forked from WebGoat/WebGoat
-
Notifications
You must be signed in to change notification settings - Fork 6
Open
Description
👋 This dashboard summarizes my activity on the repository, including available improvement opportunities.
Recommendations
Last analysis: Sep 13 | Next scheduled analysis: Sep 20
Open
- ✨ (Snyk) Fixed finding: "java/InsecureSecret" #44
- ✨ (Snyk) Fixed finding: "java/InsecureSecret" #43
- ✨ (Snyk) Fixed finding: "java/Ssrf" #42
- ✨ (Snyk) Fixed finding: "java/PT" #41
- (Snyk) Fixed finding: "SQL Injection" #40
- ✨ (Sonar) Fixed finding: "Change this code to not construct SQL queries directly from user-controlled data." #37
- ✨ (Snyk) Fixed finding: "java/InsecureSecret" #36
- (Sonar) Fixed finding: "Database queries should not be vulnerable to injection attacks" #31
- ✨ (Sonar) Fixed finding: "Make sure disabling Spring Security's CSRF protection is safe here." #30
- ✨ (Sonar) Fixed finding: "Change this code to not construct SQL queries directly from user-controlled data." #23
Available
👋 Summon these changes faster with @pixeebot next
- (SONAR) Added secure flag to HTTP cookies
- (SONAR) Moved to stronger cryptographic algorithm
- (SONAR) Introduced protections against predictable RNG abuse
- (SONAR) Refactored to use parameterized SQL APIs
- (SONAR) Refactored to use parameterized SQL APIs
...and more
Metrics
What would you like to see here? Let us know!
Resources
📚 Quick links
Pixee Docs | Codemodder by Pixee
🧰 Tools I work with
SonarCloud | SonarQube | CodeQL | Semgrep
🚀 Pixee CLI
The power of my codemods in your local development environment. Learn more
💬 Reach out
Feedback | Support
❤️ Follow, share, and engage with Pixee: GitHub | LinkedIn | Slack
Metadata
Metadata
Assignees
Labels
No labels
