diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 0000000..8f35efd --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,7 @@ +version: 2 +updates: + - package-ecosystem: github-actions + directory: / + schedule: + interval: weekly + time: '00:45' diff --git a/.github/workflows/validate-owasp-metadata.yaml b/.github/workflows/validate-owasp-metadata.yaml new file mode 100644 index 0000000..3c148ca --- /dev/null +++ b/.github/workflows/validate-owasp-metadata.yaml @@ -0,0 +1,27 @@ +name: Validate OWASP entity metadata + +on: + pull_request: + paths: + - '*.owasp.yaml' + push: + paths: + - '*.owasp.yaml' + +permissions: + contents: read + +concurrency: + cancel-in-progress: true + group: ${{ github.repository }}-${{ github.workflow }}-${{ github.ref }} + +jobs: + validate-metadata: + runs-on: ubuntu-latest + + steps: + - name: Checkout code + uses: actions/checkout@v5 + + - name: Validate metadata file + uses: owasp/nest-schema/.github/actions/validate@a733198b4a942eb12d3ee8629cd9e0d409b1b2b9 diff --git a/project.owasp.yaml b/project.owasp.yaml new file mode 100644 index 0000000..935074c --- /dev/null +++ b/project.owasp.yaml @@ -0,0 +1,34 @@ +audience: + - breaker + - builder +community: + - name: istg + platform: slack + url: https://owasp.slack.com/archives/C05QA92T1JP + description: Channel for IoT Security Testing Guide discussions and updates. For issues, please file in GitHub +leaders: + - name: Luca Pascal Rotsch + email: luca.pascalrotsch@owasp.org + github: rockhoppersec + - name: Aaron Guzman + email: aaron.guzman@owasp.org + github: scriptingxss +level: 2 +license: + - CC-BY-SA-4.0 +name: OWASP IoT Security Testing Guide +pitch: The OWASP IoT Security Testing Guide provides a comprehensive methodology for penetration tests in the IoT field. +repositories: + - name: www-project-iot-security-testing-guide + url: https://github.com/OWASP/www-project-iot-security-testing-guide + description: OWASP IoT Security Testing Guide site repository + - name: owasp-istg + url: https://github.com/OWASP/owasp-istg + description: The IoT Security Testing Guide (ISTG) provides a comprehensive methodology for penetration tests in the IoT field, offering flexibility + to adapt innovations, and developments in the IoT market while still ensuring comparability of test results. +tags: + - istg + - custom-tag-1 + - custom-tag-2 +type: documentation +website: https://owasp.org/www-project-iot-security-testing-guide