Automatic coin-definitions update

[watchman-pre-prod]

Automatic coin-definitions update

[sstephanou-bc]

Checkmarx One – Scan Summary & Details – 870ee7fb-a6e7-43d7-bba1-ddb4886d3537

New Issues (27)

Checkmarx found the following issues in this Pull Request

Severity	Issue	Source File / Package	Checkmarx Insight
	CVE-2024-45338	Go-golang.org/x/net-v0.10.0	details Recommended version: v0.32.1-0.20241218192430-8e66b04771e3 Description: An attacker can craft an input to the "Parse" function, that will be processed non-linearly with respect to its length, resulting in extremely slow... Attack Vector: NETWORK Attack Complexity: LOW Vulnerable Package
	Passwords And Secrets - Generic Token	/info.json: 19108	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/info.json: 7973	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/info.json: 1948	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/en.json: 2873	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/en.json: 3134	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/en.json: 2872	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/en.json: 280	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/en.json: 391	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/info.json: 6	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/info.json: 4	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/info.json: 14358	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/en.json: 1934	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/prices.json: 1495	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/en.json: 1596	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/prices.json: 2677	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/info.json: 14353	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/info.json: 15663	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/info.json: 9663	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/info.json: 1393	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/en.json: 3823	details Query to find passwords and secrets in infrastructure code.
	Passwords And Secrets - Generic Token	/en.json: 2105	details Query to find passwords and secrets in infrastructure code.
	Unpinned Actions Full Length Commit SHA	/upload-s3.yml: 58	details Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/codeql.yml: 61	details Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/upload-s3.yml: 46	details Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/codeql.yml: 47	details Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/upload-s3.yml: 28	details Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...