }, - { - "id": "TARA-039", - "asset": "cmd_v018_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v018_test.go", - "line": 142 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v018_test.go", - "sourceLine": 142 - }, - { - "id": "TARA-040", - "asset": "cmd_v018_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v018_test.go", - "line": 159 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v018_test.go", - "sourceLine": 159 - }, - { - "id": "TARA-041", - "asset": "cmd_v018_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v018_test.go", - "line": 175 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v018_test.go", - "sourceLine": 175 - }, - { - "id": "TARA-042", - "asset": "cmd_v018_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v018_test.go", - "line": 215 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v018_test.go", - "sourceLine": 215 - }, - { - "id": "TARA-043", - "asset": "cmd_v018_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v018_test.go", - "line": 249 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v018_test.go", - "sourceLine": 249 - }, - { - "id": "TARA-044", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 260 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 260 - }, - { - "id": "TARA-045", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 365 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 365 - }, - { - "id": "TARA-046", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 368 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 368 - }, - { - "id": "TARA-047", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 394 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 394 - }, - { - "id": "TARA-048", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 416 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 416 - }, - { - "id": "TARA-049", - "asset": "cmd_v020_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v020_test.go", - "line": 433 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v020_test.go", - "sourceLine": 433 - }, - { - "id": "TARA-050", - "asset": "cmd_v021_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v021_test.go", - "line": 41 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v021_test.go", - "sourceLine": 41 - }, - { - "id": "TARA-051", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 24 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 24 - }, - { - "id": "TARA-052", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 36 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 36 - }, - { - "id": "TARA-053", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 59 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 59 - }, - { - "id": "TARA-054", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 66 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 66 - }, - { - "id": "TARA-055", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 118 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 118 - }, - { - "id": "TARA-056", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 135 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 135 - }, - { - "id": "TARA-057", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 152 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 152 - }, - { - "id": "TARA-058", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 175 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 175 - }, - { - "id": "TARA-059", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 191 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 191 - }, - { - "id": "TARA-060", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 196 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 196 - }, - { - "id": "TARA-061", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 237 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 237 - }, - { - "id": "TARA-062", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 257 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 257 - }, - { - "id": "TARA-063", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 274 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 274 - }, - { - "id": "TARA-064", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 298 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 298 - }, - { - "id": "TARA-065", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 319 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 319 - }, - { - "id": "TARA-066", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 338 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 338 - }, - { - "id": "TARA-067", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 346 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 346 - }, - { - "id": "TARA-068", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 357 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 357 - }, - { - "id": "TARA-069", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 371 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 371 - }, - { - "id": "TARA-070", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 385 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 385 - }, - { - "id": "TARA-071", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 395 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 395 - }, - { - "id": "TARA-072", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 478 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 478 - }, - { - "id": "TARA-073", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 495 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 495 - }, - { - "id": "TARA-074", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 523 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 523 - }, - { - "id": "TARA-075", - "asset": "cmd_v023_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v023_test.go", - "line": 540 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v023_test.go", - "sourceLine": 540 - }, - { - "id": "TARA-076", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 146 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 146 - }, - { - "id": "TARA-077", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 158 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 158 - }, - { - "id": "TARA-078", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 225 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 225 - }, - { - "id": "TARA-079", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 237 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 237 - }, - { - "id": "TARA-080", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 257 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 257 - }, - { - "id": "TARA-081", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 266 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 266 - }, - { - "id": "TARA-082", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 289 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 289 - }, - { - "id": "TARA-083", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 317 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 317 - }, - { - "id": "TARA-084", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 323 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 323 - }, - { - "id": "TARA-085", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 340 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 340 - }, - { - "id": "TARA-086", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 469 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 469 - }, - { - "id": "TARA-087", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 496 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 496 - }, - { - "id": "TARA-088", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 610 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 610 - }, - { - "id": "TARA-089", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 727 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 727 - }, - { - "id": "TARA-090", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 735 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 735 - }, - { - "id": "TARA-091", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 741 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 741 - }, - { - "id": "TARA-092", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 766 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 766 - }, - { - "id": "TARA-093", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 780 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 780 - }, - { - "id": "TARA-094", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 820 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 820 - }, - { - "id": "TARA-095", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 823 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 823 - }, - { - "id": "TARA-096", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 890 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 890 - }, - { - "id": "TARA-097", - "asset": "cmd_v024b_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 927 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 927 - }, - { - "id": "TARA-098", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 60 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 60 - }, - { - "id": "TARA-099", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 69 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 69 - }, - { - "id": "TARA-100", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 153 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 153 - }, - { - "id": "TARA-101", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 166 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 166 - }, - { - "id": "TARA-102", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 222 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 222 - }, - { - "id": "TARA-103", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 441 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 441 - }, - { - "id": "TARA-104", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 454 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 454 - }, - { - "id": "TARA-105", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 539 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 539 - }, - { - "id": "TARA-106", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 566 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 566 - }, - { - "id": "TARA-107", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 605 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 605 - }, - { - "id": "TARA-108", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 675 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 675 - }, - { - "id": "TARA-109", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 723 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 723 - }, - { - "id": "TARA-110", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 744 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 744 - }, - { - "id": "TARA-111", - "asset": "cmd_v024c_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024c_test.go", - "line": 764 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024c_test.go", - "sourceLine": 764 - }, - { - "id": "TARA-112", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 225 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 225 - }, - { - "id": "TARA-113", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 238 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 238 - }, - { - "id": "TARA-114", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 253 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 253 - }, - { - "id": "TARA-115", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 496 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 496 - }, - { - "id": "TARA-116", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 515 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 515 - }, - { - "id": "TARA-117", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 518 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 518 - }, - { - "id": "TARA-118", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 534 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 534 - }, - { - "id": "TARA-119", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 567 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 567 - }, - { - "id": "TARA-120", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 705 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 705 - }, - { - "id": "TARA-121", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 736 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 736 - }, - { - "id": "TARA-122", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 752 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 752 - }, - { - "id": "TARA-123", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 758 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 758 - }, - { - "id": "TARA-124", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 888 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 888 - }, - { - "id": "TARA-125", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 914 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 914 - }, - { - "id": "TARA-126", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 937 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 937 - }, - { - "id": "TARA-127", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 963 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 963 - }, - { - "id": "TARA-128", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 988 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 988 - }, - { - "id": "TARA-129", - "asset": "cmd_v024d_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024d_test.go", - "line": 1067 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024d_test.go", - "sourceLine": 1067 - }, - { - "id": "TARA-130", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 17 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 17 - }, - { - "id": "TARA-131", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 39 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 39 - }, - { - "id": "TARA-132", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 68 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 68 - }, - { - "id": "TARA-133", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 86 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 86 - }, - { - "id": "TARA-134", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 122 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 122 - }, - { - "id": "TARA-135", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 235 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 235 - }, - { - "id": "TARA-136", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 254 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 254 - }, - { - "id": "TARA-137", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 271 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 271 - }, - { - "id": "TARA-138", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 285 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 285 - }, - { - "id": "TARA-139", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 299 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 299 - }, - { - "id": "TARA-140", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 314 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 314 - }, - { - "id": "TARA-141", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 330 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 330 - }, - { - "id": "TARA-142", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 336 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 336 - }, - { - "id": "TARA-143", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 506 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 506 - }, - { - "id": "TARA-144", - "asset": "cmd_v024e_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024e_test.go", - "line": 640 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024e_test.go", - "sourceLine": 640 - }, - { - "id": "TARA-145", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 136 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 136 - }, - { - "id": "TARA-146", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 171 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 171 - }, - { - "id": "TARA-147", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 185 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 185 - }, - { - "id": "TARA-148", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 203 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 203 - }, - { - "id": "TARA-149", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 222 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 222 - }, - { - "id": "TARA-150", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 241 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 241 - }, - { - "id": "TARA-151", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 349 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 349 - }, - { - "id": "TARA-152", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 442 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 442 - }, - { - "id": "TARA-153", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 459 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 459 - }, - { - "id": "TARA-154", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 476 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 476 - }, - { - "id": "TARA-155", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 506 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 506 - }, - { - "id": "TARA-156", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 523 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 523 - }, - { - "id": "TARA-157", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 531 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 531 - }, - { - "id": "TARA-158", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 608 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 608 - }, - { - "id": "TARA-159", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 680 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 680 - }, - { - "id": "TARA-160", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 701 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 701 - }, - { - "id": "TARA-161", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 705 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 705 - }, - { - "id": "TARA-162", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 720 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 720 - }, - { - "id": "TARA-163", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 745 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 745 - }, - { - "id": "TARA-164", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 778 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 778 - }, - { - "id": "TARA-165", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 792 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 792 - }, - { - "id": "TARA-166", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 835 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 835 - }, - { - "id": "TARA-167", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 883 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 883 - }, - { - "id": "TARA-168", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 903 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 903 - }, - { - "id": "TARA-169", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 964 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 964 - }, - { - "id": "TARA-170", - "asset": "cmd_v024f_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 999 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 999 - }, - { - "id": "TARA-171", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 245 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 245 - }, - { - "id": "TARA-172", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 260 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 260 - }, - { - "id": "TARA-173", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 263 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 263 - }, - { - "id": "TARA-174", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 279 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 279 - }, - { - "id": "TARA-175", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 495 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 495 - }, - { - "id": "TARA-176", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 506 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 506 - }, - { - "id": "TARA-177", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 524 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 524 - }, - { - "id": "TARA-178", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 527 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 527 - }, - { - "id": "TARA-179", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 569 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 569 - }, - { - "id": "TARA-180", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 574 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 574 - }, - { - "id": "TARA-181", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 593 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 593 - }, - { - "id": "TARA-182", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 628 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 628 - }, - { - "id": "TARA-183", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 662 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 662 - }, - { - "id": "TARA-184", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 703 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 703 - }, - { - "id": "TARA-185", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 747 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 747 - }, - { - "id": "TARA-186", - "asset": "cmd_v024g_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024g_test.go", - "line": 751 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024g_test.go", - "sourceLine": 751 - }, - { - "id": "TARA-187", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 36 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 36 - }, - { - "id": "TARA-188", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 65 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 65 - }, - { - "id": "TARA-189", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 86 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 86 - }, - { - "id": "TARA-190", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 99 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 99 - }, - { - "id": "TARA-191", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 114 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 114 - }, - { - "id": "TARA-192", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 130 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 130 - }, - { - "id": "TARA-193", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 162 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 162 - }, - { - "id": "TARA-194", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 184 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 184 - }, - { - "id": "TARA-195", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 201 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 201 - }, - { - "id": "TARA-196", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 218 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 218 - }, - { - "id": "TARA-197", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 238 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 238 - }, - { - "id": "TARA-198", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 264 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 264 - }, - { - "id": "TARA-199", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 308 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 308 - }, - { - "id": "TARA-200", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 326 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 326 - }, - { - "id": "TARA-201", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 425 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 425 - }, - { - "id": "TARA-202", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 448 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 448 - }, - { - "id": "TARA-203", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 467 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 467 - }, - { - "id": "TARA-204", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 479 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 479 - }, - { - "id": "TARA-205", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 496 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 496 - }, - { - "id": "TARA-206", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 527 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 527 - }, - { - "id": "TARA-207", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 547 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 547 - }, - { - "id": "TARA-208", - "asset": "cmd_v024h_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024h_test.go", - "line": 615 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v024h_test.go", - "sourceLine": 615 - }, - { - "id": "TARA-209", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 34 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 34 - }, - { - "id": "TARA-210", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 97 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 97 - }, - { - "id": "TARA-211", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 113 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 113 - }, - { - "id": "TARA-212", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 203 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 203 - }, - { - "id": "TARA-213", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 214 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 214 - }, - { - "id": "TARA-214", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 229 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 229 - }, - { - "id": "TARA-215", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 393 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 393 - }, - { - "id": "TARA-216", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 413 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 413 - }, - { - "id": "TARA-217", - "asset": "cmd_v025_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v025_test.go", - "line": 429 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/cmd_v025_test.go", - "sourceLine": 429 - }, - { - "id": "TARA-218", - "asset": "conform_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/conform_test.go", - "line": 22 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/conform_test.go", - "sourceLine": 22 - }, - { - "id": "TARA-219", - "asset": "conform_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/conform_test.go", - "line": 25 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "cmd/gofusa/conform_test.go", - "sourceLine": 