Swift: Add a reference for swift/hardcoded-key.

geoffw0 · geoffw0 · commit e5a74cb29c3b · 2023-01-03T17:27:31.000Z
diff --git a/swift/ql/src/queries/Security/CWE-321/HardcodedEncryptionKey.qhelp b/swift/ql/src/queries/Security/CWE-321/HardcodedEncryptionKey.qhelp
@@ -14,4 +14,8 @@
     <p>The following example shows a few cases of instantiating a cipher with various encryption keys. In the 'BAD' cases, the key material is hardcoded, making the encrypted data vulnerable to recovery.  In the 'GOOD' cases, the key material is randomly generated and not hardcoded, which protects the encrypted data against recovery.</p>
     <sample src="HardcodedEncryptionKey.swift" />
   </example>
+
+  <references>
+    <li>OWASP: <a href="https://cheatsheetseries.owasp.org/cheatsheets/Key_Management_Cheat_Sheet.html">Key Management Cheat Sheet</a></li>
+  </references>
 </qhelp>
