Skip to content

Updated Vuln to SSTI Results#3623

Closed
zapbot wants to merge 1 commit intozaproxy:mainfrom
zapbot:ssti
Closed

Updated Vuln to SSTI Results#3623
zapbot wants to merge 1 commit intozaproxy:mainfrom
zapbot:ssti

Conversation

@zapbot
Copy link
Contributor

@zapbot zapbot commented Feb 28, 2026

Signed-off-by: zapbot <12745184+zapbot@users.noreply.github.com>
@psiinon
Copy link
Member

psiinon commented Feb 28, 2026

Logo
Checkmarx One – Scan Summary & Details7c6f193a-9c01-4ad7-9e9f-07efcc9fb657


New Issues (2) Checkmarx found the following issues in this Pull Request
# Severity Issue Source File / Package Checkmarx Insight
1 HIGH Missing User Instruction /Dockerfile: 1
detailsAlways set a user in the runtime stage of your Dockerfile. Without it, the container defaults to root, even if earlier build stages define a user.
2 MEDIUM Not Using JSON In CMD And ENTRYPOINT Arguments /Dockerfile: 21
detailsEnsure that we are using JSON in the CMD and ENTRYPOINT Arguments

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

@thc202 thc202 closed this Feb 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

3 participants