🐛 Fix custom plugins container location (QD-9921) #52
Annotations
1 error, 10 warnings, and 4 notices
|
Hardcoded passwords:
.github/workflows/mirror.yml#L30
Hardcoded password detected by "Password in URL" default rule
|
|
Unused parameter:
core/startup/prepare.go#L203
Unused parameter `prod product.Product`
|
|
Vulnerable declared dependency:
cmd/go.mod#L112
Dependency go:golang.org/x/oauth2:v0.23.0 is vulnerable
* [CVE-2025-22868](https://www.mend.io/vulnerability-database/CVE-2025-22868?utm_source=JetBrains) 7.5 Insufficient Information
Results powered by [Mend.io](https://www.mend.io/?utm_source=JetBrains)
|
|
Vulnerable declared dependency:
core/go.mod#L91
Dependency go:golang.org/x/oauth2:v0.18.0 is vulnerable
* [CVE-2025-22868](https://www.mend.io/vulnerability-database/CVE-2025-22868?utm_source=JetBrains) 7.5 Insufficient Information
Results powered by [Mend.io](https://www.mend.io/?utm_source=JetBrains)
|
|
Vulnerable declared dependency:
clang/go.mod#L105
Dependency go:golang.org/x/crypto:v0.24.0 is vulnerable , safe version v0.35.0
* [CVE-2025-22869](https://www.mend.io/vulnerability-database/CVE-2025-22869?utm_source=JetBrains) 7.5 Insufficient Information
* [CVE-2024-45337](https://www.mend.io/vulnerability-database/CVE-2024-45337?utm_source=JetBrains) 7.4 Insufficient Information
Results powered by [Mend.io](https://www.mend.io/?utm_source=JetBrains)
|
|
Vulnerable declared dependency:
cli/go.mod#L112
Dependency go:golang.org/x/oauth2:v0.23.0 is vulnerable
* [CVE-2025-22868](https://www.mend.io/vulnerability-database/CVE-2025-22868?utm_source=JetBrains) 7.5 Insufficient Information
Results powered by [Mend.io](https://www.mend.io/?utm_source=JetBrains)
|
|
Vulnerable declared dependency:
core/go.mod#L89
Dependency go:golang.org/x/crypto:v0.31.0 is vulnerable , safe version v0.35.0
* [CVE-2025-22869](https://www.mend.io/vulnerability-database/CVE-2025-22869?utm_source=JetBrains) 7.5 Insufficient Information
Results powered by [Mend.io](https://www.mend.io/?utm_source=JetBrains)
|
|
Vulnerable declared dependency:
platform/go.mod#L61
Dependency go:golang.org/x/oauth2:v0.18.0 is vulnerable
* [CVE-2025-22868](https://www.mend.io/vulnerability-database/CVE-2025-22868?utm_source=JetBrains) 7.5 Insufficient Information
Results powered by [Mend.io](https://www.mend.io/?utm_source=JetBrains)
|
|
Vulnerable declared dependency:
clang/go.mod#L108
Dependency go:golang.org/x/oauth2:v0.18.0 is vulnerable
* [CVE-2025-22868](https://www.mend.io/vulnerability-database/CVE-2025-22868?utm_source=JetBrains) 7.5 Insufficient Information
Results powered by [Mend.io](https://www.mend.io/?utm_source=JetBrains)
|
|
Vulnerable declared dependency:
cli/go.mod#L109
Dependency go:golang.org/x/crypto:v0.31.0 is vulnerable , safe version v0.35.0
* [CVE-2025-22869](https://www.mend.io/vulnerability-database/CVE-2025-22869?utm_source=JetBrains) 7.5 Insufficient Information
Results powered by [Mend.io](https://www.mend.io/?utm_source=JetBrains)
|
|
Vulnerable declared dependency:
platform/go.mod#L60
Dependency go:golang.org/x/crypto:v0.31.0 is vulnerable , safe version v0.35.0
* [CVE-2025-22869](https://www.mend.io/vulnerability-database/CVE-2025-22869?utm_source=JetBrains) 7.5 Insufficient Information
Results powered by [Mend.io](https://www.mend.io/?utm_source=JetBrains)
|
|
Vulnerable declared dependency:
core/go.mod#L8
Dependency go:github.com/docker/docker:v25.0.6+incompatible is vulnerable , safe version v27.1.1+incompatible
* [CVE-2024-36620](https://www.mend.io/vulnerability-database/CVE-2024-36620?utm_source=JetBrains) 6.5 Insufficient Information
Results powered by [Mend.io](https://www.mend.io/?utm_source=JetBrains)
|
|
Vulnerable declared dependency:
cmd/go.mod#L12
Dependency go:github.com/docker/docker:v25.0.6+incompatible is vulnerable , safe version v27.1.1+incompatible
* [CVE-2024-36620](https://www.mend.io/vulnerability-database/CVE-2024-36620?utm_source=JetBrains) 6.5 Insufficient Information
Results powered by [Mend.io](https://www.mend.io/?utm_source=JetBrains)
|
|
Vulnerable declared dependency:
clang/go.mod#L41
Dependency go:github.com/docker/docker:v25.0.6+incompatible is vulnerable , safe version v27.1.1+incompatible
* [CVE-2024-36620](https://www.mend.io/vulnerability-database/CVE-2024-36620?utm_source=JetBrains) 6.5 Insufficient Information
Results powered by [Mend.io](https://www.mend.io/?utm_source=JetBrains)
|
|
Vulnerable declared dependency:
cli/go.mod#L9
Dependency go:github.com/docker/docker:v25.0.6+incompatible is vulnerable , safe version v27.1.1+incompatible
* [CVE-2024-36620](https://www.mend.io/vulnerability-database/CVE-2024-36620?utm_source=JetBrains) 6.5 Insufficient Information
Results powered by [Mend.io](https://www.mend.io/?utm_source=JetBrains)
|
Artifacts
Produced during runtime
| Name | Size | Digest | |
|---|---|---|---|
|
JetBrains~qodana-cli~X9IDWB.dockerbuild
Expired
|
124 KB |
sha256:d14e8836a6809a78057dbc6999fe3fe521e9aecae0b1ab49ad4bc10422c6b58f
|
|