Checkmarx / ast-azure-plugin

The CxAST Azure DevOps plugin enables you to trigger SAST, SCA, and KICS scans directly from an Azure DevOps pipeline.
https://marketplace.visualstudio.com/items?itemName=checkmarx.checkmarx-ast-azure-plugin
Apache License 2.0
4 stars 2 forks source link

update azure plugin with runtime cli wrapper #605

Closed AlvoBen closed 1 week ago

AlvoBen commented 1 week ago

By submitting a PR to this repository, you agree to the terms within the Checkmarx Code of Conduct. Please see the contributing guidelines for how to create and submit a high-quality PR for this repo.

Description

Describe the purpose of this PR along with any background information and the impacts of the proposed change.

References

Include supporting link to GitHub Issue/PR number

Testing

Describe how this change was tested. Be specific about anything not tested and reasons why. If this solution has unit and/or integration testing, tests should be added for new functionality and existing tests should complete without errors.

Please include any manual steps for testing end-to-end or functionality not covered by unit/integration tests.

Checklist

github-actions[bot] commented 1 week ago

Logo Checkmarx One – Scan Summary & Details1401402a-17e5-4b86-bae1-b52b9db018cd

Policy Management Violations

Policy Name Rule(s) Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities true

New Issues

Severity Issue Source File / Package Checkmarx Insight
LOW Cxda14f253-4e52 Npm-bluebird-3.7.2 Vulnerable Package

Fixed Issues

Severity Issue Source File / Package
HIGH CVE-2024-4068 Npm-braces-3.0.2
MEDIUM Unpinned Actions Full Length Commit SHA /pr-label.yml: 10
MEDIUM Unpinned Actions Full Length Commit SHA /ast-scan.yml: 12
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 23
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 14
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 101
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 68
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 88