Closed dependabot[bot] closed 2 months ago
Checkmarx One – Scan Summary & Details – 5e45ae5a-d0f0-4d15-8045-1ecef02d81d7
Policy Name | Rule(s) | Break Build |
---|---|---|
[SAST-ML0] Not allowed NEW Sast vulnerabilities | true |
Severity | Issue | Source File / Package | Checkmarx Insight |
---|---|---|---|
Cleartext_Submission_of_Sensitive_Information | /src/main/java/com/checkmarx/jenkins/tools/ProxyHttpClient.java: 34 | Attack Vector | |
Cleartext_Submission_of_Sensitive_Information | /src/main/java/com/checkmarx/jenkins/tools/ProxyHttpClient.java: 34 | Attack Vector | |
Cleartext_Submission_of_Sensitive_Information | /src/main/java/com/checkmarx/jenkins/tools/ProxyHttpClient.java: 34 | Attack Vector |
Severity | Issue | Source File / Package |
---|---|---|
Unpinned Actions Full Length Commit SHA | /ci.yml: 40 | |
Unpinned Actions Full Length Commit SHA | /manual-tag.yml: 23 | |
Unpinned Actions Full Length Commit SHA | /release.yml: 42 | |
Unpinned Actions Full Length Commit SHA | /release.yml: 53 | |
Unpinned Actions Full Length Commit SHA | /cd.yml: 24 | |
Unpinned Actions Full Length Commit SHA | /cd.yml: 17 | |
Unpinned Actions Full Length Commit SHA | /cd.yml: 55 | |
Unpinned Actions Full Length Commit SHA | /cd.yml: 34 |
Bumps org.projectlombok:lombok from 1.18.32 to 1.18.34.
Changelog
Sourced from org.projectlombok:lombok's changelog.
Commits
fbbe7f0
[release] pre-release version bump3cd41e8
[trivial] some test cases were failing (due to the constructor-javadoc update...1384244
Merge pull request #3698 from stevebosman/fix-sneaky-throws-docd90ec73
[trivial] [style]3b68e39
Merge pull request #3697 from janrieke/superbuilder-fix-array-type-paramfdafa9a
Merge pull request #3690 from Rawi01/eclipse_2024_0678c1f47
Merge pull request #3689 from Rawi01/nested-javadocda815a6
Merge pull request #3674 from Rawi01/standardexception-fieldsc61a404
[trivial]6cf6caf
Merge pull request #3673 from Rawi01/eclipse_field_generatedYou can trigger a rebase of this PR by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show