Update CxOne CLI to 2.0.72 - Githubissues

Checkmarx / ast-azure-plugin

The CxAST Azure DevOps plugin enables you to trigger SAST, SCA, and KICS scans directly from an Azure DevOps pipeline.

https://marketplace.visualstudio.com/items?itemName=checkmarx.checkmarx-ast-azure-plugin

Apache License 2.0

4 stars 2 forks source link

Update CxOne CLI to 2.0.72 #495

Closed OrShamirCM closed 6 months ago

OrShamirCM commented 6 months ago

Description

Upgrade the CLI to version 2.0.72 by updating the Wrapper

Testing

Unit & Integration Tests

Checklist

[ ] I have added documentation for new/changed functionality in this PR (if applicable).
[ ] I have updated the CLI help for new/changed functionality in this PR (if applicable).
[ ] All active GitHub checks for tests, formatting, and security are passing
[ ] The correct base branch is being used

github-actions[bot] commented 6 months ago

Checkmarx One – Scan Summary & Details – 552c82a7-1b97-4a44-b8af-fdcbbd8df9fc

Policy Management Violations

Policy Name	Rule(s)	Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities	true

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Unpinned Actions Full Length Commit SHA	/pr-label.yml: 10	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/dependabot-auto-merge.yml: 23	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/dependabot-auto-merge.yml: 14	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/release.yml: 101	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/release.yml: 68	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/release.yml: 88	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/ast-scan.yml: 12	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Fixed Issues

Severity	Issue	Source File / Package
	CVE-2022-37614	Npm-mockery-2.1.0