Skip to content

Update README.md - #8

Open
robwlundy wants to merge 1 commit into
robwlundy-addlog4j-2.14from
robwlundy-patch-2
Open

Update README.md#8
robwlundy wants to merge 1 commit into
robwlundy-addlog4j-2.14from
robwlundy-patch-2

Conversation

@robwlundy

Copy link
Copy Markdown
Owner

No description provided.

@github-actions

Copy link
Copy Markdown

ShiftLeft LogoShiftLeft Logo

Checking analysis of application shiftleft-java-demo against 2 build rules.

Checking new findings between scans 7 and 14.

Results per rule:

  • allow-zero-findings: FAIL (170 matched vulnerabilities; configured threshold is 0)

    First 5 new findings:

    ID Severity Title
    266 critical pkg:maven/org.springframework.boot/[email protected]
    267 critical pkg:maven/org.springframework.boot/[email protected]
    272 critical pkg:maven/org.apache.tomcat.embed/[email protected]
    273 critical pkg:maven/org.apache.tomcat.embed/[email protected]
    274 critical pkg:maven/org.apache.tomcat.embed/[email protected]
    Severity Count
    Critical 51
    Moderate 84
    Info 35
    Finding Type Count
    Vuln 51
    Secret 0
    Insight 0
    Extscan 0
    Oss_vuln 119
    Package 0
    Category Count
    Sensitive Data Usage 33
    Sensitive Data Leak 12
    Deserialization 3
    Security Best Practices 2
    Directory Traversal 1
    OWASP Category Count
    A3-Sensitive-Data-Exposure 47
    A8-Deserialization 3
    A5-Broken-Access-Control 1
  • reachable-oss-vuln: FAIL ( 44 matched vulnerabilities; configured threshold is 0)

    First 10 new findings:

    ID Severity Title
    272 critical pkg:maven/org.apache.tomcat.embed/[email protected]
    273 critical pkg:maven/org.apache.tomcat.embed/[email protected]
    274 critical pkg:maven/org.apache.tomcat.embed/[email protected]
    275 critical pkg:maven/org.apache.tomcat.embed/[email protected]
    276 critical pkg:maven/org.apache.tomcat.embed/[email protected]
    277 critical pkg:maven/org.apache.tomcat.embed/[email protected]
    278 critical pkg:maven/org.apache.tomcat.embed/[email protected]
    279 critical pkg:maven/org.apache.tomcat.embed/[email protected]
    280 critical pkg:maven/org.apache.tomcat.embed/[email protected]
    281 critical pkg:maven/org.apache.tomcat.embed/[email protected]
    Severity Count
    Critical 38
    Moderate 6
    Info 0

2 rules failed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant