Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bug #12777: Remove useless key_pass for nginx configuration. #1822

Merged
merged 1 commit into from
Apr 29, 2024

Conversation

GiooDev
Copy link
Contributor

@GiooDev GiooDev commented Apr 26, 2024

Description

Update nginx configuration and remove useless stuff.

Type de changement

  • Ansiblerie

Contributeur

  • VAS (Vitam Accessible en Service)

@GiooDev GiooDev added the OPS REVIEW Mandatory if deployment/ directory is modified. label Apr 26, 2024
@GiooDev GiooDev added this to the IT 134 milestone Apr 26, 2024
@GiooDev GiooDev self-assigned this Apr 26, 2024
@GiooDev GiooDev force-pushed the bug_12777_update_webapps_configuration branch from b0f92d9 to 9e9d2e5 Compare April 26, 2024 18:31
@vitam-devops
Copy link
Collaborator

vitam-devops commented Apr 26, 2024

Logo
Checkmarx One – Scan Summary & Details3a4bad01-1f4b-4947-ad23-6d3041538e6a

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH CVE-2019-15599 Npm-tree-kill-1.2.1 Vulnerable Package
HIGH CVE-2020-28502 Npm-xmlhttprequest-ssl-1.5.5 Vulnerable Package
HIGH CVE-2020-36048 Npm-engine.io-3.2.1 Vulnerable Package
HIGH CVE-2020-36049 Npm-socket.io-parser-3.2.0 Vulnerable Package
HIGH CVE-2020-7660 Npm-serialize-javascript-1.9.1 Vulnerable Package
HIGH CVE-2020-7788 Npm-ini-1.3.5 Vulnerable Package
HIGH CVE-2021-31597 Npm-xmlhttprequest-ssl-1.5.5 Vulnerable Package
HIGH CVE-2022-2421 Npm-socket.io-parser-3.2.0 Vulnerable Package
MEDIUM CVE-2019-16769 Npm-serialize-javascript-1.9.1 Vulnerable Package
MEDIUM CVE-2020-15366 Npm-ajv-6.10.0 Vulnerable Package
MEDIUM CVE-2020-15366 Npm-ajv-5.5.2 Vulnerable Package
MEDIUM CVE-2020-28481 Npm-socket.io-2.1.1 Vulnerable Package
MEDIUM CVE-2020-7693 Npm-sockjs-0.3.19 Vulnerable Package
MEDIUM CVE-2021-23364 Npm-browserslist-4.5.5 Vulnerable Package
MEDIUM CVE-2022-21704 Npm-log4js-4.5.1 Vulnerable Package
MEDIUM CVE-2022-41940 Npm-engine.io-3.2.1 Vulnerable Package
MEDIUM Cx366abb53-9fde Npm-es5-ext-0.10.62 Vulnerable Package
LOW Logging of Sensitive Data /ansible.cfg: 2 To keep sensitive values out of logs, tasks that expose them need to be marked defining 'no_log' and setting to True
LOW Logging of Sensitive Data /ansible.cfg: 1 To keep sensitive values out of logs, tasks that expose them need to be marked defining 'no_log' and setting to True
LOW Logging of Sensitive Data /ansible.cfg: 2 To keep sensitive values out of logs, tasks that expose them need to be marked defining 'no_log' and setting to True
LOW Unpinned Package Version /vitamui.yml: 60 Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
LOW Unpinned Package Version /vitamui.yml: 46 Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
LOW Unpinned Package Version /vitamui.yml: 1 Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service

Fixed Issues

Severity Issue Source File / Package
LOW Unpinned Package Version /check_java.yml: 42
LOW Unpinned Package Version /check_java.yml: 17

@GiooDev GiooDev force-pushed the bug_12777_update_webapps_configuration branch 2 times, most recently from 232a33a to 6294b5b Compare April 29, 2024 09:09
@GiooDev GiooDev requested a review from ebernard April 29, 2024 09:41
@GiooDev GiooDev force-pushed the bug_12777_update_webapps_configuration branch from 6294b5b to 129e1a0 Compare April 29, 2024 09:58
@GiooDev GiooDev merged commit f58ccf9 into develop Apr 29, 2024
1 check was pending
@GiooDev GiooDev deleted the bug_12777_update_webapps_configuration branch April 29, 2024 10:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
OPS REVIEW Mandatory if deployment/ directory is modified.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants