Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix gosec issues #813

Merged
merged 10 commits into from
Aug 20, 2023
Merged

Fix gosec issues #813

merged 10 commits into from
Aug 20, 2023

Conversation

EyalDelarea
Copy link
Contributor

  • All tests passed. If this feature is not already covered by the tests, I added new tests.
  • All static analysis checks passed.
  • This pull request is on the dev branch.
  • I used gofmt for formatting the code before submitting the pull request.

@EyalDelarea EyalDelarea added the ignore for release Automatically generated release notes label Aug 20, 2023
@@ -36,7 +36,7 @@ func (rs *RunService) GetRunStatus(branch, pipeName string, isMultiBranch bool)
httpDetails := rs.getHttpDetails()

// Query params
queryParams := make(map[string]string, 0)
queryParams := make(map[string]string)
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixing :
G602 (CWE-118): Potentially accessing slice out of bounds (Confidence: MEDIUM, Severity: MEDIUM)

@@ -34,6 +34,7 @@ func TestExtractRepo(t *testing.T) {

func TestGetLfsFilesFromGit(t *testing.T) {
log.SetLogger(log.NewLogger(log.DEBUG, nil))
// #nosec G101
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

G101 (CWE-798): Potential hardcoded credentials (Confidence: LOW, Severity: HIGH)

@EyalDelarea EyalDelarea merged commit f64d0fc into jfrog:dev Aug 20, 2023
3 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
ignore for release Automatically generated release notes
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants