Skip to content

Conversation

@cx-rui-oliveira
Copy link
Contributor

@cx-rui-oliveira cx-rui-oliveira commented Apr 30, 2025

Proposed Changes

To correlate secrets detected by git and the file system, the 2ms git scan now returns the start and end lines where the secret was detected with the file as reference instead of the related git diff.

Checklist

  • I covered my changes with tests.
  • I Updated the documentation that is affected by my changes:
    • Change in the CLI arguments
    • Change in the configuration file

@cx-rui-oliveira cx-rui-oliveira changed the title AST-93087_backend 2 ms guarantee that line number obtained by git and filesystem allows the secrets to be correlated AST-93087-Guarantee that line number obtained by git and filesystem allows the secrets to be correlated Apr 30, 2025
@github-actions
Copy link

kics-logo

KICS version: v1.7.13

Category Results
HIGH HIGH 0
MEDIUM MEDIUM 0
LOW LOW 0
INFO INFO 0
TRACE TRACE 0
TOTAL TOTAL 0
Metric Values
Files scanned placeholder 11
Files parsed placeholder 11
Files failed to scan placeholder 0
Total executed queries placeholder 53
Queries failed to execute placeholder 0
Execution time placeholder 1

@cx-rui-oliveira cx-rui-oliveira changed the title AST-93087-Guarantee that line number obtained by git and filesystem allows the secrets to be correlated feat: guarantee that line number obtained by git and filesystem allows the secrets to be correlated Apr 30, 2025
@github-actions
Copy link

github-actions bot commented Apr 30, 2025

Logo
Checkmarx One – Scan Summary & Details2a28467e-7099-4564-8013-7cc25e95cd3e

Fixed Issues (1)

Great job! The following issues were fixed in this Pull Request

Severity Issue Source File / Package
HIGH CVE-2025-22868 Go-golang.org/x/oauth2-v0.18.0
Policy Management Violations (1)
Policy Name Rule(s) Break Build
FluentAssertions v8 true

@cx-rui-oliveira cx-rui-oliveira marked this pull request as ready for review May 2, 2025 15:43
@cx-rui-oliveira cx-rui-oliveira requested a review from a team as a code owner May 2, 2025 15:43
@cx-rui-oliveira cx-rui-oliveira merged commit 6e8f246 into master May 7, 2025
11 checks passed
@cx-rui-oliveira cx-rui-oliveira deleted the AST-93087-backend-2-ms-guarantee-that-line-number-obtained-by-git-and-filesystem-allows-the-secrets-to-be-correlated branch May 7, 2025 15:52
cx-rogerio-dalot pushed a commit that referenced this pull request Sep 11, 2025
…s the secrets to be correlated (#286)

**Proposed Changes**

To correlate secrets detected by git and the file system, the 2ms git
scan now returns the start and end lines where the secret was detected
with the file as reference instead of the related git diff.

**Checklist**

- [x] I covered my changes with tests.
- [ ] I Updated the documentation that is affected by my changes:
  - [ ] Change in the CLI arguments
  - [ ] Change in the configuration file

---------

Co-authored-by: Leonardo Fontes <[email protected]>
Co-authored-by: LeonardoLordelloFontes <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants