Rename Seqra to OpenTaint across reader, tests, and SARIF fixtures

Author: seqradev

plugin/src/main/java/org/owasp/benchmarkutils/score/parsers/Reader.java

@@ -35,10 +35,10 @@
 import org.owasp.benchmarkutils.score.parsers.sarif.ContrastScanReader;
 import org.owasp.benchmarkutils.score.parsers.sarif.DatadogSastReader;
 import org.owasp.benchmarkutils.score.parsers.sarif.FortifySarifReader;
+import org.owasp.benchmarkutils.score.parsers.sarif.OpenTaintReader;
 import org.owasp.benchmarkutils.score.parsers.sarif.PTAIReader;
 import org.owasp.benchmarkutils.score.parsers.sarif.PrecautionReader;
 import org.owasp.benchmarkutils.score.parsers.sarif.SemgrepSarifReader;
-import org.owasp.benchmarkutils.score.parsers.sarif.SeqraReader;
 import org.owasp.benchmarkutils.score.parsers.sarif.SnykReader;
 import org.w3c.dom.NamedNodeMap;
 import org.w3c.dom.Node;
@@ -104,7 +104,7 @@ public static List<Reader> allReaders() {
                 new SemgrepReader(),
                 new SemgrepCSVReader(),
                 new SemgrepSarifReader(),
-                new SeqraReader(),
+                new OpenTaintReader(),
                 new ShiftLeftReader(),
                 new ShiftLeftScanReader(),
                 new SnappyTickReader(),

…ils/score/parsers/sarif/SeqraReader.java …score/parsers/sarif/OpenTaintReader.javaplugin/src/main/java/org/owasp/benchmarkutils/score/parsers/sarif/SeqraReader.java renamed to plugin/src/main/java/org/owasp/benchmarkutils/score/parsers/sarif/OpenTaintReader.java plugin/src/main/java/org/owasp/benchmarkutils/score/parsers/sarif/SeqraReader.java renamed to plugin/src/main/java/org/owasp/benchmarkutils/score/parsers/sarif/OpenTaintReader.java

@@ -20,20 +20,20 @@
 import org.owasp.benchmarkutils.score.CweNumber;
 
 /**
- * This reader is made for Seqra, a security static analysis tool. It uses the SARIF file produced
- * by the tool.
+ * This reader is made for OpenTaint, a security static analysis tool. It uses the SARIF file
+ * produced by the tool.
  */
-public class SeqraReader extends SarifReader {
+public class OpenTaintReader extends SarifReader {
 
-    public SeqraReader() {
-        super("Seqra", false, CweSourceType.TAG);
+    public OpenTaintReader() {
+        super("OpenTaint", false, CweSourceType.TAG);
     }
 
     /**
-     * Maps Seqra CWE numbers to Benchmark expected CWEs.
+     * Maps OpenTaint CWE numbers to Benchmark expected CWEs.
      *
-     * <p>The SarifReader base class only uses the first CWE tag from each rule. Some Seqra rules
-     * have multiple CWE tags where the first one doesn't match Benchmark's expected CWE. This
+     * <p>The SarifReader base class only uses the first CWE tag from each rule. Some OpenTaint
+     * rules have multiple CWE tags where the first one doesn't match Benchmark's expected CWE. This
      * method provides ad-hoc mappings for such cases.
      *
      * <p>Example: The rule "java.security.cookie-issecure-false" has tags [CWE-319, CWE-614]. The

…score/parsers/sarif/SeqraReaderTest.java …e/parsers/sarif/OpenTaintReaderTest.javaplugin/src/test/java/org/owasp/benchmarkutils/score/parsers/sarif/SeqraReaderTest.java renamed to plugin/src/test/java/org/owasp/benchmarkutils/score/parsers/sarif/OpenTaintReaderTest.java plugin/src/test/java/org/owasp/benchmarkutils/score/parsers/sarif/SeqraReaderTest.java renamed to plugin/src/test/java/org/owasp/benchmarkutils/score/parsers/sarif/OpenTaintReaderTest.java

@@ -29,28 +29,28 @@
 import org.owasp.benchmarkutils.score.TestSuiteResults;
 import org.owasp.benchmarkutils.score.parsers.ReaderTestBase;
 
-public class SeqraReaderTest extends ReaderTestBase {
+public class OpenTaintReaderTest extends ReaderTestBase {
 
     private ResultFile resultFile;
 
     @BeforeEach
     void setUp() {
-        resultFile = TestHelper.resultFileOf("testfiles/Benchmark_Seqra.sarif");
+        resultFile = TestHelper.resultFileOf("testfiles/Benchmark_OpenTaint.sarif");
         BenchmarkScore.TESTCASENAME = "BenchmarkTest";
     }
 
     @Test
-    public void onlySeqraReaderTestReportsCanReadAsTrue() {
-        assertOnlyMatcherClassIs(this.resultFile, SeqraReader.class);
+    public void onlyOpenTaintReaderTestReportsCanReadAsTrue() {
+        assertOnlyMatcherClassIs(this.resultFile, OpenTaintReader.class);
     }
 
     @Test
     void readerHandlesGivenResultFile() throws Exception {
-        SeqraReader reader = new SeqraReader();
+        OpenTaintReader reader = new OpenTaintReader();
         TestSuiteResults result = reader.parse(resultFile);
 
         assertEquals(TestSuiteResults.ToolType.SAST, result.getToolType());
-        assertEquals("Seqra", result.getToolName());
+        assertEquals("OpenTaint", result.getToolName());
         assertEquals("v2.2.0", result.getToolVersion());
         assertFalse(result.isCommercial());
 
@@ -62,7 +62,7 @@ void readerHandlesGivenResultFile() throws Exception {
 
     @Test
     void mapCweMapsInsecureCookieCwe() {
-        SeqraReader reader = new SeqraReader();
+        OpenTaintReader reader = new OpenTaintReader();
 
         // CWE-319 (Cleartext Transmission) should map to CWE-614 (Insecure Cookie)
         assertEquals(CweNumber.INSECURE_COOKIE, reader.mapCwe(319));

…esources/testfiles/Benchmark_Seqra.sarif …rces/testfiles/Benchmark_OpenTaint.sarifplugin/src/test/resources/testfiles/Benchmark_Seqra.sarif renamed to plugin/src/test/resources/testfiles/Benchmark_OpenTaint.sarif plugin/src/test/resources/testfiles/Benchmark_Seqra.sarif renamed to plugin/src/test/resources/testfiles/Benchmark_OpenTaint.sarif

@@ -5,9 +5,9 @@
     {
       "tool": {
         "driver": {
-          "name": "Seqra",
+          "name": "OpenTaint",
           "organization": "Seqra",
-          "semanticVersion": "v2.2.0",
+          "semanticVersion": "v0.1.0",
           "rules": [
             {
               "defaultConfiguration": {
@@ -303,4 +303,4 @@
       ]
     }
   ]
-}
+}