Code Security Report: 1 total findings [master]

[mend-for-garden.eu.org]

Code Security Report

Scan Metadata

Latest Scan: 2025-02-25 08:47am
Total Findings: 1 | New Findings: 0 | Resolved Findings: 0
Tested Project Files: 30
Detected Programming Languages: 2 (Ruby, Python*)

• Check this box to manually trigger a scan

Finding Details

Severity	Vulnerability Type	CWE	File	Data Flows	Detected
Medium	Insecure TLS Configuration	CWE-295	deployment.py:363	1	2025-02-25 08:48am
Vulnerable Code pyvespa/vespa/deployment.py Lines 358 to 363 in 2604da3 debug=debug, docker_timeout=docker_timeout, ) self.wait_for_config_server_start(max_wait=max_wait_configserver) r = requests.post( 1 Data Flow/s detected pyvespa/vespa/deployment.py Line 363 in 2604da3 r = requests.post( Secure Code Warrior Training Material ● Training    ▪ Secure Code Warrior Insecure TLS Configuration Training ● Videos    ▪ Secure Code Warrior Insecure TLS Configuration Video

[ean]

False positive, as this is localhost communication.

Our Mend setup is work in progress, and the plan is to suppress this specific item.