de-jcup
Follow
Pinned
948 contributions in the last year
Contribution activity
March 2023
Created 72 commits in 4 repositories
Opened 8 pull requests in 3 repositories
mercedes-benz/sechub
6
merged
- Providing now all execution states in admin status #2039
- HTML report must contain description with call stack
- Feature 1797 fix jsonconverter problems with localdate
- Improved documentation generation output #2018
- Feature 2018 multi uri target resolver strategies
-
Fix problem of missing code call hierarchy in reports for scan type
secretScan
de-jcup/eclipse-bash-editor
1
merged
de-jcup/sarif-java
1
merged
Reviewed 7 pull requests in 2 repositories
mercedes-benz/sechub
6 pull requests
de-jcup/sarif-java
1 pull request
Created an issue in de-jcup/sarif-java that received 2 comments
Handle problem with default values for level
Situation Inside specification we have: https://docs.oasis-open.org/sarif/sarif/v2.1.0/os/sarif-v2.1.0-os.html#_Toc34317648 IF rule (§3.27.7) is p…
2
comments
Opened 30 other issues in 4 repositories
mercedes-benz/sechub
6
closed
10
open
- Replace sechub-sarif with sarif-java library
- Provide initial system test suite
- Spring Boot default jackson mapper instance does not use the sechub localdatetime pattern for JSON
- Add "falsePositives" github action
-
Introduce sechub client action
defineFalsePositives - Change logic in false positive service - only load report when necessary
- Auto cleanup shall drop ScanResults + migration SQL
- Cancel operation for a job only intialized must cleanup storage as well
-
Auto cleanup of orphaned jobs still in state
INITIALIZED - HTML report does not contain details and call stack for secrets
- Replace Objectmapper inside JsonConverter by JsonMapper and use builder
- Provide possiblity to define target resolver strategies at runtime without server restart
- Provide possibility to define multiple uri target resolver strategies.
- Provide a URI net resolver strategy called "intranet-hostname-starts-with:" prefix
- Provide a fallback CWE id for secret scans where no CWE id is set.
-
Code call hierarchy not shown for scans of type
secretScan
de-jcup/sarif-java
11
closed
- Add unit tests for Sarif 2.1.0
- Release 1.1.0 to maven central
- Provide API start points to handle some special parts in SARIF 2.1.0
- Make a short example, how to use the library
- Release github workflow must be enhanced
- Add javadoc to release at maven central
- Fix problem of missing library jars in github worfklow for release
- Change library version to major minor hotfix
- Fix invalid tag name on release github worklfow
- Change build to have standard names + introduce CI
- Provide possibility to release SARIF library to maven central