JetBrains | Upgrade Java Wrapper version (AST-41951) - Githubissues

Checkmarx / ast-jetbrains-plugin

The CxAST JetBrains plugin enables you to import results from a CxAST scan directly into your IDE.

https://plugins.jetbrains.com/plugin/17672-checkmarx-ast

Apache License 2.0

2 stars 3 forks source link

JetBrains | Upgrade Java Wrapper version (AST-41951) #255

Closed AlvoBen closed 4 months ago

AlvoBen commented 4 months ago

By submitting a PR to this repository, you agree to the terms within the Checkmarx Code of Conduct. Please see the contributing guidelines for how to create and submit a high-quality PR for this repo.

Description

Describe the purpose of this PR along with any background information and the impacts of the proposed change.

References

Include supporting link to GitHub Issue/PR number

Testing

Describe how this change was tested. Be specific about anything not tested and reasons why. If this solution has unit and/or integration testing, tests should be added for new functionality and existing tests should complete without errors.

Please include any manual steps for testing end-to-end or functionality not covered by unit/integration tests.

Checklist

[ ] I have added documentation for new/changed functionality in this PR (if applicable).
[ ] All active GitHub checks for tests, formatting, and security are passing
[ ] The correct base branch is being used

github-actions[bot] commented 4 months ago

Checkmarx One – Scan Summary & Details – b41bd2ec-3741-4449-aa7c-89b31f87fdac

Policy Management Violations

Policy Name	Rule(s)	Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities	true

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Unpinned Actions Full Length Commit SHA	/ci.yml: 38	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/release.yml: 136	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/dependabot-auto-merge.yml: 23	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/test-ui-mac.yml: 34	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/dependabot-auto-merge.yml: 14	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/pr-label.yml: 15	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/checkmarx-one-scan.yml: 19	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/delete-dev-releases.yml: 28	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/test-ui-ubuntu.yml: 33	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/test-ui-windows.yml: 33	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Fixed Issues

Severity	Issue	Source File / Package
	CVE-2019-17571	Gradle-log4j:log4j-1.2.17
	CVE-2021-4104	Gradle-log4j:log4j-1.2.17
	CVE-2022-23302	Gradle-log4j:log4j-1.2.17
	CVE-2022-23305	Gradle-log4j:log4j-1.2.17
	CVE-2022-23307	Gradle-log4j:log4j-1.2.17
	CVE-2020-15250	Gradle-junit:junit-4.10
	CVE-2020-15250	Gradle-junit:junit-4.12
	Log_Forging	/src/main/java/com/checkmarx/intellij/tool/window/CxToolWindowPanel.java: 438
	Log_Forging	/src/main/java/com/checkmarx/intellij/tool/window/CxToolWindowPanel.java: 438
	Log_Forging	/src/main/java/com/checkmarx/intellij/tool/window/CxToolWindowPanel.java: 438
	Log_Forging	/src/main/java/com/checkmarx/intellij/tool/window/CxToolWindowPanel.java: 438
	Use_of_Broken_or_Risky_Cryptographic_Algorithm	/src/main/java/com/checkmarx/intellij/Utils.java: 42
	Use_of_Broken_or_Risky_Cryptographic_Algorithm	/src/main/java/com/checkmarx/intellij/Utils.java: 42
	Use_of_Broken_or_Risky_Cryptographic_Algorithm	/src/main/java/com/checkmarx/intellij/Utils.java: 42
	Use_of_Broken_or_Risky_Cryptographic_Algorithm	/src/main/java/com/checkmarx/intellij/Utils.java: 42