From e29ff54e4b23960b1af81170d3844acca75eec58 Mon Sep 17 00:00:00 2001 From: "mend-for-github-com[bot]" <50673670+mend-for-github-com[bot]@users.noreply.github.com> Date: Fri, 26 Jun 2026 10:20:49 +0000 Subject: [PATCH 1/3] Add .whitesource configuration file --- .whitesource | 47 +++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 47 insertions(+) create mode 100644 .whitesource diff --git a/.whitesource b/.whitesource new file mode 100644 index 0000000000..376d45cbfd --- /dev/null +++ b/.whitesource @@ -0,0 +1,47 @@ +{ + "scanSettings": { + "configMode": "AUTO", + "configExternalURL": "", + "projectToken": "", + "baseBranches": [] + }, + "scanSettingsSAST": { + "enableScan": true, + "scanPullRequests": true, + "incrementalScan": true, + "findingSuppressions": "enabled", + "enableSecretsScan": true, + "baseBranches": [], + "snippetSize": 10 + }, + "checkRunSettings": { + "vulnerableCheckRunConclusionLevel": "failure", + "displayMode": "diff", + "useMendCheckNames": true + }, + "checkRunSettingsSAST": { + "checkRunConclusionLevel": "failure", + "severityThreshold": "high" + }, + "issueSettings": { + "minSeverityLevel": "LOW", + "issueType": "DEPENDENCY" + }, + "issueSettingsSAST": { + "minSeverityLevel": "high", + "issueType": "repo" + }, + "remediateSettings": { + "workflowRules": { + "enabled": true + } + }, + "imageSettings":{ + "imageTracing":{ + "enableImageTracingPR": false, + "addRepositoryCoordinate": false, + "addDockerfilePath": false, + "addMendIdentifier": false + } + } +} \ No newline at end of file From 6fc7d7d134ebbe9e11a511925f707a47981e554e Mon Sep 17 00:00:00 2001 From: "mend-for-github-com[bot]" <50673670+mend-for-github-com[bot]@users.noreply.github.com> Date: Fri, 26 Jun 2026 10:34:42 +0000 Subject: [PATCH 2/3] Update module golang.org/x/crypto to v0.52.0 --- utils/keepassxc-cr-recovery/go.mod | 8 ++++---- utils/keepassxc-cr-recovery/go.sum | 6 ++++++ 2 files changed, 10 insertions(+), 4 deletions(-) diff --git a/utils/keepassxc-cr-recovery/go.mod b/utils/keepassxc-cr-recovery/go.mod index 5f7bbe5919..305a9765b4 100644 --- a/utils/keepassxc-cr-recovery/go.mod +++ b/utils/keepassxc-cr-recovery/go.mod @@ -1,10 +1,10 @@ module github.com/keepassxreboot/keepassxc/keepassxc-cr-recovery -go 1.24.0 +go 1.25.0 -require golang.org/x/crypto v0.45.0 +require golang.org/x/crypto v0.52.0 require ( - golang.org/x/sys v0.38.0 // indirect - golang.org/x/term v0.37.0 // indirect + golang.org/x/sys v0.45.0 // indirect + golang.org/x/term v0.43.0 // indirect ) diff --git a/utils/keepassxc-cr-recovery/go.sum b/utils/keepassxc-cr-recovery/go.sum index 0f82070b0e..5ff47b08e0 100644 --- a/utils/keepassxc-cr-recovery/go.sum +++ b/utils/keepassxc-cr-recovery/go.sum @@ -1,6 +1,12 @@ golang.org/x/crypto v0.45.0 h1:jMBrvKuj23MTlT0bQEOBcAE0mjg8mK9RXFhRH6nyF3Q= golang.org/x/crypto v0.45.0/go.mod h1:XTGrrkGJve7CYK7J8PEww4aY7gM3qMCElcJQ8n8JdX4= +golang.org/x/crypto v0.52.0 h1:RMs7fP2rXdep0CftQlK8Uf+kibLm7qkCcradZWYz988= +golang.org/x/crypto v0.52.0/go.mod h1:1QgfPxDqh0T2M/elOJtp9RvuR95kVjir0e6/BvEmGbc= golang.org/x/sys v0.38.0 h1:3yZWxaJjBmCWXqhN1qh02AkOnCQ1poK6oF+a7xWL6Gc= golang.org/x/sys v0.38.0/go.mod h1:OgkHotnGiDImocRcuBABYBEXf8A9a87e/uXjp9XT3ks= +golang.org/x/sys v0.45.0 h1:dO4czNzziLiiXplLQgBCEpCvXQ3dnkn0SdaZSYdQ+FY= +golang.org/x/sys v0.45.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw= golang.org/x/term v0.37.0 h1:8EGAD0qCmHYZg6J17DvsMy9/wJ7/D/4pV/wfnld5lTU= golang.org/x/term v0.37.0/go.mod h1:5pB4lxRNYYVZuTLmy8oR2BH8dflOR+IbTYFD8fi3254= +golang.org/x/term v0.43.0 h1:S4RLU2sB31O/NCl+zFN9Aru9A/Cq2aqKpTZJ6B+DwT4= +golang.org/x/term v0.43.0/go.mod h1:lrhlHNdQJHO+1qVYiHfFKVuVioJIheAc3fBSMFYEIsk= From 7a046eb5f06dc49729d1ccba4604c04eb6dce39b Mon Sep 17 00:00:00 2001 From: Trinity_user Date: Fri, 26 Jun 2026 15:57:42 +0200 Subject: [PATCH 3/3] Delete .whitesource --- .whitesource | 47 ----------------------------------------------- 1 file changed, 47 deletions(-) delete mode 100644 .whitesource diff --git a/.whitesource b/.whitesource deleted file mode 100644 index 376d45cbfd..0000000000 --- a/.whitesource +++ /dev/null @@ -1,47 +0,0 @@ -{ - "scanSettings": { - "configMode": "AUTO", - "configExternalURL": "", - "projectToken": "", - "baseBranches": [] - }, - "scanSettingsSAST": { - "enableScan": true, - "scanPullRequests": true, - "incrementalScan": true, - "findingSuppressions": "enabled", - "enableSecretsScan": true, - "baseBranches": [], - "snippetSize": 10 - }, - "checkRunSettings": { - "vulnerableCheckRunConclusionLevel": "failure", - "displayMode": "diff", - "useMendCheckNames": true - }, - "checkRunSettingsSAST": { - "checkRunConclusionLevel": "failure", - "severityThreshold": "high" - }, - "issueSettings": { - "minSeverityLevel": "LOW", - "issueType": "DEPENDENCY" - }, - "issueSettingsSAST": { - "minSeverityLevel": "high", - "issueType": "repo" - }, - "remediateSettings": { - "workflowRules": { - "enabled": true - } - }, - "imageSettings":{ - "imageTracing":{ - "enableImageTracingPR": false, - "addRepositoryCoordinate": false, - "addDockerfilePath": false, - "addMendIdentifier": false - } - } -} \ No newline at end of file