google / google/android-uiconductor
Security Policy violation Binary Artifacts
- Lingua principale
- Java
- Stelle
- 127
- Fork
- 24
- Metriche di merge delle PR
- Nessuna PR unita negli ultimi 30g
Descrizione
_This issue was automatically created by [Allstar](https://github.com/ossf/allstar/)._
**Security Policy Violation**
Project is out of compliance with Binary Artifacts policy: binaries present in source code
**Rule Description**
Binary Artifacts are an increased security risk in your repository. Binary artifacts cannot be reviewed, allowing the introduction of possibly obsolete or maliciously subverted executables. For more information see the [Security Scorecards Documentation](https://github.com/ossf/scorecard/blob/main/docs/checks.md#binary-artifacts) for Binary Artifacts.
**Remediation Steps**
To remediate, remove the generated executable artifacts from the repository.
**Artifacts Found**
- backend/commandline/target/classes/com/google/wireless/qa/uicd/backend/commandline/UicdCLI$1.class
- backend/commandline/target/classes/com/google/wireless/qa/uicd/backend/commandline/UicdCLI.class
- backend/commandline/target/classes/com/google/wireless/qa/uicd/backend/commandline/UicdCLIArgs.class
- backend/commandline/target/commandline-0.1.0-jar-with-dependencies.jar
- backend/commandline/target/commandline-0.1.0.jar
- backend/input/uicd-plugins/tesseract/lib/liblept.so.5
- backend/input/uicd-plugins/tesseract/lib/libtesseract.so.4
- backend/input/uicd-plugins/tesseract/tesseract
- prebuild/uicd-service-0.1.0.jar
- prebuild/uicdcli/uicd-commandline.jar
**Additional Information**
This policy is drawn from [Security Scorecards](https://github.com/ossf/scorecard/), which is a tool that scores a project's adherence to security best practices. You may wish to run a Scorecards scan directly on this repository for more details.
---
Allstar has been installed on all Google managed GitHub orgs. Policies are gradually being rolled out and enforced by the GOSST and OSPO teams. Learn more at http://go/allstar
This issue will auto resolve when the policy is in compliance.
Issue created by Allstar. See https://github.com/ossf/allstar/ for more information. For questions specific to the repository, please contact the owner or maintainer.
Guida per i contributori
Apri la guida per i contributori
Direzione di ricerca
Esamina gli artefatti elencati in backend/commandline/target, backend/input/uicd-plugins/tesseract/lib, backend/input/uicd-plugins/tesseract e prebuild. Rimuovi i binari generati dal controllo versione e verifica lo stato del repository per individuare gli artefatti rimanenti. Il completamento è indicato quando la policy Allstar Binary Artifacts è conforme e l’issue si risolve automaticamente.
Scritto dal modello di indicizzazione a partire dal testo della issue.
Valutazione
- Stack tecnologico
- java
- Ambito
- build-system, security
- Tipo di issue
- Bug
- Difficoltà
- 2/5
- Tempo stimato
- 1-3 ore
- Stato di attività
- Ferma
- Chiarezza
- Specificata chiaramente
- Idoneità per principianti
- 35/100