Update main.yml

[nishfath]

No description provided.

[github-actions]

Summary

ShiftLeft NextGen Static Analysis detected 201 findings in this PR

Severity	Count
Critical	25
Moderate	15
Info	40

Additionally there are 4 secrets leaked, and 117 vulnerabilities
inherited from OSS components.

Get more information about this scan.

[github-actions]

Summary

ShiftLeft NextGen Static Analysis detected 207 findings in this PR

Severity	Count
Critical	12
Moderate	20
Info	18

Additionally there are 4 secrets leaked, and 153 vulnerabilities
inherited from OSS components.

Get more information about this scan.

[github-actions]

Checking analysis of application shiftleft-java-demo against 1 build rules.

Checking new findings between scans 33 and 34.

Results per rule:

• report: pass (0 matched vulnerabilities; configured threshold is 0)

All rules passed.

[github-actions]

Checking analysis of application shiftleft-java-demo against 1 build rules.

Checking new findings between scans 35 and 36.

Results per rule:

• report: pass (0 matched vulnerabilities; configured threshold is 0)

All rules passed.

[github-actions]

Summary

ShiftLeft NextGen Static Analysis detected 201 findings in this PR

Severity	Count
Critical	25
Moderate	15
Info	40

Additionally there are 4 secrets leaked, and 117 vulnerabilities
inherited from OSS components.

Get more information about this scan.

[github-actions]

Checking analysis of application shiftleft-java-demo against 1 build rules.

Checking new findings between scans 37 and 38.

Results per rule:

• report: pass (0 matched vulnerabilities; configured threshold is 0)

All rules passed.

[github-actions]

Summary

ShiftLeft NextGen Static Analysis detected 201 findings in this PR

Severity	Count
Critical	25
Moderate	15
Info	40

Additionally there are 4 secrets leaked, and 117 vulnerabilities
inherited from OSS components.

Get more information about this scan.

[github-actions]

Checking analysis of application shiftleft-java-demo against 1 build rules.

Checking new findings between scans 39 and 40.

Results per rule:

• report: pass (0 matched vulnerabilities; configured threshold is 0)

All rules passed.

[github-actions]

Summary

ShiftLeft NextGen Static Analysis detected 201 findings in this PR

Severity	Count
Critical	25
Moderate	15
Info	40

Additionally there are 4 secrets leaked, and 117 vulnerabilities
inherited from OSS components.

Get more information about this scan.

[github-actions]

Summary

ShiftLeft NextGen Static Analysis detected 136 findings in this PR

Severity	Count
Critical	0
Moderate	0
Info	18

Additionally there are 0 secrets leaked, and 118 vulnerabilities
inherited from OSS components.

Get more information about this scan.

[github-actions]

Checking analysis of application shiftleft-java-demo against 1 build rules.

Checking new findings between scans 41 and 42.

Results per rule:

• report: pass (0 matched vulnerabilities; configured threshold is 0)

All rules passed.

[github-actions]

Summary

ShiftLeft NextGen Static Analysis detected 117 findings in this PR

Severity	Count
Critical	0
Moderate	0
Info	0

Additionally there are 0 secrets leaked, and 117 vulnerabilities
inherited from OSS components.

Get more information about this scan.

[github-actions]

Checking analysis of application shiftleft-java-demo against 1 build rules.

Checking new findings between scans 43 and 44.

Results per rule:

• report: pass (0 matched vulnerabilities; configured threshold is 0)

All rules passed.

[github-actions]

Summary

ShiftLeft NextGen Static Analysis detected 117 findings in this PR

Severity	Count
Critical	0
Moderate	0
Info	0

Additionally there are 0 secrets leaked, and 117 vulnerabilities
inherited from OSS components.

Get more information about this scan.

[github-actions]

Checking analysis of application shiftleft-java-demo against 1 build rules.

Checking new findings between scans 45 and 46.

Results per rule:

• report: FAIL (29 matched vulnerabilities; configured threshold is 0)

  First 5 new findings:

  ID	Severity	Title
  75	moderate	XSS: Attacker controlled, sensitive data to DB via firstName in CustomerController.debug
  90	moderate	XSS: Attacker controlled, sensitive data to DB via tin in CustomerController.debug
  100	moderate	XSS: Attacker controlled, sensitive data to DB via socialSecurityNum in CustomerController.debug
  105	moderate	XSS: Attacker controlled, sensitive data to DB via ssn in CustomerController.debug
  110	moderate	XSS: Attacker controlled, sensitive data to DB via lastName in CustomerController.debug

  Severity	Count
  Critical	0
  Moderate	9
  Info	20

  OWASP Category	Count
  A3-Sensitive-Data-Exposure	21
  A3-Cross-Site-Scripting	8

  Category	Count
  Sensitive Data Usage	20
  XSS	8
  Sensitive Data Leak	1

1 rule failed.