BRE-385

[mimartin12]

🎟️ Tracking

📔 Objective

📸 Screenshots

⏰ Reminders before review

• Contributor guidelines followed
• All formatters and local linters executed and passed
• Written new unit and / or integration tests where applicable
• Protected functional changes with optionality (feature flags)
• Used internationalization (i18n) for all UI strings
• CI builds passed
• Communicated to DevOps any deployment requirements
• Updated any necessary documentation (Confluence, contributing docs) or informed the documentation team

🦮 Reviewer guidelines

• 👍 (:+1:) or similar for great changes
• 📝 (:memo:) or ℹ️ (:information_source:) for notes or general info
• ❓ (:question:) for questions
• 🤔 (:thinking:) or 💭 (:thought_balloon:) for more open inquiry that's not quite a confirmed issue and could potentially benefit from discussion
• 🎨 (:art:) for suggestions / improvements
• ❌ (:x:) or ⚠️ (:warning:) for more significant problems or concerns needing attention
• 🌱 (:seedling:) or ♻️ (:recycle:) for future improvements or indications of technical debt
• ⛏ (:pick:) for minor or nitpick changes

[github-actions]

Checkmarx One – Scan Summary & Details – 9d1c88f6-a9f9-4a3f-baaf-f6cf804f5f81

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Unpinned Actions Full Length Commit SHA	/build.yml: 584	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build.yml: 669	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build.yml: 621	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build.yml: 225	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build.yml: 550	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build.yml: 584	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build.yml: 550	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build.yml: 669	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build.yml: 621	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Unpinned Actions Full Length Commit SHA	/build.yml: 225	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...

Fixed Issues

Severity	Issue	Source File / Package
	CSRF	/src/Api/AdminConsole/Controllers/PoliciesController.cs: 68
	CSRF	/src/Api/AdminConsole/Controllers/OrganizationsController.cs: 122
	CSRF	/src/Api/AdminConsole/Controllers/PoliciesController.cs: 89
	CSRF	/src/Api/AdminConsole/Controllers/PoliciesController.cs: 159
	CSRF	/src/Api/AdminConsole/Public/Controllers/PoliciesController.cs: 42
	CSRF	/src/Api/AdminConsole/Public/Controllers/PoliciesController.cs: 61
	Unpinned Actions Full Length Commit SHA	/build.yml: 545
	Unpinned Actions Full Length Commit SHA	/build.yml: 664
	Unpinned Actions Full Length Commit SHA	/build.yml: 616
	Unpinned Actions Full Length Commit SHA	/build.yml: 220
	Unpinned Actions Full Length Commit SHA	/build.yml: 579
	Log_Forging	/src/Api/Auth/Controllers/EmergencyAccessController.cs: 102
	Unpinned Actions Full Length Commit SHA	/build.yml: 579
	Unpinned Actions Full Length Commit SHA	/build.yml: 545
	Unpinned Actions Full Length Commit SHA	/build.yml: 616
	Unpinned Actions Full Length Commit SHA	/build.yml: 220
	Unpinned Actions Full Length Commit SHA	/build.yml: 664

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 42.58%. Comparing base (702a81b) to head (52b7953).

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #4996   +/-   ##
=======================================
  Coverage   42.58%   42.58%           
=======================================
  Files        1406     1406           
  Lines       65074    65074           
  Branches     5962     5962           
=======================================
  Hits        27715    27715           
  Misses      36131    36131           
  Partials     1228     1228           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[bitwarden-devops-bot]

Ephemeral Environment Details:
Web: https://bre-385-create-seeded-database-dev.ee.bitwarden.pw/web
Api: https://bre-385-create-seeded-database-dev.ee.bitwarden.pw/api

[bitwarden-devops-bot]

Ephemeral Environment Details:
Web: https://bre-385-create-seeded-database.ee.bitwarden.pw/web
Api: https://bre-385-create-seeded-database.ee.bitwarden.pw/api