From 7ae614073e6ad99b709c5ef7e6c531456bcb3a06 Mon Sep 17 00:00:00 2001 From: Samuel Aubert Date: Wed, 17 Jun 2026 06:52:09 -0400 Subject: [PATCH 1/3] Fix release tag series to anchor TCASVS at v5 --- .github/workflows/main.yml | 19 ++++++++++++++----- 1 file changed, 14 insertions(+), 5 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 8e1bf3a..3bac3c0 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -53,7 +53,7 @@ jobs: run: | LATEST_TAG=$(curl -s https://api.github.com/repos/${{ github.repository }}/releases/latest | jq -r .tag_name) if [ -z "$LATEST_TAG" ] || [ "$LATEST_TAG" == "null" ]; then - LATEST_TAG="v5.0.0" + LATEST_TAG="" fi echo "LATEST_TAG=$LATEST_TAG" >> $GITHUB_ENV @@ -62,10 +62,19 @@ jobs: if: github.event_name == 'push' run: | LATEST_TAG=${{ env.LATEST_TAG }} - LATEST_VERSION=${LATEST_TAG#v} - IFS='.' read -r major minor patch <<< "$LATEST_VERSION" - NEW_VERSION="$major.$minor.$((patch + 1))" - NEW_TAG="v$NEW_VERSION" + + # TCASVS release line is anchored to ASVS-style v5.x tags. + # Ignore legacy TASVS tags (for example v1.8.x) when deriving the next tag. + if [[ "$LATEST_TAG" =~ ^v5\.([0-9]+)\.([0-9]+)$ ]]; then + major=5 + minor=${BASH_REMATCH[1]} + patch=${BASH_REMATCH[2]} + NEW_VERSION="$major.$minor.$((patch + 1))" + NEW_TAG="v$NEW_VERSION" + else + NEW_TAG="v5.0.0" + fi + echo "NEW_TAG=$NEW_TAG" >> $GITHUB_ENV - name: Create GitHub Release From 0fc712275c97222bf88d4a2d70fa9ce817d0fa37 Mon Sep 17 00:00:00 2001 From: Samuel Aubert Date: Wed, 17 Jun 2026 06:54:51 -0400 Subject: [PATCH 2/3] Update Bentley sponsor name in index --- index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.md b/index.md index 025f49c..fe282cc 100644 --- a/index.md +++ b/index.md @@ -54,6 +54,6 @@ The OWASP TCASVS would like to thank all of our [contributors](https://github.co

-**Bentley is the leading provider of infrastructure engineering software, advancing infrastructure for better quality of life and sustainability.** +**Bentley Systems is the leading provider of infrastructure engineering software, advancing infrastructure for better quality of life and sustainability.** Visit [bentley.com](https://www.bentley.com/company/about-us/) to learn more. \ No newline at end of file From b640aa9d0260d7981dc36949db3a6e41b27334ae Mon Sep 17 00:00:00 2001 From: Samuel Aubert Date: Wed, 17 Jun 2026 06:58:23 -0400 Subject: [PATCH 3/3] Trigger release workflow when workflow file changes --- .github/workflows/main.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 3bac3c0..8da3c84 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -8,11 +8,13 @@ on: - '5.0/**' - 'docker/**' - 'Makefile' + - '.github/workflows/main.yml' pull_request: paths: - '5.0/**' - 'docker/**' - 'Makefile' + - '.github/workflows/main.yml' jobs: build: