Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Story #11854: (clean code) jenkins file switch to parameters #1887

Merged
merged 1 commit into from
May 31, 2024

Conversation

laedanrex
Copy link
Contributor

No description provided.

@laedanrex laedanrex added this to the IT 136 milestone May 30, 2024
@laedanrex laedanrex self-assigned this May 30, 2024
@vitam-devops
Copy link
Collaborator

vitam-devops commented May 30, 2024

Logo
Checkmarx One – Scan Summary & Detailsd59061e6-32cb-4f0f-9354-e877c92bf9fb

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH CVE-2019-15599 Npm-tree-kill-1.2.1 Vulnerable Package
HIGH CVE-2020-28502 Npm-xmlhttprequest-ssl-1.5.5 Vulnerable Package
HIGH CVE-2020-36048 Npm-engine.io-3.2.1 Vulnerable Package
HIGH CVE-2020-36049 Npm-socket.io-parser-3.2.0 Vulnerable Package
HIGH CVE-2020-7660 Npm-serialize-javascript-1.9.1 Vulnerable Package
HIGH CVE-2020-7788 Npm-ini-1.3.5 Vulnerable Package
HIGH CVE-2021-31597 Npm-xmlhttprequest-ssl-1.5.5 Vulnerable Package
HIGH CVE-2022-2421 Npm-socket.io-parser-3.2.0 Vulnerable Package
MEDIUM CVE-2019-16769 Npm-serialize-javascript-1.9.1 Vulnerable Package
MEDIUM CVE-2020-15366 Npm-ajv-6.10.0 Vulnerable Package
MEDIUM CVE-2020-15366 Npm-ajv-5.5.2 Vulnerable Package
MEDIUM CVE-2020-28481 Npm-socket.io-2.1.1 Vulnerable Package
MEDIUM CVE-2020-7693 Npm-sockjs-0.3.19 Vulnerable Package
MEDIUM CVE-2021-23364 Npm-browserslist-4.5.5 Vulnerable Package
MEDIUM CVE-2022-21704 Npm-log4js-4.5.1 Vulnerable Package
MEDIUM CVE-2022-41940 Npm-engine.io-3.2.1 Vulnerable Package
LOW Logging of Sensitive Data /ansible.cfg: [2](https://github.com/ProgrammeVitam/vitam-ui/blob/jenkinsfile-pipeline//deployment/pki/scripts/lib/ansible.cfg# L2) To keep sensitive values out of logs, tasks that expose them need to be marked defining 'no_log' and setting to True
LOW Logging of Sensitive Data /ansible.cfg: [1](https://github.com/ProgrammeVitam/vitam-ui/blob/jenkinsfile-pipeline//deployment/ansible.cfg# L1) To keep sensitive values out of logs, tasks that expose them need to be marked defining 'no_log' and setting to True
LOW Logging of Sensitive Data /ansible.cfg: [2](https://github.com/ProgrammeVitam/vitam-ui/blob/jenkinsfile-pipeline//tools/docker/mongo/ansible.cfg# L2) To keep sensitive values out of logs, tasks that expose them need to be marked defining 'no_log' and setting to True

@laedanrex laedanrex force-pushed the jenkinsfile-pipeline branch from ae40aba to 0e27611 Compare May 30, 2024 13:25
@laedanrex laedanrex force-pushed the jenkinsfile-pipeline branch 2 times, most recently from 96b365f to 2c4c196 Compare May 30, 2024 14:39
@laedanrex laedanrex changed the title Parameters in jenkinsfile jenkins file switch to parameters May 30, 2024
@GiooDev GiooDev added the OPS REVIEW Mandatory if deployment/ directory is modified. label May 30, 2024
@laedanrex laedanrex force-pushed the jenkinsfile-pipeline branch from 2c4c196 to 6db4245 Compare May 30, 2024 15:15
Copy link
Contributor

@marob marob left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Est-ce que ça bloque le build dans le cas d'un build déclenché automatiquement sur les branches develop et master_* ?

@laedanrex laedanrex changed the title jenkins file switch to parameters Story #11854: (clean code) jenkins file switch to parameters May 31, 2024
@laedanrex laedanrex force-pushed the jenkinsfile-pipeline branch from 6db4245 to 23dbe72 Compare May 31, 2024 06:39
@laedanrex laedanrex merged commit 1e43693 into develop May 31, 2024
9 checks passed
@laedanrex laedanrex deleted the jenkinsfile-pipeline branch May 31, 2024 09:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
OPS REVIEW Mandatory if deployment/ directory is modified.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

5 participants