Open
Conversation
Added exceptions as part of scan results
* Specifying AST API version in requests. * Implemented AST client secret-based authentication. * Updated the list of scan statuses after API changes. * Removed passing client secret in 'refresh access token' request, because client secret is not needed there.
Support scan local sources for AST
Made DependencyScanResult serializable (needed for Jenkins plugin)
…anch fix automationBranch for 1th run
* Generating AST-SAST web project link. * Added the 'state' field to AST-SAST finding. * Added a SonarCloud property on Natalie's request. * Added a PropertyFileLoader class as a single point for getting properties from files. * Loading URL paths from a properties file according to a SonarLint recommendation.
support AST description
Publish cx artifactory
* Fixed 'invalid_client' error while trying to get access token from refresh token. * Fixed: AST-SCA scans fail if SSO login is enabled. * Fixed ArrayIndexOutOfBoundsException exception when using SAST+OSA with SSO. Caused by the same static apacheClient field that was used in all CxHttpClient instances. This led to unpredictable behavior.
Add sca report2
Added error messages to log.
…nt IO & Memory leaks CR_by: n/a
…ncies exclude vulnerable dependencies from fsa and import the updated ones.
* downgraded sonatype-plugin * downgrade to 0.6.0
* downgraded sonatype-plugin * downgrade to 0.6.0 * downgrade to 0.4.0
User Agent Changes
Policy Violation for SCA
Updated cx-client-common version in CxConsolePlugin to include recent log4j changes.
version set to <version>${cxcommon.version}</version>
Log level support for Cx-Client-Common project
2)Add comprehensive ZIP file handling with automatic extraction, shared utilities, and proper cleanup for both SAST and SCA clients.
trim whitespace from scaResolverAddParams before parsing arguments
Enable ZIP file input support for SAST and SCA scanning
…or CxClientException and other exceptions. This improves debugging capabilities by providing more context on failures during token generation and HTTP requests.
Enhance error logging in CxHttpClient by adding stack trace details f…
…ut. Removed redundant log messages and improved clarity for exception handling during token generation and HTTP requests.
Refactor error logging in CxHttpClient to streamline stack trace
…s not applied correctly in case of zip.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
20 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
1)Enable ZIP file input support for SAST and SCA scanning
2)Add comprehensive ZIP file handling with automatic extraction, shared utilities, and proper cleanup for both SAST and SCA clients.