COBOL security review

The following rules are available for COBOL security review.

zcodescan.cobol.rules.AcceptFromConsoleRule
Avoid ACCEPT statements containing FROM CONSOLE or FROM SYSIN.
zcodescan.cobol.rules.AcceptRule
Insecure use of ACCEPT.
zcodescan.cobol.rules.BufferOverflowRule
Improper restriction of operations within the bounds of a memory buffer.
zcodescan.cobol.rules.DebugFeaturesInProdRule
Do not deliver code to production with debug features enabled (security-sensitive).
zcodescan.cobol.rules.NoDisplayRule
Avoid using DISPLAY statements in production programs.
zcodescan.cobol.rules.SqlInjectionRule
Improper neutralization of special elements used in an SQL command (SQL Injection).
zcodescan.cobol.rules.SqlNoDdlInAppRule
Do not use DDL statements in programs.
zcodescan.cobol.rules.UninitialzedVariablesRule
Use of uninitialized variables.
zcodescan.cobol.rules.UnprotectedAuthCredentialRule
Unprotected Authentication Credentials.
zcodescan.cobol.rules.XMLParseRule
Avoid XML PARSE statements.

Parent topic: Security review