google / google/android-uiconductor

Security Policy violation Binary Artifacts

Aperta
#116 215 commenti 0 reazioni 0 assegnatari Vedi su GitHub
allstar
Lingua principale
Java
Stelle
127
Fork
24
Metriche di merge delle PR
Nessuna PR unita negli ultimi 30g

Descrizione

_This issue was automatically created by [Allstar](https://github.com/ossf/allstar/)._

**Security Policy Violation**
Project is out of compliance with Binary Artifacts policy: binaries present in source code

**Rule Description**
Binary Artifacts are an increased security risk in your repository. Binary artifacts cannot be reviewed, allowing the introduction of possibly obsolete or maliciously subverted executables. For more information see the [Security Scorecards Documentation](https://github.com/ossf/scorecard/blob/main/docs/checks.md#binary-artifacts) for Binary Artifacts.

**Remediation Steps**
To remediate, remove the generated executable artifacts from the repository.

**Artifacts Found**

- backend/commandline/target/classes/com/google/wireless/qa/uicd/backend/commandline/UicdCLI$1.class
- backend/commandline/target/classes/com/google/wireless/qa/uicd/backend/commandline/UicdCLI.class
- backend/commandline/target/classes/com/google/wireless/qa/uicd/backend/commandline/UicdCLIArgs.class
- backend/commandline/target/commandline-0.1.0-jar-with-dependencies.jar
- backend/commandline/target/commandline-0.1.0.jar
- backend/input/uicd-plugins/tesseract/lib/liblept.so.5
- backend/input/uicd-plugins/tesseract/lib/libtesseract.so.4
- backend/input/uicd-plugins/tesseract/tesseract
- prebuild/uicd-service-0.1.0.jar
- prebuild/uicdcli/uicd-commandline.jar

**Additional Information**
This policy is drawn from [Security Scorecards](https://github.com/ossf/scorecard/), which is a tool that scores a project's adherence to security best practices. You may wish to run a Scorecards scan directly on this repository for more details.

---

Allstar has been installed on all Google managed GitHub orgs. Policies are gradually being rolled out and enforced by the GOSST and OSPO teams. Learn more at http://go/allstar

This issue will auto resolve when the policy is in compliance.

Issue created by Allstar. See https://github.com/ossf/allstar/ for more information. For questions specific to the repository, please contact the owner or maintainer.

Guida per i contributori

Apri la guida per i contributori

Direzione di ricerca

Esamina gli artefatti elencati in backend/commandline/target, backend/input/uicd-plugins/tesseract/lib, backend/input/uicd-plugins/tesseract e prebuild. Rimuovi i binari generati dal controllo versione e verifica lo stato del repository per individuare gli artefatti rimanenti. Il completamento è indicato quando la policy Allstar Binary Artifacts è conforme e l’issue si risolve automaticamente.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Valutazione

Stack tecnologico
java
Ambito
build-system, security
Tipo di issue
Bug
Difficoltà
2/5
Tempo stimato
1-3 ore
Stato di attività
Ferma
Chiarezza
Specificata chiaramente
Idoneità per principianti
35/100

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.