To make sure we have proper mappings of tool results to the CWEs we expect during scoring, we have a CWE mapping method in very parser. Some of these have fixed lists, and a don't care block that silent EATS results that don't map to anything currently. ALL tools need to instead spit out a message to the console that says effectively: "Here is a NEW CWE/Mapping value THEVALUE that we haven't seen before. Please map this to the proper CWE".
Here is the list of tools that need to be worked on:
To make sure we have proper mappings of tool results to the CWEs we expect during scoring, we have a CWE mapping method in very parser. Some of these have fixed lists, and a don't care block that silent EATS results that don't map to anything currently. ALL tools need to instead spit out a message to the console that says effectively: "Here is a NEW CWE/Mapping value THEVALUE that we haven't seen before. Please map this to the proper CWE".
Here is the list of tools that need to be worked on: