diff --git a/doc/source/index.rst b/doc/source/index.rst index 77f1e33..1603e73 100644 --- a/doc/source/index.rst +++ b/doc/source/index.rst @@ -222,56 +222,3 @@ information. Specifically, they are responsible for the following functions: researchers who responsibly report issues in OpenStack. See :doc:`vmt-process` for details on our open process. - - -Security tool development -~~~~~~~~~~~~~~~~~~~~~~~~~ - -The Security project are constantly looking at ways to introduce tooling and -automation to improve the overall security of OpenStack projects. Some of these -projects are outlined below. - -Bandit - static analysis for Python -^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ - -Bandit is a security static analysis tool for Python source code, utilizing the -ast module from the Python standard library. The **ast** module is used to -convert source code into a parsed tree of Python syntax nodes. Bandit allows -users to define custom tests that are performed against those nodes. At the -completion of testing, a report is generated that lists security issues -identified within the target source code. - -Bandit is currently a stand-alone tool which can be downloaded by end-users and -run against arbitrary source code. Although early in development it is already -adding value to the OpenStack code base with several projects leveraging it -in their CI gate tests. As the project matures the desire is to see widespread -adoption of Bandit in the OpenStack community. - -Bandit can be obtained by cloning the `repository `_. -The README.rst file contains documentation regarding installation, usage, -and configuration. - -* `Bandit Git Repository `_ -* `Bandit Gerrit `_ -* `Bandit Launchpad `_ - -Syntribos - Python API security testing tool -^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ - -Syntribos is an open source automated API security testing tool that is -maintained by members of the `OpenStack Security Project `_. - -Given a simple configuration file and an example HTTP request, syntribos -can replace any API URL, URL parameter, HTTP header and request body -field with a given set of strings. Syntribos iterates through each position -in the request automatically. The tool aims to automatically detect common -security defects such as SQL injection, LDAP injection, buffer overflow, etc. -In addition, it can be used to help identify new security defects -by automated fuzzing. - -Syntribos can be installed directly from `pypi with pip `_. - -* `Syntribos developer documentation `_ -* `Syntribos Git Repository `_ -* `Syntribos Gerrit `_ -* `Syntribos Launchpad `_