Skip to content

Bump shared-github-actions to v0.0.24 - #155

Merged
rnc merged 1 commit into
Commonjava:masterfrom
patrikk0123:bumpSharedWorkflows-v0.0.24
Sep 25, 2026
Merged

rnc merged 1 commit into
Commonjava:masterfrom
patrikk0123:bumpSharedWorkflows-v0.0.24

Conversation

@patrikk0123

Copy link
Copy Markdown
Contributor

No description provided.

@github-actions

Copy link
Copy Markdown
Contributor

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output



Identified 20 dependencies

Detected 3 vulnerabilities (0 Critical, 2 High, 1 Medium, 0 Low)

+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------+
| SEVERITY |               LIBRARY               |       ID       |                                         TOP FIX                                          |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------+
| HIGH     | infinispan-commons-9.4.24.Final.jar | CVE-2023-5384  | Upgrade to version org.infinispan:infinispan-cachestore-jdbc:14.0.25.Final,15.0.0.Dev07, |
|          |                                     |                | org.infinispan:infinispan-cachestore-jdbc-common:14.0.25.Final,15.0.0.Dev07,             |
|          |                                     |                | org.infinispan:infinispan-cachestore-remote:14.0.25.Final,15.0.0.Dev07,                  |
|          |                                     |                | org.infinispan:infinispan-cachestore-sql:14.0.25.Final,15.0.0.Dev07,                     |
|          |                                     |                | org.infinispan:infinispan-client-hotrod:14.0.25.Final,15.0.0.Dev07,                      |
|          |                                     |                | org.infinispan:infinispan-commons:14.0.25.Final,15.0.0.Dev07,                            |
|          |                                     |                | org.infinispan:infinispan-core:14.0.25.Final,15.0.0.Dev07,                               |
|          |                                     |                | org.infinispan:infinispan-hotrod:14.0.25.Final,15.0.0.Dev07,                             |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------+
| HIGH     | infinispan-core-9.4.24.Final.jar    | CVE-2023-5384  | Upgrade to version org.infinispan:infinispan-cachestore-jdbc:14.0.25.Final,15.0.0.Dev07, |
|          |                                     |                | org.infinispan:infinispan-cachestore-jdbc-common:14.0.25.Final,15.0.0.Dev07,             |
|          |                                     |                | org.infinispan:infinispan-cachestore-remote:14.0.25.Final,15.0.0.Dev07,                  |
|          |                                     |                | org.infinispan:infinispan-cachestore-sql:14.0.25.Final,15.0.0.Dev07,                     |
|          |                                     |                | org.infinispan:infinispan-client-hotrod:14.0.25.Final,15.0.0.Dev07,                      |
|          |                                     |                | org.infinispan:infinispan-commons:14.0.25.Final,15.0.0.Dev07,                            |
|          |                                     |                | org.infinispan:infinispan-core:14.0.25.Final,15.0.0.Dev07,                               |
|          |                                     |                | org.infinispan:infinispan-hotrod:14.0.25.Final,15.0.0.Dev07,                             |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------+
| MEDIUM   | infinispan-core-9.4.24.Final.jar    | CVE-2020-25711 | org.infinispan:infinispan-core:11.0.6.Final                                              |
+----------+-------------------------------------+----------------+------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

infinispan-commons-9.4.24.Final.jar [1 HIGH]
infinispan-core-9.4.24.Final.jar [1 HIGH, 1 MEDIUM]
|-- infinispan-commons-9.4.24.Final.jar [1 HIGH]


No Policy violations were detected

Project 'partyline' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=d623e85d-4e04-4fe0-9b44-ff5838609bb6
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=d8589cae238b4443bd0c214eb33efde077814a8d5f014da38c5d8b34a7a2284d

Mend AI scan succeeded.

Support Token: 2d1e24721bff94524a6d89b0b50b4c3091790339236308
SAST scan output
*no findings*

Full logs and artifacts

@rnc
rnc merged commit 2c218b5 into Commonjava:master Sep 25, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants