feature: updates to trivy code scanner #47
itsmostafatrivy-analysis.yml
on: pull_request
.NET Analysis
6m 58s
Node.js Analysis
1m 27s
Annotations
10 warnings
|
.NET Analysis:
CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/EncryptionBuffer.cs#L39
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(string, byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
|
|
.NET Analysis:
CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/EncryptionBuffer.cs#L56
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(byte[], byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
|
|
.NET Analysis:
CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/EncryptionBuffer.cs#L67
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(byte[], byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
|
|
.NET Analysis:
CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/EncryptionBuffer.cs#L73
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(string, byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
|
|
.NET Analysis:
CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/EncryptionBuffer.cs#L80
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(string, byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
|
|
.NET Analysis:
CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/CryptoCommon.cs#L25
'AesCryptoServiceProvider' is obsolete: 'Derived cryptographic types are obsolete. Use the Create method on the base type instead.' (https://aka.ms/dotnet-warnings/SYSLIB0021)
|
|
.NET Analysis:
CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/CryptoCommon.cs#L28
'RijndaelManaged' is obsolete: 'The Rijndael and RijndaelManaged types are obsolete. Use Aes instead.' (https://aka.ms/dotnet-warnings/SYSLIB0022)
|
|
.NET Analysis:
CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/CryptoCommon.cs#L32
'RC2CryptoServiceProvider' is obsolete: 'Derived cryptographic types are obsolete. Use the Create method on the base type instead.' (https://aka.ms/dotnet-warnings/SYSLIB0021)
|
|
.NET Analysis:
CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/CryptoCommon.cs#L35
'DESCryptoServiceProvider' is obsolete: 'Derived cryptographic types are obsolete. Use the Create method on the base type instead.' (https://aka.ms/dotnet-warnings/SYSLIB0021)
|
|
.NET Analysis:
CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/CryptoCommon.cs#L38
'TripleDESCryptoServiceProvider' is obsolete: 'Derived cryptographic types are obsolete. Use the Create method on the base type instead.' (https://aka.ms/dotnet-warnings/SYSLIB0021)
|