Security

This section details the security related validations done for DRISTI. These are primarily divided into two kinds of security testing

Code Scanning

The DRISTI git repo has been enabled with various code scanning tools that help identify security issues in the code

• CodeQL

• Dependabot

• Secret Scanning

• Trivy

• Semgrep OSS

• Snyk Open Source

• SonarQube

Security Audit

This includes a series of tests done by a security audit agency. This includes security audit, vulnerability assessment and penetration testing. This includes a variety of tests like network security, penetration testing, SQL injection, cross site scripting, denial of service, OWASP top 10, identity spoofing etc.

In addition the application has been tested by a community of ethical hackers.