UNCLASSIFIED - NO CUI

chore(findings): sonarsource/sonar-scanner-cli

Summary

sonarsource/sonar-scanner-cli has 4 new findings discovered during continuous monitoring.

id source package
CVE-2021-3712 anchore_cve openssl-1.1.1g-15.el8_3
CVE-2021-3712 twistlock_cve openssl-1.1.1g-15.el8_3
CVE-2021-32803 twistlock_cve tar-4.4.13
CVE-2021-32804 twistlock_cve tar-4.4.13

More information can be found in the failed pipeline located here: https://repo1.dso.mil/dsop/sonarsource/sonar-scanner-cli/-/jobs/6071018

Definition of Done

Justifications:

  • All findings have been justified
  • Justifications have been provided to the container hardening team

Approval Process:

  • Findings Approver has reviewed and approved all justifications
  • Approval request has been sent to Authorizing Official
  • Approval request has been processed by Authorizing Official
Edited by Andy Maksymowicz
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information