$ show OWASP/wstg
The OWASP Web Security Testing Guide (WSTG) is a comprehensive, community-maintained documentation project defining standard test cases for web application security assessments. It is primarily a structured knowledge base written in Markdown, organized by testing categories including Information Gathering, Authentication, Injection, and API Testing. The repository also serves as the source for multiple derived artifacts: a Jekyll static website (wstg.owasp.org), downloadable PDF/EPUB ebooks via a Pandoc+Typst pipeline, and machine-readable test checklists in JSON, XLSX, and Markdown formats. The build infrastructure includes Python scripts for site generation and navigation, GitHub Actions for CI/CD (linting, link checking, deployment), and a versioned release process that supports multiple channels (latest, stable, past versions). Although the primary content is documentation, the repository functions as a publication platform with significant automation and is actively maintained by a community of contributors. It is not a software application in the traditional sense, but the build tooling and CI/CD pipelines qualify it as an application-focused project with strong data engineering characteristics in its checklist generation and structured content management.
The LLM identified 3 files worth highlighting for reuse:
A Pandoc Lua filter that rewrites relative links, resolves cross-references, and handles image paths during ebook generation. It is self-contained and demonstrates a pattern for maintaining link fidelity across formats (Markdown, PDF, EPUB). Could be reused in any documentation pipeline that uses Pandoc and needs to adapt Markdown links for print output.
Python script that parses structured Markdown test documents to produce a canonical JSON checklist, enriched with OpenCRE IDs via a REST API with retry logic, concurrency, and delta reporting. It is parameterized and could be adapted to generate structured data from any set of templated Markdown files, not just security tests.
A comprehensive CSS design system using custom properties for colors, typography, spacing, and shadows. Includes a three-layer dark mode fallback (JavaScript attribute, prefers-color-scheme, graceful degradation) and accessibility features. The token system is decoupled and could be reused by other OWASP projects or any static documentation site.