[jira] [Commented] (NUTCH-3192) Address Yetus detsecrets/blanks and SonarCloud security findings in config templates and DummySSL

Thu, 23 Jul 2026 19:31:08 -0700 


    [ 
https://issues.apache.org/jira/browse/NUTCH-3192?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18098657#comment-18098657
 ] 

ASF GitHub Bot commented on NUTCH-3192:
---------------------------------------

sonarqubecloud[bot] commented on PR #944:
URL: https://github.com/apache/nutch/pull/944#issuecomment-5065565705

   ## [![Quality Gate 
Passed](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/checks/QualityGateBadge/qg-passed-20px.png
 'Quality Gate 
Passed')](https://sonarcloud.io/dashboard?id=apache_nutch&pullRequest=944) 
**Quality Gate passed**  
   Issues  
   
![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png
 '') [3 New 
issues](https://sonarcloud.io/project/issues?id=apache_nutch&pullRequest=944&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true)
  
   
![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/accepted-16px.png
 '') [0 Accepted 
issues](https://sonarcloud.io/project/issues?id=apache_nutch&pullRequest=944&issueStatuses=ACCEPTED)
   
   Measures  
   
![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png
 '') [0 Security 
Hotspots](https://sonarcloud.io/project/security_hotspots?id=apache_nutch&pullRequest=944&issueStatuses=OPEN,CONFIRMED&sinceLeakPeriod=true)
  
   
![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png
 '') [24.2% Coverage on New 
Code](https://sonarcloud.io/component_measures?id=apache_nutch&pullRequest=944&metric=new_coverage&view=list)
  
   
![](https://sonarsource.github.io/sonarcloud-github-static-resources/v2/common/passed-16px.png
 '') [1.5% Duplication on New 
Code](https://sonarcloud.io/component_measures?id=apache_nutch&pullRequest=944&metric=new_duplicated_lines_density&view=list)
  
     
   <!

> Address Yetus detsecrets/blanks and SonarCloud security findings in config 
> templates and DummySSL
> -------------------------------------------------------------------------------------------------
>
>                 Key: NUTCH-3192
>                 URL: https://issues.apache.org/jira/browse/NUTCH-3192
>             Project: Nutch
>          Issue Type: Improvement
>          Components: ci/cd, security
>    Affects Versions: 1.22
>            Reporter: Lewis John McGibbney
>            Assignee: Lewis John McGibbney
>            Priority: Major
>             Fix For: 1.23
>
>
> Yetus and SonarCloud report several security / style findings that are 
> largely scanner noise or weak-protocol defaults rather than real credential 
> leaks:
>  
> *Yetus*
>  * conf/index-writers.xml.template: detsecrets on RabbitMQ default 
> amqp://guest:guest@localhost:5672/
>  * conf/httpclient-auth.xml.template: trailing blanks; detsecrets on 
> docstring example passwords
>  
> *SonarCloud (apache_nutch)*
>  * secrets:S6736 on RabbitIndexWriter password-masking regex (false positive; 
> not a hardcoded secret)
>  * java:S4423 on DummySSLProtocolSocketFactory using 
> SSLContext.getInstance("SSL")



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to