From e3882d1c6f4124dac24bfc73cec22746de659d60 Mon Sep 17 00:00:00 2001 From: Gabriela Trutan Date: Mon, 14 Oct 2024 14:42:56 +0200 Subject: [PATCH 1/2] SLVS-1470 Update SonarText analyzer to 2.16.0.4008 --- src/EmbeddedSonarAnalyzer.props | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/EmbeddedSonarAnalyzer.props b/src/EmbeddedSonarAnalyzer.props index 6c30cbda7..335f17f83 100644 --- a/src/EmbeddedSonarAnalyzer.props +++ b/src/EmbeddedSonarAnalyzer.props @@ -7,7 +7,7 @@ 9.32.0.97167 6.59.0.75237 10.16.0.27621 - 2.15.0.3845 + 2.16.0.4008 10.7.1.79146 From 927fde20a140df650cc6c9bffab6470a2ba7910a Mon Sep 17 00:00:00 2001 From: Gabriela Trutan Date: Mon, 14 Oct 2024 15:50:23 +0200 Subject: [PATCH 2/2] SLVS-1470 Fix tests that started to fail after analyzer updated --- src/SLCore.IntegrationTests/FileAnalysisTestsRunner.cs | 4 ++-- src/SLCore.IntegrationTests/Resources/Secrets.yml | 6 +++--- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/src/SLCore.IntegrationTests/FileAnalysisTestsRunner.cs b/src/SLCore.IntegrationTests/FileAnalysisTestsRunner.cs index d611b01ee..9acb96793 100644 --- a/src/SLCore.IntegrationTests/FileAnalysisTestsRunner.cs +++ b/src/SLCore.IntegrationTests/FileAnalysisTestsRunner.cs @@ -245,8 +245,8 @@ internal class SecretsIssuesFile : ITestingFile public List ExpectedIssues => [ - new ExpectedTestIssue(CloudSecretsRuleKey, new TextRangeDto(9, 1, 9, 25), RuleType.VULNERABILITY, 0), - new ExpectedTestIssue(CloudSecretsRuleKey, new TextRangeDto(14, 24, 14, 54), RuleType.VULNERABILITY, 0), + new ExpectedTestIssue(CloudSecretsRuleKey, new TextRangeDto(9, 24, 9, 40), RuleType.VULNERABILITY, 0), + new ExpectedTestIssue(CloudSecretsRuleKey, new TextRangeDto(14, 24, 14, 40), RuleType.VULNERABILITY, 0), new ExpectedTestIssue("secrets:S6337", new TextRangeDto(20, 12, 20, 56), RuleType.VULNERABILITY, 0), ]; } diff --git a/src/SLCore.IntegrationTests/Resources/Secrets.yml b/src/SLCore.IntegrationTests/Resources/Secrets.yml index 5ee7a1968..6f4e4057e 100644 --- a/src/SLCore.IntegrationTests/Resources/Secrets.yml +++ b/src/SLCore.IntegrationTests/Resources/Secrets.yml @@ -6,18 +6,18 @@ #________________ # S6336 - Alibaba Cloud AccessKeys should not be disclosed -#LTAI5tBcc9SecYAomgyUSFs8 +#"String aliyunAcecret="LTAI5tBcc9SecYAo"; #___________________________________________________________________ # S6336 - Alibaba Cloud AccessKeys should not be disclosed -#"String aliyunAcecret="KmkwlDrPBC68bgvZiNtrjonKIYmVT8"; +#"String aliyunAcecret="LTAI5tBcc9SecYAo"; #___________________________________________________________________ # S6337 - IBM API keys should not be disclosed -#"apikey": "iT5wxMGq2-ZJlMAHYoODl5EuTeCPvNRkSp1h3m99HWrc" +#"apikey": "fDKU7e_u_EnQgWgDVO4b_ubGqVTa5IYwWEey7lMfEB_1" #___________________________________________________________________