OWASP
Update: ASVS Index to ASVS 5.0
What is missing or needs to be updated?
The ASVS Index: https://cheatsheetseries.owasp.org/IndexASVS.html#asvs-index still uses ASVS 4.0 and need to be updated to ASVS 5.0
How should this be resolved?
Update ASVS Index to be up-to-date with ASVS 5.0
Do you need help with this?
If so, how do you prefer to solve it? Do you want to have 2 Indexes covering ASVS 4.0 and ASVS 5.0, or is it ok to move the references for the cheat sheet pages under the correct headlines to the newest version of the standard?
Good point @sydseter I think we should update the main index to ASVS 5.0 so everything stays current. If needed, we could just keep an archived link for 4.0 at the bottom for reference. I’d be happy to help with moving the references under the right 5.0 sections.
Great! At OWASP Cornucopi we use the ASVS 4.0 index to link to the cheat sheet pages: https://cornucopia.owasp.org/cards/VE3#card
But we are ready to move to ASVS 5.0
Elar Lang made a mapping between ASVS 4.0 and 5.0 https://asvs.dev/Mappings/
Thanks for the mapping link @sydseter - that’s really helpful. I agree the best path is to align the index with ASVS 5.0 directly and keep a simple archived link for 4.0. I can take a first pass at updating the index using the mapping and share it for review.
Awesome, thanks @jmanico . I’ll start drafting the updated ASVS 5.0 index using the mapping resource and push an initial PR soon. Once it’s up, we can all review and refine the structure together.
Thanks @mackowski for assigning this.
I’ve started reviewing the ASVS 4.0 → 5.0 mapping and aligning the index structure accordingly. My plan is:
- Use the asvs.dev mapping as the primary reference.
- Update the main index page to ASVS 5.0.
- Add a simple archived link at the bottom for ASVS 4.0 for backward reference.
I’ll aim to open a draft PR shortly so everyone can review the structure and suggest refinements before finalizing.