Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Story #11854 (clean-code): jenkinsfile pipeline parameters on first build #1891

Merged
merged 1 commit into from
Jun 5, 2024

Conversation

laedanrex
Copy link
Contributor

No description provided.

@laedanrex laedanrex force-pushed the jenkins-file branch 2 times, most recently from 379b19e to f11a228 Compare June 3, 2024 14:47
@vitam-devops
Copy link
Collaborator

vitam-devops commented Jun 3, 2024

Logo
Checkmarx One – Scan Summary & Detailsd59c67bf-dd08-4ca4-ac38-829d2a64fd72

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH CVE-2019-15599 Npm-tree-kill-1.2.1 Vulnerable Package
HIGH CVE-2020-28502 Npm-xmlhttprequest-ssl-1.5.5 Vulnerable Package
HIGH CVE-2020-36048 Npm-engine.io-3.2.1 Vulnerable Package
HIGH CVE-2020-36049 Npm-socket.io-parser-3.2.0 Vulnerable Package
HIGH CVE-2020-7660 Npm-serialize-javascript-1.9.1 Vulnerable Package
HIGH CVE-2020-7788 Npm-ini-1.3.5 Vulnerable Package
HIGH CVE-2021-31597 Npm-xmlhttprequest-ssl-1.5.5 Vulnerable Package
HIGH CVE-2022-2421 Npm-socket.io-parser-3.2.0 Vulnerable Package
HIGH CVE-2023-45133 Npm-babel-traverse-6.26.0 Vulnerable Package
MEDIUM CVE-2019-16769 Npm-serialize-javascript-1.9.1 Vulnerable Package
MEDIUM CVE-2020-15366 Npm-ajv-6.10.0 Vulnerable Package
MEDIUM CVE-2020-15366 Npm-ajv-5.5.2 Vulnerable Package
MEDIUM CVE-2020-28481 Npm-socket.io-2.1.1 Vulnerable Package
MEDIUM CVE-2020-7693 Npm-sockjs-0.3.19 Vulnerable Package
MEDIUM CVE-2021-23364 Npm-browserslist-4.5.5 Vulnerable Package
MEDIUM CVE-2022-21704 Npm-log4js-4.5.1 Vulnerable Package
MEDIUM CVE-2022-41940 Npm-engine.io-3.2.1 Vulnerable Package
LOW Logging of Sensitive Data /ansible.cfg: [2](https://github.com/ProgrammeVitam/vitam-ui/blob/jenkins-file//deployment/pki/scripts/lib/ansible.cfg# L2) To keep sensitive values out of logs, tasks that expose them need to be marked defining 'no_log' and setting to True
LOW Logging of Sensitive Data /ansible.cfg: [1](https://github.com/ProgrammeVitam/vitam-ui/blob/jenkins-file//deployment/ansible.cfg# L1) To keep sensitive values out of logs, tasks that expose them need to be marked defining 'no_log' and setting to True
LOW Logging of Sensitive Data /ansible.cfg: [2](https://github.com/ProgrammeVitam/vitam-ui/blob/jenkins-file//tools/docker/mongo/ansible.cfg# L2) To keep sensitive values out of logs, tasks that expose them need to be marked defining 'no_log' and setting to True

@laedanrex laedanrex force-pushed the jenkins-file branch 10 times, most recently from 6962a75 to 6f53d62 Compare June 5, 2024 08:31
@laedanrex laedanrex changed the title jenkinsfile problems Story #11854: (clean-code): jenkinsfile pipeline parameters on first build Jun 5, 2024
@laedanrex laedanrex marked this pull request as ready for review June 5, 2024 08:38
@laedanrex laedanrex added this to the IT 136 milestone Jun 5, 2024
@laedanrex laedanrex added the small pr embarquant peu de changements et à review rapide, ne nécessitant qu'un reviewer label Jun 5, 2024
@laedanrex laedanrex self-assigned this Jun 5, 2024
@GiooDev GiooDev added the OPS REVIEW Mandatory if deployment/ directory is modified. label Jun 5, 2024
@laedanrex laedanrex changed the title Story #11854: (clean-code): jenkinsfile pipeline parameters on first build Story #11854 (clean-code): jenkinsfile pipeline parameters on first build Jun 5, 2024
@laedanrex laedanrex merged commit abba6c9 into develop Jun 5, 2024
8 checks passed
@laedanrex laedanrex deleted the jenkins-file branch June 5, 2024 12:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
OPS REVIEW Mandatory if deployment/ directory is modified. small pr embarquant peu de changements et à review rapide, ne nécessitant qu'un reviewer
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants