What C6: Keep your Components Secure requires
OWASP Top 10 Proactive Controls 2024, C6: Keep your Components Secure. It is a common practice in software development to leverage libraries and frameworks. Secure libraries and software frameworks with embedded security help software developers prevent security-related design and implementation flaws. This is one of the OWASP Top 10 Proactive Controls (2024 edition), the OWASP Foundation's list of the ten most important security techniques that every software architect and developer should build into every project. Where the OWASP Top 10 enumerates the most critical web application security risks, the Proactive Controls enumerate the defensive techniques that prevent them. Organizations should treat this control as a design requirement, an implementation checklist, and a continuous-verification obligation, supported by a security policy, automated testing in the CI/CD pipeline, developer training, and incident response.
Pillar: Cybersecurity · Authority: OWASP Foundation (Open Worldwide Application Security Project) · Version: 1.0.0 · Last updated:
Primary source: https://top10proactive.owasp.org/archive/2024/the-top-10/c6-use-secure-dependencies/
SHA-256 integrity: 53f1ebc131c5bf9649580983e3b0756f61bfe7e02658bd2c6038349efe2c252b
Primary Citations — 13 traced to source
- OWASP Top 10 Proactive Controls 2024, C6 Keep your Components Secure, Implementation: 'Maintain an inventory catalog of all the third party components. It is recommended to automatically create SBOMs (Software-Bill-Of-Materials) from within the build pipeline. A SBOM contains all used third-party dependencies and their versions and can be automatically monitored by a variety of supply chain management tools.'
- OWASP Top 10 Proactive Controls 2024, C6 Keep your Components Secure, Implementation: 'Perform continuous checks. Use your SBOMs together with periodic or continuous monitoring tools such as OWASP dependency-track to automatically detect well-known publicly disclosed vulnerabilities.'
+ 11 more citations (full bibliography, deterministic workflow, actionable schema and crosswalks) included in the vault unlock — $0.01 via Skyfire / L402 / Direct Base USDC.
Access
- Discovery (free): /api/v1/nodes/owasp-proactive-controls-2024-c6-keep-your-components-secure.json — 6-field metadata
- Vault (full node): /api/v1/vault/nodes/owasp-proactive-controls-2024-c6-keep-your-components-secure.json — full 13-key payload, $0.01 USDC (L402/Skyfire/Direct Base)
- Canonical URL: https://bidda.com/intelligence/owasp-proactive-controls-2024-c6-keep-your-components-secure
- Back to registry: Browse all 10,099 compliance nodes