New CWE support ?

[chenchampion]

Hi Sir, I want to write some new analysier to check more CWE error. can you give me some guide to get CWE dataset ? thank you for support.

[Enkelmann]

I am always happy for contributions, although I am not entirely sure what the question is. I will try to answer it anyway, but you may need to clarify your question if missed the intent of it.

The list of CWEs currently supported by the cwe_checker can be found in the main README file. If you need inspiration on what new CWE types to support, you can take a look at the official website of the Mitre organisation.

If you need guidance on how to write a new check, my recommendation is to start by taking a look at the implementation of a simple check like the CWE-676: Use of Dangerous Function check and figure out how it works. Afterwards, either look at a more complicated check or start asking concrete questions either here or in the gitter channel of the FACT project where I usually can be reached.