Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixing IaC issues (AST-43807) #526

Open
wants to merge 3 commits into
base: main
Choose a base branch
from

Conversation

checkmarx-kobi-hagmi
Copy link
Contributor

By submitting a PR to this repository, you agree to the terms within the Checkmarx Code of Conduct. Please see the contributing guidelines for how to create and submit a high-quality PR for this repo.

Description

Fixing IaC issues in the repository.

References

https://checkmarx.atlassian.net/browse/AST-43807

Checklist

  • I have added documentation for new/changed functionality in this PR (if applicable).
  • I have updated the CLI help for new/changed functionality in this PR (if applicable).
  • All active GitHub checks for tests, formatting, and security are passing
  • The correct base branch is being used

@pedrompflopes pedrompflopes requested a review from a team June 19, 2024 09:20
Copy link

github-actions bot commented Jun 19, 2024

Logo
Checkmarx One – Scan Summary & Details7713c13a-bd35-4913-a10c-bfe1d26e8de6

Policy Management Violations

Policy Name Rule(s) Break Build
[SAST-ML0] Not allowed NEW Sast vulnerabilities true

Fixed Issues

Severity Issue Source File / Package
HIGH CVE-2024-4068 Npm-braces-3.0.2
MEDIUM Unpinned Actions Full Length Commit SHA /pr-label.yml: 10
MEDIUM Unpinned Actions Full Length Commit SHA /ast-scan.yml: 12
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 23
MEDIUM Unpinned Actions Full Length Commit SHA /dependabot-auto-merge.yml: 14
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 101
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 68
MEDIUM Unpinned Actions Full Length Commit SHA /release.yml: 88

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants