Update README.md - Githubissues

jenkinsci / checkmarx-ast-scanner-plugin

Jenkins Plugin for AST

https://plugins.jenkins.io/checkmarx-ast-scanner/

MIT License

2 stars 9 forks source link

Update README.md #297

Closed tamarleviCm closed 3 months ago

tamarleviCm commented 3 months ago

Testing done

Submitter checklist

[ ] Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
[ ] Ensure that the pull request title represents the desired changelog entry
[ ] Please describe what you did
[ ] Link to relevant issues in GitHub or Jira
[ ] Link to relevant pull requests, esp. upstream and downstream changes
[ ] Ensure you have provided tests - that demonstrates feature works or fixes the issue

github-actions[bot] commented 3 months ago

Checkmarx One – Scan Summary & Details – 885344f6-82eb-4c7f-baf5-c4d22f6bddd4

Policy Management Violations

Policy Name	Rule(s)	Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities	true

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Cleartext_Submission_of_Sensitive_Information	/src/main/java/com/checkmarx/jenkins/tools/ProxyHttpClient.java: 34	Attack Vector
	Cleartext_Submission_of_Sensitive_Information	/src/main/java/com/checkmarx/jenkins/tools/ProxyHttpClient.java: 34	Attack Vector
	Cleartext_Submission_of_Sensitive_Information	/src/main/java/com/checkmarx/jenkins/tools/ProxyHttpClient.java: 34	Attack Vector
	Unpinned Actions Full Length Commit SHA	/cd.yml: 53	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/ast-scan.yml: 12	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/dependabot-auto-merge.yml: 23	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Fixed Issues

Severity	Issue	Source File / Package
	Unpinned Actions Full Length Commit SHA	/ci.yml: 40
	Unpinned Actions Full Length Commit SHA	/manual-tag.yml: 23
	Unpinned Actions Full Length Commit SHA	/release.yml: 42
	Unpinned Actions Full Length Commit SHA	/release.yml: 53
	Unpinned Actions Full Length Commit SHA	/cd.yml: 24
	Unpinned Actions Full Length Commit SHA	/cd.yml: 17
	Unpinned Actions Full Length Commit SHA	/cd.yml: 55
	Unpinned Actions Full Length Commit SHA	/cd.yml: 34