Check veracode 1.0.17 without exclusions #6704
SaraAsperyci.yml
on: pull_request
Source Clear Scan (SCA)
3m 22s
Pipeline SAST Scan
5m 36s
PMD Scan
4m 1s
Repository - MariaDB 10.6 tests
4m 47s
Repository - MySQL 8 tests
5m 40s
Repository - PostgreSQL 13.12 tests
0s
Repository - PostgreSQL 14.9 tests
0s
Repository - PostgreSQL 15.4 tests
4m 40s
Repository - Messaging tests
1m 55s
Share Services - ShareServicesTestSuite
2m 49s
AGS Community Rest API Tests
25m 3s
Test Tomcat deployment of api explorer
4m 7s
Matrix: ags_mysql_tests
Matrix: ags_postgresql_tests
Matrix: all_unit_tests_suite
Matrix: remote_api_app_context_test_suites
Matrix: repository_app_context_test_suites
Matrix: repository_mariadb_tests
Matrix: tas_tests
Annotations
1 error and 58 warnings
|
Pipeline SAST Scan
[09 Jan 2025 17:47:31,0939] PIPELINE-SCAN INFO: Pipeline Scan Tool Version 24.12.1-0.
[09 Jan 2025 17:47:31,0962] PIPELINE-SCAN INFO: Loading policy file Alfresco_Default.json
[09 Jan 2025 17:47:31,0963] PIPELINE-SCAN INFO: Successfully retrieved the policy
[09 Jan 2025 17:47:31,0964] PIPELINE-SCAN INFO: Policy name: Alfresco Default
[09 Jan 2025 17:47:31,0964] PIPELINE-SCAN INFO: CWE filter:
[09 Jan 2025 17:47:31,0964] PIPELINE-SCAN INFO: Severity filter: 3, 4, 5,
[09 Jan 2025 17:47:31,0965] PIPELINE-SCAN INFO: Beginning scanning of 'temp-dir-for-sast/reduced.war'.
[09 Jan 2025 17:47:31,0968] PIPELINE-SCAN INFO: Sending 137047573 bytes to the server for analysis.
[09 Jan 2025 17:48:11,0056] PIPELINE-SCAN INFO: Upload complete.
[09 Jan 2025 17:48:11,0056] PIPELINE-SCAN INFO: Scan ID: 6b6a6125-fe6b-428e-8a54-1a3b903a23e2
[09 Jan 2025 17:48:11,0286] PIPELINE-SCAN INFO: Analysis Started.
===========================
Found 2 Scannable modules.
===========================
reduced.war
JS files within reduced.war
[09 Jan 2025 17:50:44,0238] PIPELINE-SCAN INFO: Analysis Complete.
[09 Jan 2025 17:50:44,0239] PIPELINE-SCAN INFO: Analysis Results: Received 11216 bytes in 192274ms.
[09 Jan 2025 17:50:44,0242] PIPELINE-SCAN INFO: Writing Raw JSON Results to file '/home/runner/work/alfresco-community-repo/alfresco-community-repo/results.json'.
[09 Jan 2025 17:50:44,0244] PIPELINE-SCAN INFO: Applying custom severity 4 to cwe 80
[09 Jan 2025 17:50:44,0246] PIPELINE-SCAN INFO: Writing Filtered JSON Results to file '/home/runner/work/alfresco-community-repo/alfresco-community-repo/filtered_results.json'.
Scan Summary:
PIPELINE_SCAN_VERSION: 24.12.1-0
DEV-STAGE: DEVELOPMENT
PROJECT-NAME: alfresco-community-repo
SCAN_ID: 6b6a6125-fe6b-428e-8a54-1a3b903a23e2
SCAN_STATUS: SUCCESS
SCAN_MESSAGE: Scan successful. Results size: 10756 bytes
====================
Analysis Successful.
====================
==========================
Found 2 Scannable modules.
==========================
reduced.war
JS files within reduced.war
===================
Analyzed 2 modules.
===================
reduced.war
JS files within reduced.war
==================
Analyzed 5 issues.
