checkmarx-ltd / cx-flow

Checkmarx Scan and Result Orchestration
Apache License 2.0
88 stars 87 forks source link

Added new parameter zip-include for cx-flow #1331

Closed itsKedar closed 6 months ago

itsKedar commented 7 months ago

Description

Added new parameter zip-include for cx-flow.

cx-flow:
  zip-include: \.git/.*, .*\.png

References

(https://github.com/checkmarx-ltd/cx-flow/issues/1300)

Testing

Tested on CLI and GitHub Action.

AvivCx commented 7 months ago

Logo Checkmarx One – Scan Summary & Details9bb135b8-bfc8-4bef-9397-f0d5b6191ccc

New Issues

Severity Issue Source File / Package Checkmarx Insight
MEDIUM SSRF /src/main/java/com/checkmarx/flow/controller/FlowController.java: 75 Attack Vector
MEDIUM SSRF /src/main/java/com/checkmarx/flow/controller/FlowController.java: 75 Attack Vector
MEDIUM SSRF /src/main/java/com/checkmarx/flow/controller/FlowController.java: 72 Attack Vector
MEDIUM SSRF /src/main/java/com/checkmarx/flow/controller/FlowController.java: 72 Attack Vector