Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Revert "Bump @typescript-eslint/parser from 7.3.0 to 7.3.1" #798

Conversation

OrShamirCM
Copy link
Contributor

Reverts #797

@OrShamirCM OrShamirCM enabled auto-merge (squash) March 20, 2024 11:17
@pedrompflopes pedrompflopes requested review from a team, pedrompflopes and diogopcx and removed request for a team March 20, 2024 11:17
Copy link
Contributor

github-actions bot commented Mar 20, 2024

Logo
Checkmarx One – Scan Summary & Detailsa3673506-7618-4bcc-804a-67db23dbb73f

Policy Management Violations

Policy Name Rule(s) Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities true

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Client_DOM_XSS /media/view.js: 236 Attack Vector
HIGH Client_DOM_XSS /media/view.js: 236 Attack Vector
HIGH Client_DOM_XSS /media/view.js: 236 Attack Vector
HIGH Cxab55612e-3a56 Npm-braces-3.0.2 Vulnerable Package
HIGH Cxca84a1c2-1f12 Npm-micromatch-4.0.5 Vulnerable Package
MEDIUM Client_Privacy_Violation /media/view.js: 474 Attack Vector
MEDIUM Client_Privacy_Violation /media/view.js: 474 Attack Vector
MEDIUM Missing_HSTS_Header /src/resources/testProj/insecure.php: 24 Attack Vector
MEDIUM Unpinned Actions Full Length Commit SHA /pr-label.yml: 15 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 23 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 14 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /delete-dev-releases.yml: 28 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /checkmarx-one-scan.yml: 12 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 136 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 158 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Fixed Issues

Severity Issue Source File / Package
HIGH CVE-2021-3807 Npm-ansi-regex-2.1.1
HIGH Client_DOM_XSS /media/gpt.js: 122
HIGH Client_DOM_XSS /media/gpt.js: 122
HIGH Client_DOM_XSS /media/gpt.js: 122
HIGH Client_DOM_XSS /media/view.js: 247
HIGH Client_DOM_XSS /media/view.js: 247
HIGH Client_DOM_XSS /media/view.js: 247
MEDIUM CVE-2018-14040 Npm-bootstrap-4.0.0
MEDIUM CVE-2018-14041 Npm-bootstrap-4.0.0
MEDIUM CVE-2018-14042 Npm-bootstrap-4.0.0
MEDIUM CVE-2019-8331 Npm-bootstrap-4.0.0
MEDIUM CVE-2023-0842 Npm-xml2js-0.4.23
LOW Cxda14f253-4e52 Npm-bluebird-3.4.7

@OrShamirCM OrShamirCM disabled auto-merge March 20, 2024 14:56
@OrShamirCM OrShamirCM merged commit 99a7cd9 into main Mar 20, 2024
4 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant