Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add a scan date row in Checkmarx One Results section (AST-35838) #804

Merged
merged 16 commits into from
Mar 27, 2024

Conversation

checkmarx-kobi-hagmi
Copy link
Contributor

@checkmarx-kobi-hagmi checkmarx-kobi-hagmi commented Mar 24, 2024

Description

Add Scan Date as a new row in the Checkmarx One Results section.

References

https://checkmarx.atlassian.net/browse/AST-35838

Testing

Tested manually. Covered by current tests

Checklist

  • I have added documentation for new/changed functionality in this PR (if applicable).
  • All active GitHub checks for tests, formatting, and security are passing
  • The correct base branch is being used

@pedrompflopes pedrompflopes requested review from a team, margaritalm and tiagobcx and removed request for a team March 24, 2024 08:18
Copy link
Contributor

github-actions bot commented Mar 24, 2024

Logo
Checkmarx One – Scan Summary & Details9a3f3a00-e991-4a0d-a5d4-3f82471f0ae7

Policy Management Violations

Policy Name Rule(s) Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities true

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Client_DOM_XSS /media/view.js: 236 Attack Vector
HIGH Client_DOM_XSS /media/view.js: 236 Attack Vector
HIGH Client_DOM_XSS /media/view.js: 236 Attack Vector
HIGH Cxab55612e-3a56 Npm-braces-3.0.2 Vulnerable Package
HIGH Cxca84a1c2-1f12 Npm-micromatch-4.0.5 Vulnerable Package
MEDIUM Client_Privacy_Violation /media/view.js: 474 Attack Vector
MEDIUM Client_Privacy_Violation /media/view.js: 474 Attack Vector
MEDIUM Missing_HSTS_Header /src/resources/testProj/insecure.php: 24 Attack Vector
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 158 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /pr-label.yml: 15 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /delete-dev-releases.yml: 28 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 23 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 14 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /checkmarx-one-scan.yml: 12 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 136 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Fixed Issues

Severity Issue Source File / Package
HIGH CVE-2021-3807 Npm-ansi-regex-2.1.1
HIGH Client_DOM_XSS /media/gpt.js: 122
HIGH Client_DOM_XSS /media/gpt.js: 122
HIGH Client_DOM_XSS /media/gpt.js: 122
HIGH Client_DOM_XSS /media/view.js: 247
HIGH Client_DOM_XSS /media/view.js: 247
HIGH Client_DOM_XSS /media/view.js: 247
MEDIUM CVE-2018-14040 Npm-bootstrap-4.0.0
MEDIUM CVE-2018-14041 Npm-bootstrap-4.0.0
MEDIUM CVE-2018-14042 Npm-bootstrap-4.0.0
MEDIUM CVE-2019-8331 Npm-bootstrap-4.0.0
MEDIUM CVE-2023-0842 Npm-xml2js-0.4.23
LOW Cxda14f253-4e52 Npm-bluebird-3.4.7

@checkmarx-kobi-hagmi checkmarx-kobi-hagmi merged commit a24e4f7 into main Mar 27, 2024
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants