Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix NPM script for running tests on Windows (AST-37032) #783

Merged

Conversation

checkmarx-kobi-hagmi
Copy link
Contributor

Description

Fix to the command running tests on Windows machines

References

https://checkmarx.atlassian.net/browse/AST-37032

Testing

Tested on a local Windows machine

Checklist

  • I have added documentation for new/changed functionality in this PR (if applicable).
  • All active GitHub checks for tests, formatting, and security are passing
  • The correct base branch is being used

@pedrompflopes pedrompflopes requested review from a team and hmmachadocx and removed request for a team March 7, 2024 12:28
Copy link
Contributor

github-actions bot commented Mar 7, 2024

Logo
Checkmarx One – Scan Summary & Detailsa4a3254f-c027-4cf0-8a21-9c93e6953418

Policy Management Violations

Policy Name Rule(s) Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities true

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Client_DOM_XSS /media/view.js: 236 Attack Vector
HIGH Client_DOM_XSS /media/view.js: 236 Attack Vector
HIGH Client_DOM_XSS /media/view.js: 236 Attack Vector
HIGH Cxab55612e-3a56 Npm-braces-3.0.2 Vulnerable Package
HIGH Cxca84a1c2-1f12 Npm-micromatch-4.0.5 Vulnerable Package
MEDIUM Client_Privacy_Violation /media/view.js: 473 Attack Vector
MEDIUM Client_Privacy_Violation /media/view.js: 473 Attack Vector
MEDIUM Client_Privacy_Violation /media/view.js: 473 Attack Vector
MEDIUM Missing_HSTS_Header /src/resources/testProj/insecure.php: 24 Attack Vector
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 14 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 136 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 158 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /delete-dev-releases.yml: 28 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /checkmarx-one-scan.yml: 12 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /pr-label.yml: 15 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 23 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Fixed Issues

Severity Issue Source File / Package
HIGH CVE-2021-3807 Npm-ansi-regex-2.1.1
HIGH Client_DOM_XSS /media/gpt.js: 122
HIGH Client_DOM_XSS /media/gpt.js: 122
HIGH Client_DOM_XSS /media/gpt.js: 122
HIGH Client_DOM_XSS /media/view.js: 247
HIGH Client_DOM_XSS /media/view.js: 247
HIGH Client_DOM_XSS /media/view.js: 247
MEDIUM CVE-2018-14040 Npm-bootstrap-4.0.0
MEDIUM CVE-2018-14041 Npm-bootstrap-4.0.0
MEDIUM CVE-2018-14042 Npm-bootstrap-4.0.0
MEDIUM CVE-2019-8331 Npm-bootstrap-4.0.0
MEDIUM CVE-2023-0842 Npm-xml2js-0.4.23
MEDIUM Client_Privacy_Violation /media/view.js: 408

@checkmarx-kobi-hagmi checkmarx-kobi-hagmi merged commit ae68814 into main Mar 7, 2024
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants