cisagov / log4j-affected-db

A community sourced list of log4j-affected software
Creative Commons Zero v1.0 Universal
1.12k stars 281 forks source link

Complete data for 1Password #441

Closed DCKcode closed 2 years ago

DCKcode commented 2 years ago

Complete data for 1Password

๐Ÿ—ฃ Description

This completes some data for 1Password, which had gone missing since I contributed only the Markdown entry before.

I work in 1Password's security team, but am again linking to public information.

๐Ÿ’ญ Motivation and context

I originally contributed a simple Markdown entry, but since changing to the new YAML based data entry format, this made our entry at the top of the list look incomplete.

Filling out these data entries should address that problem. We are confident to have not depended on log4j (or Java) in any of our product releases, and as a result I'm marking every release as >= 1.0.0 as not affected. Let me know if there's a better way to indicate this.

๐Ÿงช Testing

This is a data entry change.

โœ… Pre-approval checklist

โœ… Pre-merge checklist

โœ… Post-merge checklist

Lcerkov commented 2 years ago

@DCKcode Thank you - this PR has been merged!