asvs-audit

What problem does it solve?

It turns security assessment work against OWASP ASVS 5.0 Level 1 into a structured, evidence-based audit process that consistently produces a complete verification report.

Core Features & Use Cases

• Deterministic ASVS 5.0 L1 evaluation: Assesses all 70 verification items in strict order using the bundled CSV as the canonical source of truth.
• Evidence-driven classifications: Produces ✅ PASS, ⚪ N/A, ⚠️ NEEDS_REVIEW, or ❌ FAIL for every item with strict evidence formatting (file:line, config keys, framework defaults, or explicit missing-controls evidence).
• Compliant report generation: Uses the mandatory report template to build a Level 1 audit report containing a verification control table with exactly 70 rows, and writes the finished report to a docs/ path in the target repository.

Quick Start

Run an ASVS Level 1 audit for your target repository by providing the target repo path and project name, ensuring the workspace includes the required ASVS CSV and report template files.