Verification · Code review · Security-focused review
OWASP classification
Tag each finding with an OWASP Top 10 category for routing and reporting.
How to build it
- Map each finding to one OWASP Top 10 category by its root cause.
- Store the category as a label or field in every finding record.
- Use the category to route findings to the owning team.
Signals in a repository
- OWASP Top 10 category labels on security issues or findings.
- A security report template with an OWASP category column.
- Scanner rule metadata that names an OWASP category.
In practice
No scanned repository runs a tool for this check. The steps above are the only guidance.