chore(knowledge): refresh security-best-practices against https://owasp.org/Top10/#top-10-list

[github-actions]

Summary

Grounded audit of security-best-practices.md against:

• https://owasp.org/Top10/#top-10-list

Verdict

• verdict: superseded
• audit_date: 2026-06-13
• model: gpt-4o-2024-08-06

Findings

severity	drift_kind	claim_in_entry	evidence_url
P0	edition-upgrade	The entry is version-pinned to 'OWASP Top 10 2021' and describes the 2021 categories (A01-A10).	https://owasp.org/Top10/#top-10-list

MMR

Not run inline — see knowledge-freshness CI gates.

Sources

• https://owasp.org/Top10/#top-10-list (sha256:cf318bf6e49239cd034bdfcdf41ca87eab4036c34f8991be2d2a24e52647a12b, retrieved 2026-06-13)

Preserve warnings

• The prefetched source body is a redirect page and does not contain the actual 2025 content. The entry's detailed guidance on authentication, authorization, data protection, threat modeling, secrets management, and dependency auditing could not be verified against the current source. These sections may still be valid but should be reviewed against the 2025 edition once the full content is retrieved.

[zigrivers]

Held from the automated sweep — content-quality gate. This refresh deletes the entire OWASP Top 10 body: all ten sections A01–A10 are removed (537 → 337 lines, 0 ### A0x sections remain), gutting the entry's core content. version-pin is also still OWASP Top 10 2021.

This is the fourth consecutive defective refresh of security-best-practices — and now the opposite failure mode from the prior three:

• 06-09 chore(knowledge): refresh security-best-practices against https://owasp.org/Top10/#top-10-list #566: duplicated the ## OWASP Top 10 heading
• 06-11 chore(knowledge): refresh security-best-practices against https://owasp.org/Top10/#top-10-list #580: redundant 2025 stub heading
• 06-12 chore(knowledge): refresh security-best-practices against https://owasp.org/Top10/#top-10-list #591: duplicated all of A01–A10 (20 sections)
• 06-13 chore(knowledge): refresh security-best-practices against https://owasp.org/Top10/#top-10-list #601: deletes all of A01–A10 (0 sections)

The automation is thrashing on this entry's 2021→2025 transition. Strongly recommend disabling auto-refresh for security-best-practices until the upstream audit/apply prompt is fixed — every night it produces a held, defective PR.

[zigrivers]

Superseded by #612 (newer freshness run for the same topic).