Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update Gradle, ZAP, and Java #480

Merged
merged 1 commit into from
Feb 28, 2025
Merged

Conversation

thc202
Copy link
Member

@thc202 thc202 commented Feb 28, 2025

Update Gradle Wrapper to 8.13 and plugins.
Update ZAP to 2.16.
Update dependencies.
Use Java 17 which is the one that ZAP is targeting.
Address deprecations in the build and in a test.

Update Gradle Wrapper to 8.13 and plugins.
Update ZAP to 2.16.
Update dependencies.
Use Java 17 which is the one that ZAP is targeting.
Address deprecations in the build and in a test.

Signed-off-by: thc202 <[email protected]>
@psiinon
Copy link
Member

psiinon commented Feb 28, 2025

Logo
Checkmarx One – Scan Summary & Details2b19e7d2-ad46-452b-a436-f2b87d6da1a0

New Issues (3)

Checkmarx found the following issues in this Pull Request

Severity Issue Source File / Package Checkmarx Insight
MEDIUM CVE-2020-13956 Maven-commons-httpclient:commons-httpclient-3.1
detailsDescription: Apache HttpClient can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong ta...
Attack Vector: NETWORK
Attack Complexity: LOW
Vulnerable Package
LOW Unpinned Actions Full Length Commit SHA /codeql.yml: 34
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
LOW Unpinned Actions Full Length Commit SHA /codeql.yml: 35
detailsPinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
Fixed Issues (2)

Great job! The following issues were fixed in this Pull Request

Severity Issue Source File / Package
LOW Unpinned Actions Full Length Commit SHA /codeql.yml: 27
LOW Unpinned Actions Full Length Commit SHA /codeql.yml: 30

Copy link
Member

@ricekot ricekot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks!

@ricekot ricekot merged commit 5be6a93 into zaproxy:main Feb 28, 2025
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

Successfully merging this pull request may close these issues.

3 participants