This shows you the differences between two versions of the page.
ss:laboratoare:05 [2025/02/26 00:29] jan.vaduva [Cerințe tehnologice] |
ss:laboratoare:05 [2025/03/03 19:48] (current) jan.vaduva [Resurse suplimentare] |
||
---|---|---|---|
Line 30: | Line 30: | ||
===== Evaluare ===== | ===== Evaluare ===== | ||
- | * Configurarea corectă a instrumentelor de analiză statică (30%) | + | * Configurarea corectă a instrumentelor de analiză statică (30%) |
- | * Detectarea și remedierea vulnerabilităților identificate (40%) | + | * Detectarea și remedierea vulnerabilităților identificate (40%) |
- | * Integrarea analizei statice în pipeline-ul CI/CD (30%) | + | * Integrarea analizei statice în pipeline-ul CI/CD (30%) |
===== Resurse suplimentare ===== | ===== Resurse suplimentare ===== | ||
- | * [https://owasp.org/www-project-top-ten/ OWASP Top 10] / [https://cwe.mitre.org CWE Database] | + | * [https://owasp.org/www-project-top-ten/ OWASP Top 10] / [https://cwe.mitre.org CWE Database] |
- | * [https://docs.sonarqube.org/latest/ SonarQube Documentation] / [https://pypi.org/project/bandit/ Bandit (Python)] | + | * [https://docs.sonarqube.org/latest/ SonarQube Documentation] / [https://pypi.org/project/bandit/ Bandit (Python)] |
- | * [https://eslint.org/docs/latest/ ESLint (JavaScript)] / [https://spotbugs.github.io SpotBugs (Java)] | + | * [https://eslint.org/docs/latest/ ESLint (JavaScript)] / [https://spotbugs.github.io SpotBugs (Java)] |
- | * [https://sarifweb.azurewebsites.net SARIF Specification] | + | * [https://sarifweb.azurewebsites.net SARIF Specification] |
+ | * [[https://wiki.sei.cmu.edu/confluence/display/android/Android+Secure+Coding+Standard|Android Secure Coding Standard]] | ||