Debian packaging of the OWASP Core Rule Set 4 for Coraza, for Keel Linux on trixie (DEP-14, gbp)
  • Python 80.1%
  • Shell 19.9%
Find a file
Marcos Méndez da6ec718ac
All checks were successful
security / security (push) Successful in 1m0s
package / build (push) Successful in 2m39s
Merge pull request 'ci: Forgejo workflows for git.pop.coop' (#3) from ci/forgejo-workflows into keel/trixie
2026-10-14 19:46:12 -03:00
.forgejo/workflows ci: Forgejo workflows for git.pop.coop 2026-10-14 22:23:53 +00:00
.github ci: security scanning, with the findings read and justified 2026-10-07 18:18:24 +00:00
debian debian: dpkg-source ignores .forgejo/ as it ignores .github/ 2026-10-14 22:32:20 +00:00
docs New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
plugins New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
regex-assembly New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
rules New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
tests New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
util New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
.editorconfig New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
.gitignore New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
.gitmodules New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
.linelint.yml New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
.pre-commit-config.yaml New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
.yamllint.yml New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
BACKPORT_POLICY.md New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
CHANGES.md New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
CONTRIBUTING.md New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
CONTRIBUTORS.md New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
crs-setup.conf.example New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
INSTALL.md New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
KNOWN_BUGS.md New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
LICENSE New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
README.md New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
renovate.json New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
SECURITY.md New upstream version 4.25.1 2026-10-01 02:29:21 +00:00
SPONSORS.md New upstream version 4.25.1 2026-10-01 02:29:21 +00:00

OWASP Flagship CII Best Practices License

Branch Status
main Regression Tests

🛡️ OWASP CRS

The OWASP CRS is a set of generic attack detection rules for use with OWASP ModSecurity, OWASP Coraza, or other compatible web application firewalls. The CRS aims to protect web applications from a wide range of attacks, including the OWASP Top Ten, with a minimum of false alerts.

Please see the OWASP CRS page to get introduced to CRS and view resources on installation, configuration, and working with CRS. There you can also find a list of projects related to CRS and a list of tools for both developers and users.

🤝 Contributing to CRS

We strive to make the OWASP CRS accessible to a wide audience of beginner and experienced users. We are interested in hearing any bug reports, false-positive alert reports, evasions, usability issues, and suggestions for new detections.

  • 🐛 Create an issue on GitHub to report a false positive or false negative (evasion). Please include your installed version and the relevant portions of your audit log. We will try and address your issue and potentially ask for additional information to reproduce your problem. Please also note that stale issues will be flagged and closed after 120 days. You can search for stale issues with the following search query.

  • 💬 Sign up for our Google Group to ask general usage questions and participate in discussions on the CRS.

  • 💬 Join the #coreruleset channel on OWASP Slack to chat about the CRS. (Click here to get an invitation if you are not yet registered on the OWASP Slack. It's open to non-members too.)

  • 📖 Read also our documentation on how to contribute.

📄 License

Copyright (c) 2006-2020 Trustwave and contributors. All rights reserved.
Copyright (c) 2021-2026 CRS project. All rights reserved.

The OWASP CRS is distributed under Apache Software License (ASL) version 2. Please see the enclosed LICENSE file for full details.