25 - }, - { - "id": "TARA-220", - "asset": "comp_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "comp/comp_extra_test.go", - "line": 165 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "comp/comp_extra_test.go", - "sourceLine": 165 - }, - { - "id": "TARA-221", - "asset": "comp_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "comp/comp_extra_test.go", - "line": 168 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "comp/comp_extra_test.go", - "sourceLine": 168 - }, - { - "id": "TARA-222", - "asset": "comp_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "comp/comp_extra_test.go", - "line": 244 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "comp/comp_extra_test.go", - "sourceLine": 244 - }, - { - "id": "TARA-223", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 43 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 43 - }, - { - "id": "TARA-224", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 67 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 67 - }, - { - "id": "TARA-225", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 74 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 74 - }, - { - "id": "TARA-226", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 100 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 100 - }, - { - "id": "TARA-227", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 106 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 106 - }, - { - "id": "TARA-228", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 129 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 129 - }, - { - "id": "TARA-229", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 132 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 132 - }, - { - "id": "TARA-230", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 154 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 154 - }, - { - "id": "TARA-231", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 157 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 157 - }, - { - "id": "TARA-232", - "asset": "coupling_extra_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_extra_test.go", - "line": 180 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_extra_test.go", - "sourceLine": 180 - }, - { - "id": "TARA-233", - "asset": "coupling_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coupling/coupling_test.go", - "line": 26 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coupling/coupling_test.go", - "sourceLine": 26 - }, - { - "id": "TARA-234", - "asset": "coverage_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coverage/coverage_test.go", - "line": 37 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coverage/coverage_test.go", - "sourceLine": 37 - }, - { - "id": "TARA-235", - "asset": "coverage_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "coverage/coverage_test.go", - "line": 40 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "coverage/coverage_test.go", - "sourceLine": 40 - }, - { - "id": "TARA-236", - "asset": "disposition_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "disposition/disposition_test.go", - "line": 35 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "disposition/disposition_test.go", - "sourceLine": 35 - }, - { - "id": "TARA-237", - "asset": "disposition_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "disposition/disposition_test.go", - "line": 51 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "disposition/disposition_test.go", - "sourceLine": 51 - }, - { - "id": "TARA-238", - "asset": "disposition_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "disposition/disposition_test.go", - "line": 158 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "disposition/disposition_test.go", - "sourceLine": 158 - }, - { - "id": "TARA-239", - "asset": "disposition_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "disposition/disposition_test.go", - "line": 176 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "disposition/disposition_test.go", - "sourceLine": 176 - }, - { - "id": "TARA-240", - "asset": "do178_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 40 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "do178/do178_test.go", - "sourceLine": 40 - }, - { - "id": "TARA-241", - "asset": "do178_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 66 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "do178/do178_test.go", - "sourceLine": 66 - }, - { - "id": "TARA-242", - "asset": "do178_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 226 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "do178/do178_test.go", - "sourceLine": 226 - }, - { - "id": "TARA-243", - "asset": "do178_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 245 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "do178/do178_test.go", - "sourceLine": 245 - }, - { - "id": "TARA-244", - "asset": "do178_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 309 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "do178/do178_test.go", - "sourceLine": 309 - }, - { - "id": "TARA-245", - "asset": "do178_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "do178/do178_test.go", - "line": 334 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "do178/do178_test.go", - "sourceLine": 334 - }, - { - "id": "TARA-246", - "asset": "fusa_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 261 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "fusa_test.go", - "sourceLine": 261 - }, - { - "id": "TARA-247", - "asset": "fusa_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 264 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "fusa_test.go", - "sourceLine": 264 - }, - { - "id": "TARA-248", - "asset": "fusa_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 279 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "fusa_test.go", - "sourceLine": 279 - }, - { - "id": "TARA-249", - "asset": "fusa_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "fusa_test.go", - "line": 296 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "fusa_test.go", - "sourceLine": 296 - }, - { - "id": "TARA-250", - "asset": "hara_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "hara/hara_test.go", - "line": 96 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "hara/hara_test.go", - "sourceLine": 96 - }, - { - "id": "TARA-251", - "asset": "iec61508_gap_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_gap_test.go", - "line": 27 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_gap_test.go", - "sourceLine": 27 - }, - { - "id": "TARA-252", - "asset": "iec61508_gap_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_gap_test.go", - "line": 82 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_gap_test.go", - "sourceLine": 82 - }, - { - "id": "TARA-253", - "asset": "iec61508_gap_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_gap_test.go", - "line": 164 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_gap_test.go", - "sourceLine": 164 - }, - { - "id": "TARA-254", - "asset": "iec61508_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 40 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 40 - }, - { - "id": "TARA-255", - "asset": "iec61508_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 64 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 64 - }, - { - "id": "TARA-256", - "asset": "iec61508_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 198 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 198 - }, - { - "id": "TARA-257", - "asset": "iec61508_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 215 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 215 - }, - { - "id": "TARA-258", - "asset": "iec61508_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 321 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 321 - }, - { - "id": "TARA-259", - "asset": "iec61508_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec61508/iec61508_test.go", - "line": 342 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec61508/iec61508_test.go", - "sourceLine": 342 - }, - { - "id": "TARA-260", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iec62443/assess_test.go", - "line": 20 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iec62443/assess_test.go", - "sourceLine": 20 - }, - { - "id": "TARA-261", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 59 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 59 - }, - { - "id": "TARA-262", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 80 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 80 - }, - { - "id": "TARA-263", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 86 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 86 - }, - { - "id": "TARA-264", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 103 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 103 - }, - { - "id": "TARA-265", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 115 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 115 - }, - { - "id": "TARA-266", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 241 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 241 - }, - { - "id": "TARA-267", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 247 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 247 - }, - { - "id": "TARA-268", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 253 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 253 - }, - { - "id": "TARA-269", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 261 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 261 - }, - { - "id": "TARA-270", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 300 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 300 - }, - { - "id": "TARA-271", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 306 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 306 - }, - { - "id": "TARA-272", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 312 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 312 - }, - { - "id": "TARA-273", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 336 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 336 - }, - { - "id": "TARA-274", - "asset": "impact_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "impact/impact_test.go", - "line": 347 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "impact/impact_test.go", - "sourceLine": 347 - }, - { - "id": "TARA-275", - "asset": "iso21434_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso21434/iso21434_test.go", - "line": 44 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso21434/iso21434_test.go", - "sourceLine": 44 - }, - { - "id": "TARA-276", - "asset": "iso21434_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso21434/iso21434_test.go", - "line": 63 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso21434/iso21434_test.go", - "sourceLine": 63 - }, - { - "id": "TARA-277", - "asset": "iso21434_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso21434/iso21434_test.go", - "line": 135 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso21434/iso21434_test.go", - "sourceLine": 135 - }, - { - "id": "TARA-278", - "asset": "iso21434_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso21434/iso21434_test.go", - "line": 252 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso21434/iso21434_test.go", - "sourceLine": 252 - }, - { - "id": "TARA-279", - "asset": "iso26262_gap_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_gap_test.go", - "line": 27 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_gap_test.go", - "sourceLine": 27 - }, - { - "id": "TARA-280", - "asset": "iso26262_gap_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_gap_test.go", - "line": 86 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_gap_test.go", - "sourceLine": 86 - }, - { - "id": "TARA-281", - "asset": "iso26262_gap_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_gap_test.go", - "line": 171 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_gap_test.go", - "sourceLine": 171 - }, - { - "id": "TARA-282", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 41 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 41 - }, - { - "id": "TARA-283", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 65 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 65 - }, - { - "id": "TARA-284", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 199 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 199 - }, - { - "id": "TARA-285", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 217 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 217 - }, - { - "id": "TARA-286", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 256 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 256 - }, - { - "id": "TARA-287", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 278 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 278 - }, - { - "id": "TARA-288", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 303 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 303 - }, - { - "id": "TARA-289", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 323 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 323 - }, - { - "id": "TARA-290", - "asset": "iso26262_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "iso26262/iso26262_test.go", - "line": 343 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "iso26262/iso26262_test.go", - "sourceLine": 343 - }, - { - "id": "TARA-291", - "asset": "metrics_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "metrics/metrics_test.go", - "line": 32 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "metrics/metrics_test.go", - "sourceLine": 32 - }, - { - "id": "TARA-292", - "asset": "metrics_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "metrics/metrics_test.go", - "line": 102 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "metrics/metrics_test.go", - "sourceLine": 102 - }, - { - "id": "TARA-293", - "asset": "metrics_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "metrics/metrics_test.go", - "line": 124 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "metrics/metrics_test.go", - "sourceLine": 124 - }, - { - "id": "TARA-294", - "asset": "metrics_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "metrics/metrics_test.go", - "line": 232 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "metrics/metrics_test.go", - "sourceLine": 232 - }, - { - "id": "TARA-295", - "asset": "metrics_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "metrics/metrics_test.go", - "line": 254 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "metrics/metrics_test.go", - "sourceLine": 254 - }, - { - "id": "TARA-296", - "asset": "pr_engine_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "pr/pr_engine_test.go", - "line": 116 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "pr/pr_engine_test.go", - "sourceLine": 116 - }, - { - "id": "TARA-297", - "asset": "sas_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sas/sas_test.go", - "line": 56 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "sas/sas_test.go", - "sourceLine": 56 - }, - { - "id": "TARA-298", - "asset": "sas_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sas/sas_test.go", - "line": 85 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "sas/sas_test.go", - "sourceLine": 85 - }, - { - "id": "TARA-299", - "asset": "sci_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sci/sci_test.go", - "line": 43 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "sci/sci_test.go", - "sourceLine": 43 - }, - { - "id": "TARA-300", - "asset": "sci_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sci/sci_test.go", - "line": 76 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "sci/sci_test.go", - "sourceLine": 76 - }, - { - "id": "TARA-301", - "asset": "sci_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "sci/sci_test.go", - "line": 98 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "sci/sci_test.go", - "sourceLine": 98 - }, - { - "id": "TARA-302", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 42 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 42 - }, - { - "id": "TARA-303", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 47 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 47 - }, - { - "id": "TARA-304", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 69 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 69 - }, - { - "id": "TARA-305", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 73 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 73 - }, - { - "id": "TARA-306", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 76 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 76 - }, - { - "id": "TARA-307", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 102 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 102 - }, - { - "id": "TARA-308", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 106 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 106 - }, - { - "id": "TARA-309", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 132 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 132 - }, - { - "id": "TARA-310", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 154 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 154 - }, - { - "id": "TARA-311", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 176 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 176 - }, - { - "id": "TARA-312", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 196 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 196 - }, - { - "id": "TARA-313", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 215 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 215 - }, - { - "id": "TARA-314", - "asset": "assess_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "slsa/assess_test.go", - "line": 312 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "slsa/assess_test.go", - "sourceLine": 312 - }, - { - "id": "TARA-315", - "asset": "unece_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "unece/unece_test.go", - "line": 57 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "unece/unece_test.go", - "sourceLine": 57 - }, - { - "id": "TARA-316", - "asset": "unece_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", - "stride": [ - "I", - "T" - ], - "cwe": "CWE-732", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Create file with mode 0640 or stricter" - ], - "currentControl": "Create file with mode 0640 or stricter", - "residualRisk": "Low after remediation", - "location": { - "file": "unece/unece_test.go", - "line": 112 - }, - "cyberRuleId": "CYBER017", - "sourceFile": "unece/unece_test.go", - "sourceLine": 112 - }, - { - "id": "TARA-317", - "asset": "vuln_test.go", - "threat": "World-readable/writable file allows unauthorised data access or tampering", + "asset": "summary.go", + "threat": "Integer narrowing conversion causes silent data truncation", "stride": [ - "I", - "T" + "T", + "D" ], - "cwe": "CWE-732", + "cwe": "CWE-190", + "standard": "MISRA Rule 10.3", "attackVector": "Local", - "attackFeasibility": "medium", + "attackFeasibility": "low", "impact": { "safety": "moderate", "financial": "negligible", - "operational": "negligible", - "privacy": "moderate" + "operational": "moderate", + "privacy": "negligible" }, - "risk": "medium", + "risk": "low", "treatment": "mitigate", - "securityLevel": 2, + "securityLevel": 1, "mitigations": [ - "Create file with mode 0640 or stricter" + "Add range check before conversion" ], - "currentControl": "Create file with mode 0640 or stricter", + "currentControl": "Add range check before conversion", "residualRisk": "Low after remediation", "location": { - "file": "vuln/vuln_test.go", - "line": 451 + "file": "report/summary.go", + "line": 149 }, - "cyberRuleId": "CYBER017", - "sourceFile": "vuln/vuln_test.go", - "sourceLine": 451 + "cyberRuleId": "CYBER009", + "sourceFile": "report/summary.go", + "sourceLine": 149 }, { - "id": "TARA-318", - "asset": "vuln_test.go", + "id": "TARA-002", + "asset": "cmd_hooks.go", "threat": "World-readable/writable file allows unauthorised data access or tampering", "stride": [ "I", @@ -10498,15 +68,15 @@ "currentControl": "Create file with mode 0640 or stricter", "residualRisk": "Low after remediation", "location": { - "file": "vuln/vuln_test.go", - "line": 459 + "file": "cmd/gofusa/cmd_hooks.go", + "line": 84 }, "cyberRuleId": "CYBER017", - "sourceFile": "vuln/vuln_test.go", - "sourceLine": 459 + "sourceFile": "cmd/gofusa/cmd_hooks.go", + "sourceLine": 84 }, { - "id": "TARA-319", + "id": "TARA-003", "asset": "cmd_coverage.go", "threat": "TOCTOU race allows attacker to substitute file between check and use", "stride": [ @@ -10537,78 +107,12 @@ "cyberRuleId": "CYBER019", "sourceFile": "cmd/gofusa/cmd_coverage.go", "sourceLine": 46 - }, - { - "id": "TARA-320", - "asset": "cmd_v024b_test.go", - "threat": "TOCTOU race allows attacker to substitute file between check and use", - "stride": [ - "E", - "T" - ], - "cwe": "CWE-362", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "negligible" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Open file directly; handle ENOENT/EEXIST atomically" - ], - "currentControl": "Open file directly; handle ENOENT/EEXIST atomically", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024b_test.go", - "line": 104 - }, - "cyberRuleId": "CYBER019", - "sourceFile": "cmd/gofusa/cmd_v024b_test.go", - "sourceLine": 104 - }, - { - "id": "TARA-321", - "asset": "cmd_v024f_test.go", - "threat": "TOCTOU race allows attacker to substitute file between check and use", - "stride": [ - "E", - "T" - ], - "cwe": "CWE-362", - "attackVector": "Local", - "attackFeasibility": "medium", - "impact": { - "safety": "moderate", - "financial": "negligible", - "operational": "negligible", - "privacy": "negligible" - }, - "risk": "medium", - "treatment": "mitigate", - "securityLevel": 2, - "mitigations": [ - "Open file directly; handle ENOENT/EEXIST atomically" - ], - "currentControl": "Open file directly; handle ENOENT/EEXIST atomically", - "residualRisk": "Low after remediation", - "location": { - "file": "cmd/gofusa/cmd_v024f_test.go", - "line": 825 - }, - "cyberRuleId": "CYBER019", - "sourceFile": "cmd/gofusa/cmd_v024f_test.go", - "sourceLine": 825 } ], "summary": { - "assetsAnalyzed": 45, + "assetsAnalyzed": 3, "assetsInProject": 108, - "coveragePct": 41.666666666666664, + "coveragePct": 2.7777777777777777, "assetInventoryMethod": "every non-test .go source file in the project (excluding vendor/testdata/dot-directories) is treated as one candidate asset (CountProjectFiles); assetsAnalyzed counts the distinct files that ended up with at least one CYBER-derived threat entry — this is file-level granularity, not a deeper per-symbol or per-data-flow asset model" } } diff --git a/tara.md b/tara.md index 8ecb11c..9952cce 100644 --- a/tara.md +++ b/tara.md @@ -1,330 +1,12 @@ # Threat Analysis and Risk Assessment (TARA) **Module:** github.com/SoundMatt/go-FuSa -**Generated:** 2026-07-28T22:40:07Z +**Generated:** 2026-07-29T03:16:05Z **Standard:** ISO/SAE 21434:2021 Clause 15 -**Coverage:** 45 / 108 assets (41.7%) +**Coverage:** 3 / 108 assets (2.8%) | ID | Asset | Threat | STRIDE | CWE | Vector | Feasibility | Impact (S/F/O/P) | Risk | Treatment | SL | Mitigation | |---|---|---|---|---|---|---|---|---|---|---|---| -| TARA-001 | impact_test.go | Command injection from variable input enables arbitrary command execution | E/R | CWE-78 | Network | medium | critical/moderate/negligible/negligible | critical | mitigate | 3 | Use exec.Command with fixed command and sanitised args | -| TARA-002 | impact_test.go | Command injection from variable input enables arbitrary command execution | E/R | CWE-78 | Network | medium | critical/moderate/negligible/negligible | critical | mitigate | 3 | Use exec.Command with fixed command and sanitised args | -| TARA-003 | cmd_trace_funccov_test.go | Integer narrowing conversion causes silent data truncation | T/D | CWE-190 | Local | low | moderate/negligible/moderate/negligible | low | mitigate | 1 | Add range check before conversion | -| TARA-004 | cmd_trace_reqcov_test.go | Integer narrowing conversion causes silent data truncation | T/D | CWE-190 | Local | low | moderate/negligible/moderate/negligible | low | mitigate | 1 | Add range check before conversion | -| TARA-005 | summary.go | Integer narrowing conversion causes silent data truncation | T/D | CWE-190 | Local | low | moderate/negligible/moderate/negligible | low | mitigate | 1 | Add range check before conversion | -| TARA-006 | cmd_slsa_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-007 | cmd_v020_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-008 | coverage_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-009 | do178_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-010 | do178_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-011 | fusa_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-012 | fusa_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-013 | fusa_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-014 | iec61508_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-015 | assess_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-016 | iso26262_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-017 | sas_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-018 | sci_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-019 | assess_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-020 | assess_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-021 | assess_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-022 | assess_test.go | World-readable/writable directory allows unauthorised file access | E/I | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create directory with mode 0750 or stricter | -| TARA-023 | cmd_comp_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-024 | cmd_comp_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-025 | cmd_comp_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-026 | cmd_comp_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-027 | cmd_comp_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-028 | cmd_comp_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-029 | cmd_coupling_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-030 | cmd_coupling_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-031 | cmd_coupling_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-032 | cmd_coupling_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-033 | cmd_hooks.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-034 | cmd_iec62443_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-035 | cmd_pathrel_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-036 | cmd_pathrel_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-037 | cmd_slsa_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-038 | cmd_slsa_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-039 | cmd_v018_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-040 | cmd_v018_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-041 | cmd_v018_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-042 | cmd_v018_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-043 | cmd_v018_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-044 | cmd_v020_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-045 | cmd_v020_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-046 | cmd_v020_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-047 | cmd_v020_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-048 | cmd_v020_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-049 | cmd_v020_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-050 | cmd_v021_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-051 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-052 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-053 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-054 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-055 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-056 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-057 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-058 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-059 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-060 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-061 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-062 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-063 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-064 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-065 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-066 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-067 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-068 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-069 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-070 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-071 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-072 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-073 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-074 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-075 | cmd_v023_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-076 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-077 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-078 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-079 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-080 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-081 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-082 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-083 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-084 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-085 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-086 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-087 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-088 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-089 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-090 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-091 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-092 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-093 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-094 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-095 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-096 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-097 | cmd_v024b_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-098 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-099 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-100 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-101 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-102 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-103 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-104 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-105 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-106 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-107 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-108 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-109 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-110 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-111 | cmd_v024c_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-112 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-113 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-114 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-115 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-116 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-117 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-118 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-119 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-120 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-121 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-122 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-123 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-124 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-125 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-126 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-127 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-128 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-129 | cmd_v024d_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-130 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-131 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-132 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-133 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-134 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-135 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-136 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-137 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-138 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-139 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-140 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-141 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-142 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-143 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-144 | cmd_v024e_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-145 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-146 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-147 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-148 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-149 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-150 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-151 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-152 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-153 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-154 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-155 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-156 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-157 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-158 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-159 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-160 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-161 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-162 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-163 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-164 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-165 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-166 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-167 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-168 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-169 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-170 | cmd_v024f_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-171 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-172 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-173 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-174 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-175 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-176 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-177 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-178 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-179 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-180 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-181 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-182 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-183 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-184 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-185 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-186 | cmd_v024g_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-187 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-188 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-189 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-190 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-191 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-192 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-193 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-194 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-195 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-196 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-197 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-198 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-199 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-200 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-201 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-202 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-203 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-204 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-205 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-206 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-207 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-208 | cmd_v024h_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-209 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-210 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-211 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-212 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-213 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-214 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-215 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-216 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-217 | cmd_v025_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-218 | conform_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-219 | conform_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-220 | comp_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-221 | comp_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-222 | comp_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-223 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-224 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-225 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-226 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-227 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-228 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-229 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-230 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-231 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-232 | coupling_extra_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-233 | coupling_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-234 | coverage_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-235 | coverage_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-236 | disposition_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-237 | disposition_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-238 | disposition_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-239 | disposition_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-240 | do178_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-241 | do178_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-242 | do178_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-243 | do178_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-244 | do178_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-245 | do178_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-246 | fusa_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-247 | fusa_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-248 | fusa_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-249 | fusa_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-250 | hara_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-251 | iec61508_gap_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-252 | iec61508_gap_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-253 | iec61508_gap_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-254 | iec61508_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-255 | iec61508_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-256 | iec61508_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-257 | iec61508_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-258 | iec61508_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-259 | iec61508_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-260 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-261 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-262 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-263 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-264 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-265 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-266 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-267 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-268 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-269 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-270 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-271 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-272 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-273 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-274 | impact_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-275 | iso21434_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-276 | iso21434_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-277 | iso21434_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-278 | iso21434_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-279 | iso26262_gap_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-280 | iso26262_gap_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-281 | iso26262_gap_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-282 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-283 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-284 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-285 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-286 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-287 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-288 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-289 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-290 | iso26262_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-291 | metrics_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-292 | metrics_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-293 | metrics_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-294 | metrics_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-295 | metrics_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-296 | pr_engine_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-297 | sas_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-298 | sas_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-299 | sci_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-300 | sci_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-301 | sci_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-302 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-303 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-304 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-305 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-306 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-307 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-308 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-309 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-310 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-311 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-312 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-313 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-314 | assess_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-315 | unece_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-316 | unece_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-317 | vuln_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-318 | vuln_test.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | -| TARA-319 | cmd_coverage.go | TOCTOU race allows attacker to substitute file between check and use | E/T | CWE-362 | Local | medium | moderate/negligible/negligible/negligible | medium | mitigate | 2 | Open file directly; handle ENOENT/EEXIST atomically | -| TARA-320 | cmd_v024b_test.go | TOCTOU race allows attacker to substitute file between check and use | E/T | CWE-362 | Local | medium | moderate/negligible/negligible/negligible | medium | mitigate | 2 | Open file directly; handle ENOENT/EEXIST atomically | -| TARA-321 | cmd_v024f_test.go | TOCTOU race allows attacker to substitute file between check and use | E/T | CWE-362 | Local | medium | moderate/negligible/negligible/negligible | medium | mitigate | 2 | Open file directly; handle ENOENT/EEXIST atomically | +| TARA-001 | summary.go | Integer narrowing conversion causes silent data truncation | T/D | CWE-190 | Local | low | moderate/negligible/moderate/negligible | low | mitigate | 1 | Add range check before conversion | +| TARA-002 | cmd_hooks.go | World-readable/writable file allows unauthorised data access or tampering | I/T | CWE-732 | Local | medium | moderate/negligible/negligible/moderate | medium | mitigate | 2 | Create file with mode 0640 or stricter | +| TARA-003 | cmd_coverage.go | TOCTOU race allows attacker to substitute file between check and use | E/T | CWE-362 | Local | medium | moderate/negligible/negligible/negligible | medium | mitigate | 2 | Open file directly; handle ENOENT/EEXIST atomically |