{
    "componentChunkName": "component---src-templates-plugin-docs-tsx",
    "path": "/plugins/scm-scw-plugin/docs/latest/en/overview/",
    "result": {"data":{"plugin":{"name":"scm-scw-plugin","displayName":"Secure Code Warrior","description":"Secure Code Warrior support","author":"Cloudogu GmbH","documentation":[{"version":"3.1.x","languages":["de","en"]},{"version":"3.0.x","languages":["en","de"]}]},"navigation":{"nodes":[{"section":"Getting started","entries":[{"frontmatter":{"title":"Overview","subtitle":null,"partiallyActive":null},"fields":{"slug":"/plugins/scm-scw-plugin/docs/3.1.x/en/overview/"}}]}]},"versions":{"group":[{"fieldValue":"3.0.x"},{"fieldValue":"3.1.x"}]},"languages":{"group":[{"fieldValue":"de"},{"fieldValue":"en"}]},"markdownRemark":{"html":"<p>Once the plugin is installed, the plugin is ready to show you videos and additional information about security topics. There are two different ways you can use it:</p>\n<ul>\n<li>mention security issue related keywords in the description of pull requests or</li>\n<li>mention security issues as a reviewer of a pull request.</li>\n</ul>\n<h3 id=\"use-in-pull-request-descriptions\" style=\"position:relative;\"><a href=\"#use-in-pull-request-descriptions\" aria-label=\"use in pull request descriptions permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Use in pull request descriptions</h3>\n<p>If you know that your application is vulnerable to a certain security issue, you can create a pull request to address the issue.\nIn the description you only have to mention the name of the vulnerability. As soon as the PR is created, it also contains a video, some details and a link to additional information about the issue.</p>\n<p><span\n      class=\"gatsby-resp-image-wrapper\"\n      style=\"position: relative; display: block; margin-left: auto; margin-right: auto; max-width: 590px; \"\n    >\n      <span\n    class=\"gatsby-resp-image-background-image\"\n    style=\"padding-bottom: 69.5945945945946%; position: relative; bottom: 0; left: 0; background-image: url('data:image/png;base64,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'); background-size: cover; display: block;\"\n  ></span>\n  <img\n        class=\"gatsby-resp-image-image\"\n        alt=\"Secure-Code-Warrior in pull request description\"\n        title=\"Secure-Code-Warrior in pull request description\"\n        src=\"/static/e88a00b3d3aa6855b182c736eac6f8e7/fcda8/pr-description.png\"\n        srcset=\"/static/e88a00b3d3aa6855b182c736eac6f8e7/12f09/pr-description.png 148w,\n/static/e88a00b3d3aa6855b182c736eac6f8e7/e4a3f/pr-description.png 295w,\n/static/e88a00b3d3aa6855b182c736eac6f8e7/fcda8/pr-description.png 590w,\n/static/e88a00b3d3aa6855b182c736eac6f8e7/efc66/pr-description.png 885w,\n/static/e88a00b3d3aa6855b182c736eac6f8e7/c83ae/pr-description.png 1180w,\n/static/e88a00b3d3aa6855b182c736eac6f8e7/1bae2/pr-description.png 2117w\"\n        sizes=\"(max-width: 590px) 100vw, 590px\"\n        style=\"width:100%;height:100%;margin:0;vertical-align:middle;position:absolute;top:0;left:0;\"\n        loading=\"lazy\"\n        decoding=\"async\"\n      />\n    </span></p>\n<p>With all this information, every developer has everything they need to work on the issue.</p>\n<h3 id=\"use-in-pull-request-comments\" style=\"position:relative;\"><a href=\"#use-in-pull-request-comments\" aria-label=\"use in pull request comments permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Use in pull request comments</h3>\n<p>Another scenario is that a reviewer of a pull request finds or suspects a vulnerability and posts a comment in the pull request.\nThen the plugin provides the details in an additional comment.</p>\n<p><span\n      class=\"gatsby-resp-image-wrapper\"\n      style=\"position: relative; display: block; margin-left: auto; margin-right: auto; max-width: 590px; \"\n    >\n      <span\n    class=\"gatsby-resp-image-background-image\"\n    style=\"padding-bottom: 62.16216216216216%; position: relative; bottom: 0; left: 0; background-image: url('data:image/png;base64,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'); background-size: cover; display: block;\"\n  ></span>\n  <img\n        class=\"gatsby-resp-image-image\"\n        alt=\"Secure-Code-Warrior in pull request comment\"\n        title=\"Secure-Code-Warrior in pull request comment\"\n        src=\"/static/38db3b4b937c4c598bcb42318be15ea7/fcda8/pr-comment.png\"\n        srcset=\"/static/38db3b4b937c4c598bcb42318be15ea7/12f09/pr-comment.png 148w,\n/static/38db3b4b937c4c598bcb42318be15ea7/e4a3f/pr-comment.png 295w,\n/static/38db3b4b937c4c598bcb42318be15ea7/fcda8/pr-comment.png 590w,\n/static/38db3b4b937c4c598bcb42318be15ea7/efc66/pr-comment.png 885w,\n/static/38db3b4b937c4c598bcb42318be15ea7/f6f7a/pr-comment.png 1009w\"\n        sizes=\"(max-width: 590px) 100vw, 590px\"\n        style=\"width:100%;height:100%;margin:0;vertical-align:middle;position:absolute;top:0;left:0;\"\n        loading=\"lazy\"\n        decoding=\"async\"\n      />\n    </span></p>\n<p>This way the developer gets all the information that is needed to address the issue so that the pull request can be accepted.</p>\n<h3 id=\"challenges\" style=\"position:relative;\"><a href=\"#challenges\" aria-label=\"challenges permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Challenges</h3>\n<p>To get a better understanding of the issue at hand, there is always a link to challenges right under the video and description for the security topic.\nIt leads to challenges on the Secure Code Warrior website. They provide a hands-on example for a sample application.</p>\n<p><span\n      class=\"gatsby-resp-image-wrapper\"\n      style=\"position: relative; display: block; margin-left: auto; margin-right: auto; max-width: 590px; \"\n    >\n      <span\n    class=\"gatsby-resp-image-background-image\"\n    style=\"padding-bottom: 41.891891891891895%; position: relative; bottom: 0; left: 0; background-image: url('data:image/png;base64,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'); background-size: cover; display: block;\"\n  ></span>\n  <img\n        class=\"gatsby-resp-image-image\"\n        alt=\"Challenge from Secure-Code-Warrior\"\n        title=\"Challenge from Secure-Code-Warrior\"\n        src=\"/static/46db1e184c02408f1a2d62760475686e/fcda8/challenge.png\"\n        srcset=\"/static/46db1e184c02408f1a2d62760475686e/12f09/challenge.png 148w,\n/static/46db1e184c02408f1a2d62760475686e/e4a3f/challenge.png 295w,\n/static/46db1e184c02408f1a2d62760475686e/fcda8/challenge.png 590w,\n/static/46db1e184c02408f1a2d62760475686e/efc66/challenge.png 885w,\n/static/46db1e184c02408f1a2d62760475686e/c83ae/challenge.png 1180w,\n/static/46db1e184c02408f1a2d62760475686e/6aacb/challenge.png 1347w\"\n        sizes=\"(max-width: 590px) 100vw, 590px\"\n        style=\"width:100%;height:100%;margin:0;vertical-align:middle;position:absolute;top:0;left:0;\"\n        loading=\"lazy\"\n        decoding=\"async\"\n      />\n    </span></p>\n<h3 id=\"available-topics\" style=\"position:relative;\"><a href=\"#available-topics\" aria-label=\"available topics permalink\" class=\"anchor before\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>Available topics</h3>\n<p>To determine which security issues are displayed, the plugin uses a list of keywords.\nWhenever a PR description or content of a comment matches one of the words, the corresponding information is shown.\nIf keywords for more than one topic matches, several videos, details and links are displayed.</p>\n<p>Just to show you how many topics are covered, take a look at this:</p>\n<ul>\n<li>Insecure Data Storage</li>\n<li>Sensitive Data Storage</li>\n<li>Server-side Request Forgery</li>\n<li>Extraneous Functionality</li>\n<li>Code Tampering</li>\n<li>Client Code Quality</li>\n<li>Improper Platform Usage</li>\n<li>Lack of Binary Protections</li>\n<li>Insufficient Transport Layer Protection</li>\n<li>Client Side Injection</li>\n<li>Broken Cryptography</li>\n<li>Vulnerable Components</li>\n<li>Insufficient Logging &#x26; Monitoring</li>\n<li>Side Channel Vulnerability</li>\n<li>Information Exposure</li>\n<li>Unintended Data Leakage</li>\n<li>Unvalidated Redirects &#x26; Forwards</li>\n<li>Memory Corruption</li>\n<li>Injection Flaws</li>\n<li>File Upload Vulnerability</li>\n<li>Denial of Service (DoS)</li>\n<li>Insecure Authorization</li>\n<li>Insecure Authentication</li>\n<li>Improper Session Handling</li>\n<li>Session Handling</li>\n<li>Cross-site Request Forgery</li>\n<li>Authentication</li>\n<li>Security Misconfiguration</li>\n<li>Insecure Cryptography</li>\n<li>Business Logic</li>\n<li>Cross-Site Scripting (XSS)</li>\n<li>Access Control</li>\n</ul>","description":"Once the plugin is installed, the plugin is ready to show you videos and additional information about security topics. There are two different ways you can use…","tableOfContents":"<ul>\n<li><a href=\"#use-in-pull-request-descriptions\">Use in pull request descriptions</a></li>\n<li><a href=\"#use-in-pull-request-comments\">Use in pull request comments</a></li>\n<li><a href=\"#challenges\">Challenges</a></li>\n<li><a href=\"#available-topics\">Available topics</a></li>\n</ul>","frontmatter":{"title":"Overview","subtitle":null,"description":null,"keywords":null,"displayToc":null,"image":null}}},"pageContext":{"name":"scm-scw-plugin","slug":"/plugins/scm-scw-plugin/docs/3.1.x/en/overview/","version":"3.1.x","latestVersion":"3.1.x","latestPageVersion":"3.1.x","language":"en","canonicalPath":"/plugins/scm-scw-plugin/docs/latest/en/overview/","latestRootPath":"/plugins/scm-scw-plugin/docs/3.1.x/en/"}},
    "staticQueryHashes": ["1973669194","2742214048","2956773653","2957019495","698804963"]}