Integrate NIST "Guidelines on Minimum Standards for Developer Verification of Software"

[cmlh]

Confirm the integration of the recently published (July 2021) "Guidelines on Minimum Standards for Developer Verification of Software" from NIST, specifically their "Recommended Minimum Standard for Developer Testing":

• Threat Modeling
• Automated Testing
• Code-Based, or Static, Analysis
• Review for Hardcoded Secrets
• Run with Language-Provided Checks and Protection
• Black Box Test Cases
• Code-Based Test Cases
• Historical Test Cases
• Fuzzing
• Web Application Scanning
• Check Included Software Components

[elarlang]

Why, and what is your clear proposal?

[cmlh]

I have updated the placeholder text.

Can @elarlang create a "NIST" Milestone as there will be a number of child issue[s] created against the task list above in addition to other points raised within "Guidelines on Minimum Standards for Developer Verification of Software" please?

I'd also be interested to know if NIST reached out to other ASVS Project Leader[s] @danielcuthbert @jmanico @tghosth @vanderaj et al as there is no reference to ASVS within "Guidelines on Minimum Standards for Developer Verification of Software" please?

[jmanico]

This is not a clear issue we can work on. Closing this out.

[cmlh]

I'm not planning to take an action until the next major/minor release of ASVS after 4.0.2 is published as this will be either a major change or fork @jmanico