SAP sponsored check of OpenSource ABAP Projects with Code Vulnerability Analyzer

[gregorw]

Hello SAP Code Vulnerability Analyzer Product Managment and SAP Open Source Office,

currently https://dotabap.org/ already lists 138 Projects on GitHub that are ABAP based with a total number of 800.2k Lines of Code. Wouldn't it be a great opportunity to show the power of the SAP Code Vulnerability Analyzer on this projects and improve the trustworthiness of this projects.

The virtual SAP Stammtisch Dortmund who started this idea is looking forward for your your feedback.

Supporters of this idea:
sschlegel, c9b9c8ea15574d29bfafe89e88ac94ec, thimel, se38, gregorw, dilorenzo, cemal00, florian.henninger, 1c23e4f036644568ac36f3b2e9939062

Prost 😉

CC: craig.cmehil thomasfiedler svea.becker thomas.grassl thomas.jung peter.barker harald.kuck and Peter Giese via Mail

[gregorw]

Perhaps lars.hvam knows a way how to get something like the Security Alerts that are filled by GitHub:

[gregorw]

For the installation of the OpenSource ABAP projects it might be the easiest option to adjust abapGit/CI to support not only the projects in the group abapGit-tests as a source, but also the JSON file which feeds dotabap (Ping: christian.guenter). I think it would be enough to run the tests once a week and use a Cloud Hosted ABAP Developer Edition for that. Another option might be sapcli from jakub.filak.

[alex_geppart]

gregorw Great Idea.

Another possibility to support open source ABAP development could be to have a special offer of SAP Remote Access and Connectivity Service (SAP RAC). So those projects could be tested in different system versions (ex. NW 7.02, 7.30, 7.40, 7.50 HANA)