Fluid attacks workflow fix

.github/workflows/dev.yml

@@ -1,5 +1,5 @@
 # .github/workflows/dev.yml
-name: Makes CI
+name: Fluid Attacks Scan
 on: [push, pull_request]
 jobs:
   machineStandalone:
@@ -9,4 +9,4 @@ jobs:
       - uses: actions/checkout@master
       - uses: docker://ghcr.io/fluidattacks/makes/amd64
         with:
-          args: m gitlab:fluidattacks/universe@trunk /skims scan ./config.yaml
+          args: m gitlab:fluidattacks/universe@trunk /skims scan ./_fascan.yml

Fluid-Attacks-Results.csv

@@ -0,0 +1,26 @@
+title,cwe,description,cvss,finding,stream,kind,where,snippet,method
+313. Insecure service configuration - Certificates,CWE-295,Server certificates are not verified during SSL/TLS connections in eMailerOOo/source/eMailerOOo/service/pythonpath/emailer/imapclient/config.py,CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N/E:U/RL:O/RC:C,https://docs.fluidattacks.com/criteria/vulnerabilities/313,skims,SAST,163,"
+  153 |
+  154 |
+  155 | def create_client_from_config(conf, login=True):
+  156 |     assert conf.host, ""missing host""
+  157 |
+  158 |     ssl_context = None
+  159 |     if conf.ssl:
+  160 |         ssl_context = ssl.create_default_context()
+  161 |         ssl_context.check_hostname = conf.ssl_check_hostname
+  162 |         if not conf.ssl_verify_cert:
+> 163 |             ssl_context.verify_mode = ssl.CERT_NONE
+  164 |         if conf.ssl_ca_file:
+  165 |             ssl_context.load_verify_locations(cafile=conf.ssl_ca_file)
+  166 |
+  167 |     client = imapclient.IMAPClient(
+  168 |         conf.host,
+  169 |         port=conf.port,
+  170 |         ssl=conf.ssl,
+  171 |         ssl_context=ssl_context,
+  172 |         stream=conf.stream,
+  173 |         timeout=conf.timeout,
+      ^ Col 0
+",python.python_unsafe_certificate_validation
+Summary: 1 vulnerabilities were found in your targets.

config.yaml → _fascan.yml

@@ -1,4 +1,4 @@
-namespace: OWASP
+namespace: eMailerOOo
 output:
   file_path: ./Fluid-Attacks-Results.csv
   format: CSV