Skip to content

Merge pull request #4073 from cisagov/feature/update-trivy-analysis #56

Merge pull request #4073 from cisagov/feature/update-trivy-analysis

Merge pull request #4073 from cisagov/feature/update-trivy-analysis #56

Triggered via push September 16, 2024 15:41
Status Success
Total duration 8m 12s
Artifacts 2
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
.NET Analysis: CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/EncryptionBuffer.cs#L39
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(string, byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
.NET Analysis: CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/EncryptionBuffer.cs#L56
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(byte[], byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
.NET Analysis: CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/EncryptionBuffer.cs#L67
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(byte[], byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
.NET Analysis: CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/EncryptionBuffer.cs#L73
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(string, byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
.NET Analysis: CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/EncryptionBuffer.cs#L80
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(string, byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
.NET Analysis: CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/DecryptionBuffer.cs#L58
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(byte[], byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
.NET Analysis: CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/DecryptionBuffer.cs#L64
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(string, byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
.NET Analysis: CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/DecryptionBuffer.cs#L71
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(string, byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
.NET Analysis: CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/DecryptionBuffer.cs#L109
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(byte[], byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)
.NET Analysis: CSETWebApi/CSETWeb_Api/CSETWebCore.CryptoBuffer/DecryptionBuffer.cs#L111
'Rfc2898DeriveBytes.Rfc2898DeriveBytes(string, byte[], int)' is obsolete: 'The default hash algorithm and iteration counts in Rfc2898DeriveBytes constructors are outdated and insecure. Use a constructor that accepts the hash algorithm and the number of iterations.' (https://aka.ms/dotnet-warnings/SYSLIB0041)

Artifacts

Produced during runtime
Name Size
trivy-dotnet-results
8.27 KB
trivy-nodejs-results
1.9 KB