Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix Iac Vulnerabilities(AST-47970) #310

Merged
merged 5 commits into from
Aug 15, 2024
Merged

Conversation

miryamfoiferCX
Copy link
Collaborator

Testing done

Submitter checklist

  • Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
  • Ensure that the pull request title represents the desired changelog entry
  • Please describe what you did
  • Link to relevant issues in GitHub or Jira
  • Link to relevant pull requests, esp. upstream and downstream changes
  • Ensure you have provided tests - that demonstrates feature works or fixes the issue

Copy link
Contributor

github-actions bot commented Aug 12, 2024

Logo
Checkmarx One – Scan Summary & Details02baf002-0656-46d5-8254-1caa0a1d2b21

Policy Management Violations

Policy Name Rule(s) Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities true

New Issues

Severity Issue Source File / Package Checkmarx Insight
MEDIUM Cleartext_Submission_of_Sensitive_Information /src/main/java/com/checkmarx/jenkins/tools/ProxyHttpClient.java: 34 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /src/main/java/com/checkmarx/jenkins/tools/ProxyHttpClient.java: 34 Attack Vector
MEDIUM Cleartext_Submission_of_Sensitive_Information /src/main/java/com/checkmarx/jenkins/tools/ProxyHttpClient.java: 34 Attack Vector

Fixed Issues

Severity Issue Source File / Package
MEDIUM Unpinned Actions Full Length Commit SHA /ci.yml: 40
MEDIUM Unpinned Actions Full Length Commit SHA /manual-tag.yml: 23
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 42
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 53
MEDIUM Unpinned Actions Full Length Commit SHA /cd.yml: 24
MEDIUM Unpinned Actions Full Length Commit SHA /cd.yml: 17
MEDIUM Unpinned Actions Full Length Commit SHA /cd.yml: 55
MEDIUM Unpinned Actions Full Length Commit SHA /cd.yml: 34

@miryamfoiferCX miryamfoiferCX merged commit 8aa3370 into main Aug 15, 2024
15 checks passed
@miryamfoiferCX miryamfoiferCX deleted the miryamFoifer/IACFixes branch August 15, 2024 06:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants