AST-62770 Read the scan results summary from the s3 file

jenkinsci / checkmarx-ast-scanner-plugin

Jenkins Plugin for AST

MIT License

2 stars 9 forks source link

when users use an artifact manager like Amazon S3 there is a failure in the summary report reading in this feature, we read the file from the Jenkins website as a rest API and not directly from the location in the Jenkins folder

https://checkmarx.atlassian.net/browse/AST-62770

Testing done

Submitter checklist

[x] Make sure you are opening from a topic/feature/bugfix branch (right side) and not your main branch!
[x] Ensure that the pull request title represents the desired changelog entry
[x] Please describe what you did
[x] Link to relevant issues in GitHub or Jira
[x] Link to relevant pull requests, esp. upstream and downstream changes
[x] Ensure you have provided tests - that demonstrates feature works or fixes the issue

Checkmarx One – Scan Summary & Details – 4edf1ccf-98d4-4f16-ae86-c7f09b0901e1

Policy Management Violations

Policy Name	Rule(s)	Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities	true

New Issues

Issue	Source File / Package	Checkmarx Insight
Cleartext_Submission_of_Sensitive_Information	/src/main/java/com/checkmarx/jenkins/tools/ProxyHttpClient.java: 34	Attack Vector
Cleartext_Submission_of_Sensitive_Information	/src/main/java/com/checkmarx/jenkins/tools/ProxyHttpClient.java: 34	Attack Vector
Cleartext_Submission_of_Sensitive_Information	/src/main/java/com/checkmarx/jenkins/tools/ProxyHttpClient.java: 34	Attack Vector

Fixed Issues

Severity	Issue	Source File / Package
	Unpinned Actions Full Length Commit SHA	/ci.yml: 40
	Unpinned Actions Full Length Commit SHA	/manual-tag.yml: 23
	Unpinned Actions Full Length Commit SHA	/release.yml: 42
	Unpinned Actions Full Length Commit SHA	/release.yml: 53
	Unpinned Actions Full Length Commit SHA	/cd.yml: 24
	Unpinned Actions Full Length Commit SHA	/cd.yml: 17
	Unpinned Actions Full Length Commit SHA	/cd.yml: 55
	Unpinned Actions Full Length Commit SHA	/cd.yml: 34