logging-failures

From README

Security Logging and Monitoring Failures Security Check (A09:2025) What this checks Protects the ability to detect and respond to attacks. Missing security event logs leave breaches undetected; logging sensitive fields creates new data-exposure vulnerabilities; CRLF injection lets attackers forge log entries. Vulnerable patterns Log statement that interpolates a credential, token, or other secret as a value Authentication failure, authorization denial, or privileged action that exits without producing a log record Log call that dumps a full request body, response, or other payload containing PII or tokens User-controlled string interpolated into a log line without CRLF/newline stripping, allowing forged log entries Unstructured string logs that a SIEM cannot reliably parse or alert on Fix immediately Flag the vulnerable code and explain the risk. Then suggest a fix that establishes these properties: Every security-relevant decision point emits exactly one log record.