You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently Semgrep CI fails because of the following error:
┌─────────────────────────┐
│ 1 Blocking Code Finding │
└─────────────────────────┘
pkg/octopus/octopus.go
❯❯❱ go.grpc.security.grpc-server-insecure-connection.grpc-server-insecure-connection
Found an insecure gRPC server without 'grpc.Creds()' or options with credentials. This allows for a
connection without encryption to this server. A malicious attacker could tamper with the gRPC
message, which could compromise the machine. Include credentials derived from an SSL certificate in
order to create a secure gRPC connection. You can create credentials using
'credentials.NewServerTLSFromFile("cert.pem", "cert.key")'.
Details: https://sg.run/PwW
134┆ s := grpc.NewServer()
Taint comes from:
134┆ s := grpc.NewServer()
This is how taint reaches the sink:
134┆ s := grpc.NewServer()
We should address this error either by fixing it or ignore it with // nosemgrep: grpc-server-insecure-connection
The text was updated successfully, but these errors were encountered:
Currently Semgrep CI fails because of the following error:
We should address this error either by fixing it or ignore it with
// nosemgrep: grpc-server-insecure-connection
The text was updated successfully, but these errors were encountered: