OWASP Cornucopia is a mechanism in the form of a card game to assist software development teams identify security requirements in Agile, conventional and formal development processes. It is language, platform and technology agnostic.
Updated templates with tags. convert.py script pulls language files data and replaces tags with language text. Functions available to output idml files or docx files.
Script can also create template files using the matching text to populate with tags. As text does not all match correctly, this function still requires manual intervention for completing the template setup.
Todo: Add meta data to the processing for editions, languages and versions. Add logging. Add testing.
- Adding editions, languages and versions to the deck converter.
- Adding the mobile app edition.
- Adding functionality for building the leaflet.
- Update the ASVS mapping version to ASVS 4.0.3.
- Adding layouts
- Remove styles as an option, use layouts instead.
- Remove filetypes and introduce templates instead.
- Adding the tarot layout and renaming static to bridge
- Removing old versions prior to 1.22
- Adding fuzzing
- Adding the Italian translation by Ruggero DallAglio
- Fixing the card codes ensuring they are in line with the documentation.
- Adding the Portuguese pt-pt translation by André Ferreira
- Adding the OWASP Cornucopia website
- Design changes to accomodate for the QR codes
- Adding the Russian translation by Andrey Danin
- Changing all the fonts to Noto Sans for better language support
- Adding CRE to the Website App Edition
- Adding Copi - The Cornucopia Game Engine
- Adding Elevation of MLSec through Copi
- Adding OWASP Cumulus through Copi
- Migrated the cross-references from SCP to the DevGuide Web Checklist v4.1.9 for Website App Edition v2.2
- ASVS has been migrated from v4.0.3 to v5.0 for Website App Edition v3.0
- The text on the cards has been updated to include MFA and passkeys as an option for authentication
- Cards within the session management suit have been updated toe align with modern session management practices