chore(findings): sonarsource/sonarqube/sonarqube8-enterprise

Summary

sonarsource/sonarqube/sonarqube8-enterprise has 13 new findings discovered during continuous monitoring.

id	source	package
CVE-2021-35515	anchore_cve	commons-compress-1.20
CVE-2021-35515	anchore_cve	commons-compress-1.20
CVE-2021-35516	anchore_cve	commons-compress-1.20
CVE-2021-35516	anchore_cve	commons-compress-1.20
CVE-2021-35517	anchore_cve	commons-compress-1.20
CVE-2021-35517	anchore_cve	commons-compress-1.20
CVE-2021-36090	anchore_cve	commons-compress-1.20
CVE-2021-36090	anchore_cve	commons-compress-1.20
CVE-2021-21290	twistlock_cve	io.netty_netty-codec-http-4.1.49.Final
CVE-2021-35515	twistlock_cve	org.apache.commons_commons-compress-1.20
CVE-2021-35516	twistlock_cve	org.apache.commons_commons-compress-1.20
CVE-2021-35517	twistlock_cve	org.apache.commons_commons-compress-1.20
CVE-2021-36090	twistlock_cve	org.apache.commons_commons-compress-1.20

More information can be found in the failed pipeline located here: https://repo1.dso.mil/dsop/sonarsource/sonarqube/sonarqube8-enterprise/-/jobs/5212709

Definition of Done

Justifications:

• All findings have been justified
• Justifications have been provided to the container hardening team

Approval Process:

• Findings Approver has reviewed and approved all justifications
• Approval request has been sent to Authorizing Official
• Approval request has been processed by Authorizing Official