Closed david-livefront closed 3 days ago
Checkmarx One – Scan Summary & Details – a4fbdf08-861b-430d-b355-38b94605a8e2
Severity | Issue | Source File / Package | Checkmarx Insight |
---|---|---|---|
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/data/tools/generator/repository/utils/GeneratorRepositoryExtensions.kt: 11 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/data/autofill/manager/AutofillTotpManagerImpl.kt: 29 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 341 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 341 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/platform/feature/settings/accountsecurity/deleteaccount/DeleteAccountViewModel.kt: 94 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 240 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 251 | Attack Vector | |
Privacy_Violation | /app/src/main/java/com/x8bit/bitwarden/ui/auth/feature/completeregistration/CompleteRegistrationViewModel.kt: 262 | Attack Vector | |
Unpinned Actions Full Length Commit SHA | /crowdin-pull.yml: 26 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Use_of_Hardcoded_Password | /app/src/main/java/com/x8bit/bitwarden/data/autofill/util/HtmlInfoExtensions.kt: 20 | Attack Vector |
Thanks @SaintPatrck
Attention: Patch coverage is 92.85714%
with 2 lines
in your changes missing coverage. Please review.
Please upload report for BASE (
release/2024.11-rc1@366c86d
). Learn more about missing BASE report.
:umbrella: View full report in Codecov by Sentry.
:loudspeaker: Have feedback on the report? Share it here.
🚨 Try these New Features:
🎟️ Tracking
PM-15177
📔 Objective
This PR update the logic for managing a destructive fallback. The big difference is that we clear the
lasSyncTime
for all users to ensure that vault gets re-synced.⏰ Reminders before review
🦮 Reviewer guidelines
:+1:
) or similar for great changes:memo:
) or ℹ️ (:information_source:
) for notes or general info:question:
) for questions:thinking:
) or 💭 (:thought_balloon:
) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion:art:
) for suggestions / improvements:x:
) or ⚠️ (:warning:
) for more significant problems or concerns needing attention:seedling:
) or ♻️ (:recycle:
) for future improvements or indications of technical debt:pick:
) for minor or nitpick changes