Skip to content

Commit 0c43d2b

Browse files
chore: regenerate fixture results for Trivy DB update (#297)
1 parent 5277030 commit 0c43d2b

9 files changed

Lines changed: 483 additions & 191 deletions

File tree

docs/multiple-tests/all-patterns/results.xml

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -13,7 +13,7 @@
1313
message="Possible hardcoded secret: AWS Access Key ID"
1414
severity="error"
1515
/>
16-
</file>
16+
</file>
1717
<file name="gradle/gradle.lockfile">
1818
<error
1919
source="vulnerability_medium"
@@ -24,19 +24,19 @@
2424
<error
2525
source="vulnerability_medium"
2626
line="1"
27-
message="Insecure dependency maven/org.apache.logging.log4j/log4j-core@2.17.0 (CVE-2025-68161: Apache Log4j: Apache Log4j Core: Information disclosure via missing TLS hostname verification) (update to 2.25.3)"
27+
message="Insecure dependency maven/org.apache.logging.log4j/log4j-core@2.17.0 (CVE-2025-68161: The Socket Appender in Apache Log4j Core versions 2.0-beta9 through 2. ...) (update to 2.25.3)"
2828
severity="warning"
2929
/>
3030
<error
3131
source="vulnerability_medium"
3232
line="1"
33-
message="Insecure dependency maven/org.apache.logging.log4j/log4j-core@2.17.0 (CVE-2026-34480: org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging) (update to 2.25.4)"
33+
message="Insecure dependency maven/org.apache.logging.log4j/log4j-core@2.17.0 (CVE-2026-34477: org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification) (update to 2.25.4)"
3434
severity="warning"
3535
/>
3636
<error
3737
source="vulnerability_medium"
3838
line="1"
39-
message="Insecure dependency maven/org.apache.logging.log4j/log4j-core@2.17.0 (CVE-2026-34477: org.apache.logging.log4j/log4j-core: Apache Log4j Core: Man-in-the-middle attack due to incomplete hostname verification) (update to 2.25.4)"
39+
message="Insecure dependency maven/org.apache.logging.log4j/log4j-core@2.17.0 (CVE-2026-34480: org.apache.logging.log4j/log4j-core: Apache Log4j Core: Invalid XML output causes denial of service in logging) (update to 2.25.4)"
4040
severity="warning"
4141
/>
4242
<error
@@ -54,7 +54,7 @@
5454
<error
5555
source="vulnerability_medium"
5656
line="4"
57-
message="Insecure dependency maven/org.apache.cxf/cxf-rt-transports-http@4.0.0 (CVE-2024-41172: apache: cxf: org.apache.cxf:cxf-rt-transports-http: unrestricted memory consumption in CXF HTTP clients) (update to 4.0.5)"
57+
message="Insecure dependency maven/org.apache.cxf/cxf-rt-transports-http@4.0.0 (CVE-2024-41172: Apache CXF allows unrestricted memory consumption in CXF HTTP clients) (update to 4.0.5)"
5858
severity="warning"
5959
/>
6060
</file>
Lines changed: 21 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -1,14 +1,25 @@
11
<?xml version="1.0" encoding="utf-8"?>
22
<checkstyle version="1.5">
3-
<file name="dart/hello-world.dart">
4-
<error source="secret" line="2" message="Possible hardcoded secret: AWS Access Key ID"
5-
severity="error" />
6-
</file>
7-
83
<file name="aws-config.txt">
9-
<error source="secret" line="1" message="Possible hardcoded secret: AWS Secret Access Key"
10-
severity="error" />
11-
<error source="secret" line="2" message="Possible hardcoded secret: AWS Access Key ID"
12-
severity="error" />
4+
<error
5+
source="secret"
6+
line="1"
7+
message="Possible hardcoded secret: AWS Secret Access Key"
8+
severity="error"
9+
/>
10+
<error
11+
source="secret"
12+
line="2"
13+
message="Possible hardcoded secret: AWS Access Key ID"
14+
severity="error"
15+
/>
16+
</file>
17+
<file name="dart/hello-world.dart">
18+
<error
19+
source="secret"
20+
line="2"
21+
message="Possible hardcoded secret: AWS Access Key ID"
22+
severity="error"
23+
/>
1324
</file>
14-
</checkstyle>
25+
</checkstyle>

docs/multiple-tests/pattern-vulnerability-critical/results.xml

Lines changed: 4 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@
44
<error
55
source="vulnerability_critical"
66
line="5"
7-
message="Insecure dependency golang/stdlib@v1.21.4 (CVE-2024-24790: golang: net/netip: Unexpected behavior from Is methods for IPv4-mapped IPv6 addresses) (update to 1.21.11)"
7+
message="Insecure dependency golang/stdlib@v1.21.4 (CVE-2024-24790: The various Is methods (IsPrivate, IsLoopback, etc) did not work as ex ...) (update to 1.21.11)"
88
severity="error"
99
/>
1010
<error
@@ -20,7 +20,6 @@
2020
severity="error"
2121
/>
2222
</file>
23-
2423
<file name="gradle/gradle.lockfile">
2524
<error
2625
source="vulnerability_critical"
@@ -29,7 +28,6 @@
2928
severity="error"
3029
/>
3130
</file>
32-
3331
<file name="java/pom.xml">
3432
<error
3533
source="vulnerability_critical"
@@ -38,22 +36,20 @@
3836
severity="error"
3937
/>
4038
</file>
41-
4239
<file name="python/Pipfile.lock">
4340
<error
4441
source="vulnerability_critical"
4542
line="19"
46-
message="Insecure dependency pypi/pymysql@1.1.0 (CVE-2024-36039: python-pymysql: SQL injection if used with untrusted JSON input) (update to 1.1.1)"
43+
message="Insecure dependency pypi/pymysql@1.1.0 (CVE-2024-36039: PyMySQL through 1.1.0 allows SQL injection if used with untrusted JSON ...) (update to 1.1.1)"
4744
severity="error"
4845
/>
4946
</file>
50-
5147
<file name="ruby/Gemfile.lock">
5248
<error
5349
source="vulnerability_critical"
5450
line="4"
55-
message="Insecure dependency gem/discordrb@3.4.2 (CVE-2023-28102: GHSL-2022-094: Remote Code Execution in discordrb) (update to >= 3.4.3)"
51+
message="Insecure dependency gem/discordrb@3.4.2 (CVE-2023-28102: GHSL-2022-094: Remote Code Execution in discordrb) (update to &gt;= 3.4.3)"
5652
severity="error"
5753
/>
5854
</file>
59-
</checkstyle>
55+
</checkstyle>

0 commit comments

Comments
 (0)