Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Renamed componentVulnAnalysisCompleteSubject to FindingsSubject for semantic understanding #204

Closed
wants to merge 10 commits into from

Conversation

mehab
Copy link
Collaborator

@mehab mehab commented Jun 19, 2023

Description

Renamed componentVulnAnalysisCompleteSubject to FindingsSubject for semantic understanding. This is to complete the changes requested in PR : DependencyTrack/hyades#613

Addressed Issue

Additional Details

Checklist

  • I have read and understand the contributing guidelines
  • This PR fixes a defect, and I have provided tests to verify that the fix is effective
  • This PR implements an enhancement, and I have provided tests to verify that it works as intended
  • This PR introduces changes to the database model, and I have added corresponding update logic
  • This PR introduces new or alters existing behavior, and I have updated the documentation accordingly

@mehab mehab changed the base branch from main to feature/backport2434 June 19, 2023 14:09
@mehab mehab changed the base branch from feature/backport2434 to main June 19, 2023 14:09
.setUuid(policyViolation.getUuid().toString())
.setType(policyViolation.getType().name())
.setTimestamp(Timestamp.newBuilder()
.setSeconds(policyViolation.getTimestamp().getTime() / 1000))
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

15% of developers fix this issue

JavaUtilDate: Date has a bad API that leads to bugs; prefer java.time.Instant or LocalDate.


ℹ️ Expand to see all @sonatype-lift commands

You can reply with the following commands. For example, reply with @sonatype-lift ignoreall to leave out all findings.

Command Usage
@sonatype-lift ignore Leave out the above finding from this PR
@sonatype-lift ignoreall Leave out all the existing findings from this PR
@sonatype-lift exclude <file|issue|path|tool> Exclude specified file|issue|path|tool from Lift findings by updating your config.toml file

Note: When talking to LiftBot, you need to refresh the page to see its response.
Click here to add LiftBot to another repo.


return builder.build();
}
private static PolicyViolationAnalysis convert ( final org.dependencytrack.model.ViolationAnalysis analysis){
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

6% of developers fix this issue

UnnecessarilyFullyQualified: This fully qualified name is unambiguous to the compiler if imported.


Suggested change
private static PolicyViolationAnalysis convert ( final org.dependencytrack.model.ViolationAnalysis analysis){
private static PolicyViolationAnalysis convert ( final ViolationAnalysis analysis){

❗❗ 2 similar findings have been found in this PR

🔎 Expand here to view all instances of this finding
File Path Line Number
src/main/java/org/dependencytrack/parser/hyades/NotificationModelConverter.java 385
src/main/java/org/dependencytrack/parser/hyades/NotificationModelConverter.java 409

Visit the Lift Web Console to find more details in your report.


ℹ️ Expand to see all @sonatype-lift commands

You can reply with the following commands. For example, reply with @sonatype-lift ignoreall to leave out all findings.

Command Usage
@sonatype-lift ignore Leave out the above finding from this PR
@sonatype-lift ignoreall Leave out all the existing findings from this PR
@sonatype-lift exclude <file|issue|path|tool> Exclude specified file|issue|path|tool from Lift findings by updating your config.toml file

Note: When talking to LiftBot, you need to refresh the page to see its response.
Click here to add LiftBot to another repo.

@sonatype-lift
Copy link
Contributor

sonatype-lift bot commented Jun 19, 2023

🛠 Lift Auto-fix

Some of the Lift findings in this PR can be automatically fixed. You can download and apply these changes in your local project directory of your branch to review the suggestions before committing.1

# Download the patch
curl https://lift.sonatype.com/api/patch/github.com/DependencyTrack/hyades-apiserver/204.diff -o lift-autofixes.diff

# Apply the patch with git
git apply lift-autofixes.diff

# Review the changes
git diff

Want it all in a single command? Open a terminal in your project's directory and copy and paste the following command:

curl https://lift.sonatype.com/api/patch/github.com/DependencyTrack/hyades-apiserver/204.diff | git apply

Once you're satisfied, commit and push your changes in your project.

Footnotes

  1. You can preview the patch by opening the patch URL in the browser.

@mehab
Copy link
Collaborator Author

mehab commented Jun 19, 2023

Closing this pull request as not needed

@mehab mehab closed this Jun 19, 2023
@github-actions github-actions bot locked as resolved and limited conversation to collaborators Jul 20, 2023
@mehab mehab deleted the feature/renameComponentVulnAnalysisSubject branch February 21, 2024 09:44
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant