chore(findings): sonarsource/sonarqube/sonarqube8-datacenter-app
Summary
sonarsource/sonarqube/sonarqube8-datacenter-app has 8 new findings discovered during continuous monitoring.
| id | source | package |
|---|---|---|
| CVE-2021-35515 | anchore_cve | commons_compress-1.20 |
| CVE-2021-35515 | anchore_cve | commons_compress-1.20 |
| CVE-2021-35516 | anchore_cve | commons_compress-1.20 |
| CVE-2021-35516 | anchore_cve | commons_compress-1.20 |
| CVE-2021-35517 | anchore_cve | commons_compress-1.20 |
| CVE-2021-35517 | anchore_cve | commons_compress-1.20 |
| CVE-2021-36090 | anchore_cve | commons_compress-1.20 |
| CVE-2021-36090 | anchore_cve | commons_compress-1.20 |
More information can be found in the failed pipeline located here: https://repo1.dso.mil/dsop/sonarsource/sonarqube/sonarqube8-datacenter-app/-/jobs/6069606
Definition of Done
Justifications:
- All findings have been justified
- Justifications have been provided to the container hardening team
Approval Process:
- Findings Approver has reviewed and approved all justifications
- Approval request has been sent to Authorizing Official
- Approval request has been processed by Authorizing Official