Release: Merge back 2.36.2 into bugfix from: master-into-bugfix/2.36.2-2.37.0-dev

[github-actions]

Release triggered by Maffooch

[dryrunsecurity]

DryRun Security Summary

The provided code change updates the DefectDojo Helm chart version from 1.6.139-dev to 1.6.140-dev, which is an infrastructure-level change that does not directly impact the security of the DefectDojo application, but it is important to review the overall changes to the project, including any updates to the application code, dependencies, or deployment configurations, to ensure that the application's security posture is maintained.

Expand for full summary

Summary:

The provided code change is related to the DefectDojo Helm chart, which is a Kubernetes deployment for the DefectDojo application. The change updates the chart version from 1.6.139-dev to 1.6.140-dev. From an application security perspective, these changes do not directly impact the security of the DefectDojo application itself, as they are focused on updating the Helm chart version, which is more of an infrastructure-level change.

However, it's worth noting that the DefectDojo application is a security-focused tool, and any changes to the Helm chart or the underlying infrastructure can potentially have security implications. As an application security engineer, it's important to review the overall changes to the DefectDojo project, including any updates to the application code, dependencies, or deployment configurations, to ensure that the application's security posture is maintained. Additionally, it's a good practice to review the updated dependencies specified in the Chart.yaml file, as changes to the versions of the underlying services (e.g., MySQL, PostgreSQL, RabbitMQ, Redis) could introduce new security vulnerabilities or configuration issues that need to be addressed.

Files Changed:

• helm/defectdojo/Chart.yaml: This file has been updated to change the chart version from 1.6.139-dev to 1.6.140-dev. This change is focused on updating the Helm chart version and does not directly impact the security of the DefectDojo application.

Code Analysis

We ran 7 analyzers against 1 file and 0 analyzers had findings. 7 analyzers had no findings.

Riskiness

🟢 Risk threshold not exceeded.

View PR in the DryRun Dashboard.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud