Chore: Update CWA-Parent to 1.7.1 (#137)

* Update CWA-Parent to 1.7.1 * Update Checkstyle Config to > 3.2.0 * Update OWASP Supression File * Fix Checkstyle Co-authored-by: github-actions <github-actions@github.com>
corona-warn-app · Nov 17, 2022 · b499451 · b499451
1 parent 122e14b
commit b499451
Show file tree

Hide file tree

Showing 4 changed files with 24 additions and 17 deletions.
diff --git a/codestyle/checkstyle.xml b/codestyle/checkstyle.xml
@@ -282,7 +282,7 @@
                 value="CLASS_DEF, INTERFACE_DEF, ENUM_DEF, METHOD_DEF, CTOR_DEF, VARIABLE_DEF"/>
     </module>
     <module name="JavadocMethod">
-      <property name="scope" value="public"/>
+      <property name="accessModifiers" value="public"/>
       <property name="allowMissingParamTags" value="true"/>
       <property name="allowMissingReturnTag" value="true"/>
       <property name="allowedAnnotations" value="Override, Test"/>

diff --git a/owasp/suppressions.xml b/owasp/suppressions.xml
@@ -1,8 +1,12 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
+
   <suppress>
-    <notes>Bug only affects not used features of embedded tomcat.</notes>
-    <cve>CVE-2022-23181</cve>
+    <notes>Updating of Keycloak Lib is not possible at the moment. Security risk is not affecting CWA components.</notes>
+    <cve>CVE-2022-1466</cve>
+    <cve>CVE-2022-1970</cve>
+    <cve>CVE-2021-20323</cve>
+    <cve>CVE-2020-14359</cve>
   </suppress>
 
   <suppress>
@@ -16,17 +20,21 @@
   </suppress>
 
   <suppress>
-    <notes>CVE warns about usage of sample code in Tomcat Repository. This code is not used by us.</notes>
-    <cve>CVE-2022-34305</cve>
+    <notes>False Positive matches</notes>
+    <cve>CVE-2022-31514</cve>
+    <cve>CVE-2022-2393</cve>
   </suppress>
 
   <suppress>
-    <notes>False Positive</notes>
-    <cve>CVE-2022-31514</cve>
+    <notes>Keycloak Update is currently not possible</notes>
+    <cve>CVE-2022-1245</cve>
+    <cve>CVE-2022-2668</cve>
+    <cve>CVE-2021-3827</cve>
   </suppress>
 
   <suppress>
-    <notes>False Positive (https://github.com/jeremylong/DependencyCheck/issues/4693)</notes>
-    <cve>CVE-2022-2393</cve>
+    <notes>SnakeYML False Positive Matcher (CVE is up to 1.32, but also matches for 1.33)</notes>
+    <cve>CVE-2022-38752</cve>
   </suppress>
+
 </suppressions>
diff --git a/pom.xml b/pom.xml
@@ -9,7 +9,7 @@
   <parent>
     <groupId>app.coronawarn</groupId>
     <artifactId>cwa-parent</artifactId>
-    <version>1.6</version>
+    <version>1.7.1</version>
     <relativePath/>
   </parent>
 

diff --git a/src/main/java/app/coronawarn/testresult/TestResultController.java b/src/main/java/app/coronawarn/testresult/TestResultController.java
@@ -21,7 +21,6 @@
 
 package app.coronawarn.testresult;
 
-import app.coronawarn.testresult.model.PocNatResult;
 import app.coronawarn.testresult.model.PocNatResultList;
 import app.coronawarn.testresult.model.QuickTestResultList;
 import app.coronawarn.testresult.model.TestResult;
@@ -69,7 +68,7 @@ public class TestResultController {
         responseCode = "200",
         description = "Content exists",
         content = @Content(schema = @Schema(implementation = TestResultResponse.class))
-      )
+        )
     }
   )
   @PostMapping(
@@ -103,7 +102,7 @@ public ResponseEntity<TestResultResponse> result(
       @ApiResponse(
         responseCode = "204",
         description = "No content, testresult successfully inserted"
-      )
+        )
     }
   )
   @PostMapping(
@@ -137,7 +136,7 @@ public ResponseEntity<Object> results(
       @ApiResponse(
         responseCode = "200",
         description = "Ok, RAT result inserted successfully."
-      )
+        )
     }
   )
   @PostMapping(
@@ -169,7 +168,7 @@ public ResponseEntity<TestResultResponse> quickTestResult(
       @ApiResponse(
         responseCode = "204",
         description = "No content, RAT result(s) inserted successfully."
-      )
+        )
     }
   )
   @PostMapping(
@@ -203,7 +202,7 @@ public ResponseEntity<Object> quicktestResults(
       @ApiResponse(
         responseCode = "200",
         description = "Ok, PoC-NAT result inserted successfully."
-      )
+        )
     }
   )
   @PostMapping(
@@ -235,7 +234,7 @@ public ResponseEntity<TestResultResponse> pocnatResult(
       @ApiResponse(
         responseCode = "204",
         description = "No content, PoC-NAT result(s) inserted successfully."
-      )
+        )
     }
   )
   @PostMapping(