JPhor537964 (Community Member) asked a question.
How do we keep track / trace on the rules updates like "Auto Update CWE Top 25"?
reason for asking do was due to the inconsistent results in the scanning whereby it is totally understandable since the policy was configured to have the the "auto update" rules but we would like to have a place for us, customer to be aware on what has been changed and pre prompt the developer
.png){kind=logo}
Hello @JPhor537964 (Community Member) ,
At the current time, we don't have versions of a policy but would suggest adding it as an Idea and the more support an Idea receives, the more likely it will be considered or prioritized for implementation.
A recent post was added this month in our document center titled Update To OWASP Top 10 2021 For Auto-Update Security Standard, which would be worth reading.
Jason
Veracode Support Engineer