Verification · Threat modeling · Mitigation mapping
Coverage check
Report entry points that bypass the controls.
How to build it
- Route each entry point through the inventory of controls.
- List entry points that skip every control in the inventory.
- Report only weaknesses at entry points with no control in front of them.
Signals in a repository
- A coverage report or CI output that lists entry points without a control.
- Route definitions that show control middleware applied to each group.
- Exemption entries with a reason for each entry point that skips a control.
In practice
No scanned repository runs a tool for this check. The steps above are the only guidance.