Coverity Analysis checkers replaced by Sigma checks

Coverity Documentation

Version
latest

A number of Coverity Analysis checkers have been either completely or partially replaced by Sigma (SIGMA.*) checks.

The following Coverity Analysis checkers have been replaced by Sigma (SIGMA.*) checks for equivalent languages.

Table 1. Coverity Analysis checkers replaced by Sigma checks for specific languages
Coverity Analysis checker Languages removed from Coverity Analysis checker Sigma checks replacing this Coverity checker
ASPNET_MVC_VERSION_HEADER
C#
SIGMA.sensitive_data_in_response_aspnet_core
UNSAFE_XML_PARSE_CONFIG
C#
SIGMA.xml_external_entity_enabled_dotnet_core

The following Coverity Analysis checkers have been replaced by Sigma (SIGMA.*) checks for all languages.

Table 2. Coverity Analysis checkers completely replaced by Sigma checks
Coverity Analysis checker Sigma checks replacing this Coverity checker
CONFIG.ASPNET_VERSION_HEADER
SIGMA.sensitive_data_in_response_aspnet_core_config
CONFIG.CONNECTION_STRING_PASSWORD
SIGMA.hardcoded_secret_aspnet_core_config
CONFIG.MISSING_CUSTOM_ERROR_PAGE
SIGMA.verbose_error_message_aspnet_core_config