==================
--------------------------------
Found 1 issues of High severity.
--------------------------------
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS): org/springframework/security/spring-security-webauthn.js:199
Details: <span>This call to href() contains a cross-site scripting (XSS) flaw. The application populates the HTTP response with untrusted input, allowing an attacker to embed malicious content, such as Javascript code, which will be executed in the context of the victim's browser. XSS vulnerabilities are commonly exploited to steal or manipulate cookies, modify presentation of content, and compromise confidential information, with new attack vectors being discovered on a regular basis. </span> <span>Use contextual escaping on all untrusted data before using it to construct any portion of an HTTP response. The escaping method should be chosen based on the specific use case of the untrusted data, otherwise it may not protect fully against the attack. For example, if the data is being written to the body of an HTML page, use HTML entity escaping; if the data is being written to an attribute, use attribute escaping; etc. Both the OWASP Java Encoder library and the Microsoft AntiXSS library provide contextual escaping methods. For more details on contextual escaping, see https://github.com/OWASP/CheatSheetSeries/blob/master/cheatsheets/Cross_Site_Scripting_Prevention_Cheat_Sheet.md. In addition, as a best practice, always validate untrusted input to ensure that it conforms to the expected format, using centralized data validation routines when possible.</span> <span>References: <a href="https://cwe.mitre.org/data/definitions/79.html">CWE</a> <a href="https://owasp.org/www-community/attacks/xss/">OWASP</a> <a href="https://docs.veracode.com/r/review_cleansers">Supported Cleansers</a></span>
https://downloads.verac
|
|
Prepare
Your workflow is using a version of actions/cache that is scheduled for deprecation, actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a. Please update your workflow to use either v3 or v4 of actions/cache to avoid interruptions. Learn more: https://github.blog/changelog/2024-12-05-notice-of-upcoming-releases-and-breaking-changes-for-github-actions/#actions-cache-v1-v2-and-actions-toolkit-cache-package-closing-down
|
|
Prepare
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
AGS Community Rest API Tests
Your workflow is using a version of actions/cache that is scheduled for deprecation, actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a. Please update your workflow to use either v3 or v4 of actions/cache to avoid interruptions. Learn more: https://github.blog/changelog/2024-12-05-notice-of-upcoming-releases-and-breaking-changes-for-github-actions/#actions-cache-v1-v2-and-actions-toolkit-cache-package-closing-down
|
|
AGS Integration Tests 01 (PostgreSQL)
Your workflow is using a version of actions/cache that is scheduled for deprecation, actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a. Please update your workflow to use either v3 or v4 of actions/cache to avoid interruptions. Learn more: https://github.blog/changelog/2024-12-05-notice-of-upcoming-releases-and-breaking-changes-for-github-actions/#actions-cache-v1-v2-and-actions-toolkit-cache-package-closing-down
|
|
AGS Integration Tests 02 (MySQL)
Your workflow is using a version of actions/cache that is scheduled for deprecation, actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a. Please update your workflow to use either v3 or v4 of actions/cache to avoid interruptions. Learn more: https://github.blog/changelog/2024-12-05-notice-of-upcoming-releases-and-breaking-changes-for-github-actions/#actions-cache-v1-v2-and-actions-toolkit-cache-package-closing-down
|
|
Test Tomcat deployment of api explorer
Your workflow is using a version of actions/cache that is scheduled for deprecation, actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a. Please update your workflow to use either v3 or v4 of actions/cache to avoid interruptions. Learn more: https://github.blog/changelog/2024-12-05-notice-of-upcoming-releases-and-breaking-changes-for-github-actions/#actions-cache-v1-v2-and-actions-toolkit-cache-package-closing-down
|
|
AGS Integration Tests 03 (MySQL)
Your workflow is using a version of actions/cache that is scheduled for deprecation, actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a. Please update your workflow to use either v3 or v4 of actions/cache to avoid interruptions. Learn more: https://github.blog/changelog/2024-12-05-notice-of-upcoming-releases-and-breaking-changes-for-github-actions/#actions-cache-v1-v2-and-actions-toolkit-cache-package-closing-down
|
|
AGS Integration Tests 01 (MySQL)
Your workflow is using a version of actions/cache that is scheduled for deprecation, actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a. Please update your workflow to use either v3 or v4 of actions/cache to avoid interruptions. Learn more: https://github.blog/changelog/2024-12-05-notice-of-upcoming-releases-and-breaking-changes-for-github-actions/#actions-cache-v1-v2-and-actions-toolkit-cache-package-closing-down
|
|
AGS Integration Tests 03 (PostgreSQL)
Your workflow is using a version of actions/cache that is scheduled for deprecation, actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a. Please update your workflow to use either v3 or v4 of actions/cache to avoid interruptions. Learn more: https://github.blog/changelog/2024-12-05-notice-of-upcoming-releases-and-breaking-changes-for-github-actions/#actions-cache-v1-v2-and-actions-toolkit-cache-package-closing-down
|
|
AGS Integration Tests 02 (PostgreSQL)
Your workflow is using a version of actions/cache that is scheduled for deprecation, actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a. Please update your workflow to use either v3 or v4 of actions/cache to avoid interruptions. Learn more: https://github.blog/changelog/2024-12-05-notice-of-upcoming-releases-and-breaking-changes-for-github-actions/#actions-cache-v1-v2-and-actions-toolkit-cache-package-closing-down
|
|
Core - AllUnitTestsSuite - Build and test
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - AppContext02TestSuite
Your workflow is using a version of actions/cache that is scheduled for deprecation, actions/cache@6849a6489940f00c2f30c0fb92c6274307ccb58a. Please update your workflow to use either v3 or v4 of actions/cache to avoid interruptions. Learn more: https://github.blog/changelog/2024-12-05-notice-of-upcoming-releases-and-breaking-changes-for-github-actions/#actions-cache-v1-v2-and-actions-toolkit-cache-package-closing-down
|
|
Data-Model - AllUnitTestsSuite - Build and test
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Mmt - AllUnitTestsSuite - Build and test
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - Messaging tests
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - AllUnitTestsSuite - Build and test
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - SearchTestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Share Services - ShareServicesTestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Source Clear Scan (SCA)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
PMD Scan
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Test Tomcat deployment of api explorer
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - MTLSTestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - PostgreSQL 15.4 tests
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - MariaDB 10.6 tests
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - MiscContextTestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Remote-api - AppContextExtraTestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Pipeline SAST Scan
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - MySQL 8 tests
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - AppContext03TestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - AppContext04TestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - AppContext05TestSuite Auth0
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - AppContext01TestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - AppContext05TestSuite Keycloak
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - AppContext02TestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Remote-api - AppContext01TestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
AGS Integration Tests 04 (PostgreSQL)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Remote-api - AppContext04TestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
AGS Integration Tests 01 (PostgreSQL)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Remote-api - AppContext03TestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
WebDAV TAS tests
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - AppContext06TestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
AGS Integration Tests 03 (PostgreSQL)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
AGS Integration Tests 04 (MySQL)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Repository - AppContextExtraTestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
AGS Integration Tests 02 (PostgreSQL)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
AGS Integration Tests 03 (MySQL)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
REST API TAS tests part1
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Remote-api - AppContext02TestSuite
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
AGS Integration Tests 01 (MySQL)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
AGS Integration Tests 02 (MySQL)
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Email TAS tests
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
Integration TAS tests
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
REST API TAS tests part2
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
CMIS TAS tests - WEBSERVICES binding
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
REST API TAS tests part3
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
AGS Community Rest API Tests
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
CMIS TAS tests - ATOM binding
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
CMIS TAS tests - BROWSER binding
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
Artifacts
Produced during runtime
| Name | Size | |
|---|---|---|
|
PMD Summary (Human Readable)
|
329 Bytes |
|
|
Veracode Pipeline-Scan Results (Human Readable)
|
1.83 KB |
|
|
Veracode Pipeline-Scan Results -
|
5.15 KB |
|