wip, add cwe/owasp

Author: pethers

.gitignore

@@ -0,0 +1 @@
+/target/

src/main/java/com/hack23/sonar/CloudformationRulesDefinition.java

@@ -2,9 +2,13 @@
 
 import java.io.InputStream;
 import java.nio.charset.StandardCharsets;
+import java.util.Set;
 
+import org.apache.commons.lang3.reflect.FieldUtils;
 import org.sonar.api.server.rule.RulesDefinition;
 import org.sonar.api.server.rule.RulesDefinitionXmlLoader;
+import org.sonar.api.server.rule.RulesDefinition.NewRule;
+import org.sonar.api.server.rule.RulesDefinition.OwaspTop10;
 
 public class CloudformationRulesDefinition implements RulesDefinition {
 
@@ -27,10 +31,31 @@ private void defineRulesForLanguage(Context context, String repositoryKey, Strin
 	    if (rulesXml != null) {
 	      RulesDefinitionXmlLoader rulesLoader = new RulesDefinitionXmlLoader();
 	      rulesLoader.load(repository, rulesXml, StandardCharsets.UTF_8.name());
-	    }
-
+	      
+	      
+	      for (NewRule newRule : repository.rules()) {
+	      	
+	  		try {
+	  			final Set<String> tags = (Set<String>) FieldUtils.readField(newRule, "tags", true);
+	  			for (String tag : tags) {
+	  				
+	  				if (tag.contains("cweid-")) {
+	  					newRule.addCwe(Integer.parseInt(tag.replace("cweid-", "")));					
+	  				}
+	  		    	
+	  				if (tag.contains("owasp-")) {
+	  					newRule.addOwaspTop10(OwaspTop10.valueOf(tag.replace("owasp-", "").toUpperCase()));				
+	  				}
+	  			}
+	  		} catch (IllegalAccessException e) {
+	  			//LOGGER.warn("Problem parsing security tags",e);
+	  		} 
+	      }
+	      }
 	    repository.done();
+	    
 	  }
+	  
 
 	  @Override
 	  public void define(Context context) {

src/main/resources/cloudformation-rules.xml

@@ -9,7 +9,7 @@
 		<status>READY</status>
 		<type>VULNERABILITY</type>
 		<tag>owasp-a6</tag>
-		<tag>cwe-311</tag>		
+		<tag>cweid-311</tag>		
 		<remediationFunction>CONSTANT_ISSUE</remediationFunction>
         <remediationFunctionBaseEffort>10min</remediationFunctionBaseEffort>
      </rule>