Run CogniCrypt static analysis

Update README.md #5

Sign in to view logs

Summary
Jobs
- cognicrypt
Run details
- Usage
- Workflow file

Triggered via push June 7, 2024 09:38

schlichtig

main

Status Failure

Total duration 1m 42s

Artifacts –

cognicrypt.yml

on: push

Annotations

10 errors and 2 warnings

IncompleteOperationError violating CrySL rule for javax.crypto.Cipher: CamBench_Cap/src/main/java/org/cambench/cap/flowsensitivity/truepositive/insecurerandom/CorrectedRandom.java#L40

Operation on object of type javax.crypto.Cipher not completed. Expected call to update, updateAAD, wrap, doFinal

RequiredPredicateError violating CrySL rule for javax.crypto.Cipher: CamBench_Cap/src/main/java/org/cambench/cap/flowsensitivity/truepositive/insecurerandom/CorrectedRandom.java#L40

Third parameter was not properly generated as preparedGCM

RequiredPredicateError violating CrySL rule for javax.crypto.spec.IvParameterSpec: CamBench_Cap/src/main/java/org/cambench/cap/flowsensitivity/truepositive/insecurerandom/InsecureRandom1.java#L39

First parameter was not properly generated as randomized

RequiredPredicateError violating CrySL rule for javax.crypto.Cipher: CamBench_Cap/src/main/java/org/cambench/cap/flowsensitivity/truepositive/insecurerandom/InsecureRandom1.java#L42

Third parameter was not properly generated as preparedGCM

IncompleteOperationError violating CrySL rule for javax.crypto.Cipher: CamBench_Cap/src/main/java/org/cambench/cap/flowsensitivity/truepositive/insecurerandom/InsecureRandom1.java#L42

Operation on object of type javax.crypto.Cipher not completed. Expected call to update, updateAAD, wrap, doFinal

ConstraintError violating CrySL rule for javax.crypto.Cipher: CamBench_Cap/src/main/java/org/cambench/cap/flowsensitivity/truepositive/ecbmode/EcbMode1.java#L29

First parameter (with value "AES/ECB/PKCS5Padding") should be any of AES/{GCM, CTR, CTS, CFB, OFB}

IncompleteOperationError violating CrySL rule for javax.crypto.Cipher: CamBench_Cap/src/main/java/org/cambench/cap/flowsensitivity/truepositive/ecbmode/EcbMode1.java#L31

Operation on object of type javax.crypto.Cipher not completed. Expected call to update, updateAAD, wrap, doFinal

IncompleteOperationError violating CrySL rule for javax.crypto.Cipher: CamBench_Cap/src/main/java/org/cambench/cap/flowsensitivity/truepositive/ecbmode/CorrectedEcbMode.java#L29

Operation on object of type javax.crypto.Cipher not completed. Expected call to update, updateAAD, wrap, doFinal

ConstraintError violating CrySL rule for java.security.MessageDigest: CamBench_Cap/src/main/java/org/cambench/cap/flowsensitivity/truepositive/brokenhash/BrokenHash1.java#L27

First parameter (with value "MD5") should be any of {SHA-256, SHA-384, SHA-512}

ConstraintError violating CrySL rule for javax.crypto.spec.PBEParameterSpec: CamBench_Cap/src/main/java/org/cambench/cap/flowsensitivity/truepositive/pbeparameters/PBEParameters2.java#L30

Second parameter (with value 1000) Variable iterationCount must be at least 10000

There are more violations than the GitHub annotations interface displays. Please check the log for additional violations.

Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/setup-java@v3, actions/cache/restore@v3, stCarolas/setup-maven@v4.5, actions/cache/save@v3. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.