Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(jans-keycloak-integration): update kc-saml integration installation for ce and cn #8776 #8792

Merged
merged 47 commits into from
Jun 27, 2024

fix: adjust keycloak version

9e7d6ed
Select commit
Loading
Failed to load commit list.
Merged

feat(jans-keycloak-integration): update kc-saml integration installation for ce and cn #8776 #8792

fix: adjust keycloak version
9e7d6ed
Select commit
Loading
Failed to load commit list.
DryRunSecurity / Sensitive Files Analyzer succeeded Jun 27, 2024 in 1s

DryRun Security

Details

Sensitive Files Analyzer Findings: 2 detected

⚠️ Potential Sensitive File docker-jans-saml/Dockerfile (click for details)
Type Potential Sensitive File
Description Dockerfile changes can introduce security issues such as insecure base images, insecure file permissions, untrusted packages, etc.
Filename docker-jans-saml/Dockerfile
CodeLink
FROM quay.io/keycloak/keycloak:25.0.1@sha256:a3d10e729b140f5a044f6d04f324aa53ae58ed11398e0e6e432cb98042b41b1f as kc-src
FROM bellsoft/liberica-openjre-alpine:17.0.11@sha256:7d9240b84e806f9759560536bac1ca545fc31c02465a4b1ca7131def4f4ab130
⚠️ Potential Sensitive File jans-keycloak-integration/pom.xml (click for details)
Type Potential Sensitive File
Description Java applications manage their dependencies through their pom.xml. A change in this file may indicate an addition of a library/dependency which could introduce additional risk to the application either through vulnerable code, expansion of the application's attack surface via additional routes, or malicious code.
Filename jans-keycloak-integration/pom.xml
CodeLink
<maven.min-version>3.3.9</maven.min-version>
<maven.compiler.source>17</maven.compiler.source>
<maven.compiler.target>17</maven.compiler.target>
<keycloak-server.version>25.0.1</keycloak-server.version>
<nimbus.oauth-sdk.version>10.11</nimbus.oauth-sdk.version>
<nimbus.oauth2-oidc-sdk.version>10.11</nimbus.oauth2-oidc-sdk.version>
<jackson.coreutils.version>1.8</jackson.coreutils.version>