Story #15307: Add Sonar on PR by marob · Pull Request #3688 · ProgrammeVitam/vitam-ui

marob · 2026-04-16T08:48:59Z

TODO : connecter SonarCloud à l'organisation ProgrammeVitam de GitHub (cf https://community.sonarsource.com/t/troubleshooting-missing-pull-request-decoration-in-sonarqube-cloud/143699) pour que SonarCloud commente la PR (voir ticket #16499)

vitam-prg · 2026-04-16T08:55:58Z

Checkmarx One – Scan Summary & Details – 04249293-a0be-49ca-bed1-fbc5ecb55966

New Issues (11)

Checkmarx found the following issues in this Pull Request

#	Issue	Source File / Package	Checkmarx Insight
1	Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 239	details Method getUser at line 239 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java gets user input from element embe... Attack Vector
2	Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 125	details Method login at line 125 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java gets user input from element dto. ... Attack Vector
3	Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CustomerController.java: 199	details Method create at line 199 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CustomerController.java gets user input from element ... Attack Vector
4	Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 221	details Method getUsersByEmail at line 221 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java gets user input from elem... Attack Vector
5	Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CustomerController.java: 199	details Method create at line 199 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CustomerController.java gets user input from element ... Attack Vector
6	Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CustomerController.java: 199	details Method create at line 199 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CustomerController.java gets user input from element ... Attack Vector
7	Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 301	details Method logout at line 301 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java gets user input from element authT... Attack Vector
8	Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CustomerController.java: 199	details Method create at line 199 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CustomerController.java gets user input from element ... Attack Vector
9	Parameter_Tampering	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 301	details Method logout at line 301 of /api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java gets user input from element authT... Attack Vector
10	Unpinned Actions Full Length Commit SHA	/build-and-test.yml: 157	details Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...
11	Unpinned Actions Full Length Commit SHA	/build-and-test.yml: 152	details Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA help...

Fixed Issues (136)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	~~Privacy_Violation~~	/api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 85
	~~Privacy_Violation~~	/api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 238
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 236
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 237
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 235
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 238
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 236
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 237
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 235
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 238
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 239
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 236
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 237
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 235
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 303
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 302
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
	~~Log_Forging~~	/cas/cas-server/src/main/java/fr/gouv/vitamui/cas/authentication/LoginPwdAuthenticationHandler.java: 195
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CustomerController.java: 210
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CustomerController.java: 199
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 266
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 267
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 268
	~~Log_Forging~~	/api/api-iam/iam/src/main/java/fr/gouv/vitamui/iam/server/rest/CasController.java: 266
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 115
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 197
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 248
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 207
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 217
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 238
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 238
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 115
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 177
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 258
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 187
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 238
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 248
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 207
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 197
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 258
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 248
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 285
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 238
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 115
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 135
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 187
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 177
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 157
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 217
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 135
	~~Log_Forging~~	/api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 115

More results are available on the CxOne platform

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

marob added this to the IT 167 milestone Apr 16, 2026

Story #15307: Add Sonar on PR

4d5d927

marob force-pushed the sonarcloud-on-pr-test branch from 56a9451 to 4d5d927 Compare April 16, 2026 08:54

marob added 3 commits April 16, 2026 11:06

Story #15307: Add Sonar on PR

cba855c

Story #15307: Add Sonar on PR

6ff02f6

Story #15307: Add Sonar on PR

700e665

GiooDev modified the milestones: IT 167, IT 168 Apr 17, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Story #15307: Add Sonar on PR#3688

Story #15307: Add Sonar on PR#3688
marob wants to merge 4 commits into
developfrom
sonarcloud-on-pr-test

marob commented Apr 16, 2026 •

edited

Loading

Uh oh!

vitam-prg commented Apr 16, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

marob commented Apr 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

vitam-prg commented Apr 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

marob commented Apr 16, 2026 •

edited

Loading

vitam-prg commented Apr 16, 2026 •

edited

Loading