Thanks for signing up!
An initial scan is finished, and I added the repo(s) to the list for future re-scans.
Unresolved findings are shown with an "unread indicator" on the "Security" tab on each repo. I've had a first quick look and marked those I consider irrelevant findings as such.
If you think a finding is a true positive security issue, please file those in the SECURITY tracker so we can review the fix and coordinate a release.
We're using GitHub's CodeQL as the tool for this, but only execute our own, Jenkins-specific queries. For general purpose queries, you can check out the plugin repos on lgtm.com, or add regular CodeQL code scanning to your plugins.
If you have questions or feedback, please reach out to me directly or send an email to jenkinsci-cert@googlegroups.com.
Task
Minor
Allan BURDAJEWICZ
created issue -
Thanks for signing up!
An initial scan is finished, and I added the repo(s) to the list for future re-scans.
Unresolved findings are shown with an "unread indicator" on the "Security" tab on each repo. I've had a first quick look and marked those I consider irrelevant findings as such.
If you think a finding is a true positive security issue, please file those in the SECURITY tracker so we can review the fix and coordinate a release.
We're using GitHub's CodeQL as the tool for this, but only execute our own, Jenkins-specific queries. For general purpose queries, you can check out the plugin repos on lgtm.com, or add regular CodeQL code scanning to your plugins.
If you have questions or feedback, please reach out to me directly or send an email to jenkinsci-cert@googlegroups.com.