Practical Security Automation and Testing

Step 3 – viewing the results

When the assessment is done, you will be able to see the assessment results here: https://www.mir-swamp.org/#results. Or, you can navigate to Home then Results:

Assessments results in SWAMP

Take the vulnerable Python as an example: the SWAMP applies three scanning tools, Bandit, Flake8, and Pylint, for the scanning. We may review one of the scanning results by selecting the checkbox in front of the package name and clicking View Assessment Results button. This brings us to the options of Native or Code Dx view. The Native view provides a summary table of the identified security code issues, and the Code Dx view ...