Checkmarx / ast-github-action

Checkmarx application security testing (AST) GitHub action
https://github.com/marketplace/actions/checkmarx-ast-github-action
Apache License 2.0
16 stars 23 forks source link

[BUG] Wrong result status #130

Closed cmotsn closed 1 year ago

cmotsn commented 1 year ago

Describe the bug

Yesterday, the Checkmarx action failed on one of our project because of SCA issues which did NOT appear appear on the Checkmarx website (because we had just fixed them). I re-ran the workflow yesterday, same result, still KO. I re-ran the workflow this morning, this time it did not fail (=its result status matched the status on the Checkmarx website).

A colleague told me he had the same issue on another project last week.

Expected behavior

I expect the Cx action to not see issues that do not exist anymore 😄

Actual behavior

Issues were found that were actually fixed

Steps to reproduce

unsure

Additional comments

It might be related to the fixes included in the latest releases of checkmarx/ast-cli ? unsure

pedrompflopes commented 1 year ago

Hi @cmotsn

We were not able to reproduce this. We will close the issue, if you face it again please reopen.

Thanks.