Skip to content

Bump shared-github-actions to v0.0.24 - #137

Merged
rnc merged 1 commit into
Commonjava:masterfrom
patrikk0123:bumpSharedWorkflows-v0.0.24
Sep 25, 2026
Merged

rnc merged 1 commit into
Commonjava:masterfrom
patrikk0123:bumpSharedWorkflows-v0.0.24

Conversation

@patrikk0123

Copy link
Copy Markdown
Contributor

No description provided.

@github-actions

Copy link
Copy Markdown
Contributor

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output



Identified 14 dependencies

Detected 4 vulnerabilities (0 Critical, 4 High, 0 Medium, 0 Low)

+----------+-----------------------------+----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |           LIBRARY           |       ID       |                                               TOP FIX                                                |
+----------+-----------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.22.2.jar     | CVE-2026-89407 | Upgrade to version com.fasterxml.jackson.core:jackson-core:2.21.7,                                   |
|          |                             |                | com.fasterxml.jackson.core:jackson-core:2.22.3,tools.jackson.core:jackson-core:3.1.7,                |
|          |                             |                | tools.jackson.core:jackson-core:3.2.2, https://github.com/FasterXML/jackson-core.git -               |
|          |                             |                | jackson-core-2.22.3, https://github.com/FasterXML/jackson-core.git - jackson-core-3.2.2,             |
|          |                             |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.18.11,                                |
|          |                             |                | https://github.com/FasterXML/jackson-core.git - jackson-core-3.1.7,                                  |
|          |                             |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.7,                                 |
|          |                             |                | com.fasterxml.jackson.core:jackson-core:2.18.11                                                      |
+----------+-----------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-core-2.22.2.jar     | CVE-2026-89425 | Upgrade to version com.fasterxml.jackson.core:jackson-core:2.22.3,                                   |
|          |                             |                | https://github.com/FasterXML/jackson-core.git - jackson-core-3.1.7,                                  |
|          |                             |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.18.11,                                |
|          |                             |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.21.7,                                 |
|          |                             |                | https://github.com/FasterXML/jackson-core.git - jackson-core-2.22.3,                                 |
|          |                             |                | https://github.com/FasterXML/jackson-core.git - jackson-core-3.2.3,                                  |
|          |                             |                | tools.jackson.core:jackson-core:3.2.3,tools.jackson.core:jackson-core:3.1.7,                         |
|          |                             |                | com.fasterxml.jackson.core:jackson-core:2.21.7,com.fasterxml.jackson.core:jackson-core:2.18.11       |
+----------+-----------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.22.2.jar | CVE-2026-91776 | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.18.11,                              |
|          |                             |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.3,                          |
|          |                             |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.7,                          |
|          |                             |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.21.7,                         |
|          |                             |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.11,                        |
|          |                             |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.3,                         |
|          |                             |                | tools.jackson.core:jackson-databind:3.2.3,tools.jackson.core:jackson-databind:3.1.7,                 |
|          |                             |                | com.fasterxml.jackson.core:jackson-databind:2.22.3,                                                  |
|          |                             |                | com.fasterxml.jackson.core:jackson-databind:2.21.7                                                   |
+----------+-----------------------------+----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | jackson-databind-2.22.2.jar | CVE-2026-91777 | Upgrade to version com.fasterxml.jackson.core:jackson-databind:2.18.11,                              |
|          |                             |                | com.fasterxml.jackson.core:jackson-databind:2.21.7,                                                  |
|          |                             |                | com.fasterxml.jackson.core:jackson-databind:2.22.3,tools.jackson.core:jackson-databind:3.1.7,        |
|          |                             |                | tools.jackson.core:jackson-databind:3.2.3, https://github.com/FasterXML/jackson-databind.git -       |
|          |                             |                | jackson-databind-2.21.7, https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.2.3, |
|          |                             |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.22.3,                         |
|          |                             |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-2.18.11,                        |
|          |                             |                | https://github.com/FasterXML/jackson-databind.git - jackson-databind-3.1.7                           |
+----------+-----------------------------+----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

atlas-bindings-parent-1.2.4-SNAPSHOT.pom
|-- atlas-bindings-jackson-identities-1.2.4-SNAPSHOT.jar
	|-- logback-classic-1.6.3.jar
		|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- jackson-databind-2.22.2.jar [2 HIGH]
		|-- jackson-core-2.22.2.jar [2 HIGH]
atlas-relationships-api-1.2.4-SNAPSHOT.jar
|-- logback-classic-1.6.3.jar
	|-- jackson-databind-2.22.2.jar [2 HIGH]
|-- jackson-core-2.22.2.jar [2 HIGH]
|-- jackson-databind-2.22.2.jar [2 HIGH]
	|-- jackson-core-2.22.2.jar [2 HIGH]
|-- atlas-bindings-jackson-identities-1.2.4-SNAPSHOT.jar
	|-- jackson-core-2.22.2.jar [2 HIGH]
	|-- jackson-databind-2.22.2.jar [2 HIGH]


No Policy violations were detected

Project 'atlas' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=39738ac6-5a02-45c2-9a86-e4e2da90bac7
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=7554d7d626344f5b98cee2f98f4f837ed197e5ab431c4ffcb339e8a0e766aa44

Mend AI scan succeeded.

Support Token: 3d04331c030d246058a0099ba1c6bfaaf1790339154125
SAST scan output
*no findings*

Full logs and artifacts

@rnc
rnc merged commit b53f616 into Commonjava:master Sep 25, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants