mercedes-benz / sechub

SecHub provides a central API to test software with different security tools.
https://mercedes-benz.github.io/sechub/
MIT License
259 stars 58 forks source link

PDS: Bug on extraction of similar named sources #3243

Closed sven-dmlr closed 6 days ago

sven-dmlr commented 1 week ago

Situation:

Not all sources are extracted on PDS side when a source name is part of another source name. E.g. go and go2.

Example sechub.json:

{
  "apiVersion": "1.0",
  "project": "sechub-gosec-test",
  "codeScan": { "use": [ "go", "go2" ] },
  "data": {
    "sources": [
      {
        "name": "go",
        "fileSystem": { "folders": [ "go-test-bench" ] }
      },
      {
        "name": "go2",
        "fileSystem": { "folders": [ "Vulnerability-goapp" ] }
      }
    ]
  }
}

In this example, only the files from "go-test-bench" are being extracted.

Wanted:

Extract everything in the .zip regardless the naming of the source.