Merge pull request #119 from CheckmarxDev/feature/AST-12047-js-java-wrapper-fixing-code-vulnerabilities

Feature/ast 12047 js java wrapper fixing code vulnerabilities

Author: cx-hugo-machado

.github/workflows/release.yml

@@ -32,7 +32,7 @@ jobs:
           distribution: 'temurin'
           server-id: ossrh
           server-username: MAVEN_USERNAME
-          server-password: MAVEN_PASSWORD
+          server-password: ${{ secrets.OSSRH_TOKEN }}
           gpg-private-key: ${{ secrets.MAVEN_GPG_PRIVATE_KEY }}
           gpg-passphrase: MAVEN_GPG_PASSPHRASE
 

src/main/java/com/checkmarx/ast/wrapper/Execution.java

@@ -31,6 +31,7 @@ private Execution() {
     private static final String FILE_NAME_WINDOWS = "cx.exe";
     private static final String LINE_SEPARATOR = System.getProperty("line.separator");
     private static final String TEMP_DIR = System.getProperty("java.io.tmpdir");
+    private static final String MD5_ALGORITHM = "MD5";
 
     private static String executable = null;
 
@@ -161,7 +162,7 @@ private static String md5(InputStream a) {
         String md5 = null;
         final byte[] buf = new byte[8192];
         try {
-            MessageDigest md = MessageDigest.getInstance("MD5");
+            MessageDigest md = MessageDigest.getInstance(MD5_ALGORITHM);
             int i;
             while ((i = a.read(buf)) != -1) {
                 md.update(buf, 0, i);