Skip to content

Proj i04 7/clean up cicd pipeline - #133

Merged
giang-h-vu merged 20 commits into
mainfrom
PROJ-I04-7/clean-up-cicd-pipeline
Jul 16, 2026
Merged

giang-h-vu merged 20 commits into
mainfrom
PROJ-I04-7/clean-up-cicd-pipeline

chore: improve codes security

3b37350
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / CodeQL failed Jul 16, 2026 in 3s

4 new alerts including 3 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 3 high

Other Alerts:

  • 1 note

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 21 in services/application/src/main/java/com/jobready/application/config/SecurityConfig.java

See this annotation in the file changed.

Code scanning / CodeQL

Disabled Spring CSRF protection High

CSRF vulnerability due to protection being disabled.

Check failure on line 28 in services/auth/src/main/java/com/jobready/auth/config/SecurityConfig.java

See this annotation in the file changed.

Code scanning / CodeQL

Disabled Spring CSRF protection High

CSRF vulnerability due to protection being disabled.

Check failure on line 21 in services/document/src/main/java/com/jobready/document/config/SecurityConfig.java

See this annotation in the file changed.

Code scanning / CodeQL

Disabled Spring CSRF protection High

CSRF vulnerability due to protection being disabled.

Check notice on line 90 in services/application/src/test/java/com/jobready/application/controller/ApplicationControllerTest.java

See this annotation in the file changed.

Code scanning / CodeQL

Deprecated method or constructor invocation Note test

Invoking
StatusResultMatchers.isUnprocessableEntity
should be avoided because it has been deprecated.