Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Configure Mend for GitHub.com #75

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

mend-for-github-com[bot]
Copy link

Welcome to Mend for GitHub.com (formerly WhiteSource). This is an onboarding PR to help you understand and configure settings before Mend starts scanning your repository for security vulnerabilities.

🚦 Mend for GitHub.com will start scanning your repository only once you merge this Pull Request. To disable Mend for GitHub.com, simply close this Pull Request.


What to Expect

This PR contains a '.whitesource' configuration file which can be customized to your needs. If no changes were applied to this file, Mend for GitHub.com will use the default configuration.

Before merging this PR, Make sure the Issues tab is enabled. Once you merge this PR, Mend for GitHub.com will scan your repository and create a GitHub Issue for every vulnerability detected in your repository.

If you do not want a GitHub Issue to be created for each detected vulnerability, you can edit the '.whitesource' file and set the 'minSeverityLevel' parameter to 'NONE'.

If Mend Remediate Workflow Rules are set on your repository (from the Mend 'Integrate' tab), Mend will also generate a fix Pull Request for relevant vulnerabilities.


❓ Got questions? Check out Mend for GitHub.com docs.
If you need any further assistance then you can also request help here.

@msant262
Copy link

msant262 commented Jan 15, 2025

Logo
Checkmarx One – Scan Summary & Details55f16969-6568-4916-b3c5-a00d7cfabdbe

New Issues (7)

Checkmarx found the following issues in this Pull Request

Severity Issue Source File / Package Checkmarx Insight
MEDIUM Excessive_Data_Exposure /Controllers/UsersController.cs: 60
detailsThe data in user at /Controllers/UsersController.cs in line 60 may be sensitive, and it is exposed by an API at Ok in /Controllers/UsersController....
Attack Vector
MEDIUM Excessive_Data_Exposure /Controllers/RegistrationsController.cs: 22
detailsThe data in registrationRequest at /Controllers/RegistrationsController.cs in line 22 may be sensitive, and it is exposed by an API at Ok in /Contr...
Attack Vector
MEDIUM Excessive_Data_Exposure /Controllers/RegistrationsController.cs: 38
detailsThe data in user at /Controllers/RegistrationsController.cs in line 38 may be sensitive, and it is exposed by an API at Ok in /Controllers/Registra...
Attack Vector
MEDIUM Excessive_Data_Exposure /Controllers/AuthorizationsController.cs: 23
detailsThe data in authorizationRequest at /Controllers/AuthorizationsController.cs in line 23 may be sensitive, and it is exposed by an API at Ok in /Con...
Attack Vector
MEDIUM Insecure_Cookie /Startup.cs: 20
detailsThe /Startup.cs application configuration file, at line 20, does not define sensitive application cookies with the "secure" flag, which could cause...
Attack Vector
MEDIUM Missing_Object_Level_Authorization /Controllers/UsersController.cs: 33
detailsThe value user in /Controllers/UsersController.cs at line 33 is used to access an object as an identifier by Update in /Controllers/UsersController...
Attack Vector
MEDIUM Missing_Object_Level_Authorization /Controllers/UsersController.cs: 58
detailsThe value id in /Controllers/UsersController.cs at line 58 is used to access an object as an identifier by Lambda in /Controllers/UsersController.c...
Attack Vector
Fixed Issues (41)

Great job! The following issues were fixed in this Pull Request

Severity Issue Source File / Package
MEDIUM HttpOnlyCookies /Controllers/AuthorizationsController.cs: 44
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Models/User.cs: 74
LOW Use_Of_Broken_Or_Risky_Cryptographic_Algorithm /Controllers/PasswordResetsController.cs: 80

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant