Code Security Report: 11 total findings [main]

# Code Security Report


### Scan Metadata

**Latest Scan:** 2026-07-27 05:41pm
**Total Findings:** 11 | **New Findings:** 0 | **Resolved Findings:** 0
**Tested Project Files:** 149
**Detected Programming Languages:** 2 (Go, JavaScript / TypeScript\*)

- [ ] Check this box to manually trigger a scan 

> <strong>Note:</strong> GitHub may take a few seconds to process actions triggered via checkboxes.
Please wait until the change is visible before continuing.



### Most Relevant Findings
> The list below presents the 10 most relevant findings that need your attention. To view information on the remaining findings, navigate to the [Mend Application](https://saas.whitesourcesoftware.com/app/orgs/STX-PUBLIC/applications/sast?project=08f714a6-87d3-4766-b626-0e11612c0f4d).

<table role='table'><thead><tr><th>Severity</th><th>Vulnerability Type</th><th>CWE</th><th>File</th><th>Data Flows</th><th>Detected</th></tr></thead><tbody><tr><td><a href='#'><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20></a> Medium</td><td>Heap Inspection</td><td>

[CWE-244](https://cwe.mitre.org/data/definitions/244.html)

</td><td>

[flags.go:78](https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L78)

</td><td>1</td><td>2024-12-04 04:30pm</td></tr><tr><td colspan='6'><details><summary><a href='#'><img src='https://saas.mend.io/sast/favicon.png' width=15 height=15></a> Vulnerable Code</summary>

https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L78

</details>

<details>

<summary><a href='#'><img src='https://integration-api.securecodewarrior.com/explorer/favicon-32x32.png' width=15 height=15></a> Secure Code Warrior Training Material</summary>

</details>

<details><summary><a href='#'><img src='https://mend-resources.mend.io/images/eyeslash.svg' width=15 height=15></a> Suppress Finding</summary>

To suppress this finding as a **acceptable risk**, comment:
```bash
/mend code suppress acceptable-risk 76505eec-1057-4c92-acaf-bb9e36903de4 Optional Comment
```

To suppress this finding as a **false positive**, comment:
```bash
/mend code suppress false-positive 76505eec-1057-4c92-acaf-bb9e36903de4 Optional Comment
```

</details>

</td></tr><tr><td colspan='6'>&nbsp;</td></tr>

<tr><td><a href='#'><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20></a> Medium</td><td>Heap Inspection</td><td>

[CWE-244](https://cwe.mitre.org/data/definitions/244.html)

</td><td>

[flags.go:91](https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L91)

</td><td>1</td><td>2024-12-04 04:30pm</td></tr><tr><td colspan='6'><details><summary><a href='#'><img src='https://saas.mend.io/sast/favicon.png' width=15 height=15></a> Vulnerable Code</summary>

https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L91

</details>

<details>

<summary><a href='#'><img src='https://integration-api.securecodewarrior.com/explorer/favicon-32x32.png' width=15 height=15></a> Secure Code Warrior Training Material</summary>

</details>

<details><summary><a href='#'><img src='https://mend-resources.mend.io/images/eyeslash.svg' width=15 height=15></a> Suppress Finding</summary>

To suppress this finding as a **acceptable risk**, comment:
```bash
/mend code suppress acceptable-risk 435835ce-d10b-4c2a-ae63-132a46b6ceb3 Optional Comment
```

To suppress this finding as a **false positive**, comment:
```bash
/mend code suppress false-positive 435835ce-d10b-4c2a-ae63-132a46b6ceb3 Optional Comment
```

</details>

</td></tr><tr><td colspan='6'>&nbsp;</td></tr>

<tr><td><a href='#'><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20></a> Medium</td><td>Heap Inspection</td><td>

[CWE-244](https://cwe.mitre.org/data/definitions/244.html)

</td><td>

[flags.go:77](https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L77)

</td><td>1</td><td>2024-12-04 04:30pm</td></tr><tr><td colspan='6'><details><summary><a href='#'><img src='https://saas.mend.io/sast/favicon.png' width=15 height=15></a> Vulnerable Code</summary>

https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L77

</details>

<details>

<summary><a href='#'><img src='https://integration-api.securecodewarrior.com/explorer/favicon-32x32.png' width=15 height=15></a> Secure Code Warrior Training Material</summary>

</details>

<details><summary><a href='#'><img src='https://mend-resources.mend.io/images/eyeslash.svg' width=15 height=15></a> Suppress Finding</summary>

To suppress this finding as a **acceptable risk**, comment:
```bash
/mend code suppress acceptable-risk 6712c848-bbbf-42b6-90da-cdad62a98aee Optional Comment
```

To suppress this finding as a **false positive**, comment:
```bash
/mend code suppress false-positive 6712c848-bbbf-42b6-90da-cdad62a98aee Optional Comment
```

</details>

</td></tr><tr><td colspan='6'>&nbsp;</td></tr>

<tr><td><a href='#'><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20></a> Medium</td><td>Heap Inspection</td><td>

[CWE-244](https://cwe.mitre.org/data/definitions/244.html)

</td><td>

[flags.go:161](https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L161)

</td><td>1</td><td>2024-12-04 04:30pm</td></tr><tr><td colspan='6'><details><summary><a href='#'><img src='https://saas.mend.io/sast/favicon.png' width=15 height=15></a> Vulnerable Code</summary>

https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L161

</details>

<details>

<summary><a href='#'><img src='https://integration-api.securecodewarrior.com/explorer/favicon-32x32.png' width=15 height=15></a> Secure Code Warrior Training Material</summary>

</details>

<details><summary><a href='#'><img src='https://mend-resources.mend.io/images/eyeslash.svg' width=15 height=15></a> Suppress Finding</summary>

To suppress this finding as a **acceptable risk**, comment:
```bash
/mend code suppress acceptable-risk 4b2e9f2d-db69-4cb9-bca0-bccd63d538e0 Optional Comment
```

To suppress this finding as a **false positive**, comment:
```bash
/mend code suppress false-positive 4b2e9f2d-db69-4cb9-bca0-bccd63d538e0 Optional Comment
```

</details>

</td></tr><tr><td colspan='6'>&nbsp;</td></tr>

<tr><td><a href='#'><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20></a> Medium</td><td>Heap Inspection</td><td>

[CWE-244](https://cwe.mitre.org/data/definitions/244.html)

</td><td>

[flags.go:34](https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L34)

</td><td>1</td><td>2024-12-04 04:30pm</td></tr><tr><td colspan='6'><details><summary><a href='#'><img src='https://saas.mend.io/sast/favicon.png' width=15 height=15></a> Vulnerable Code</summary>

https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L34

</details>

<details>

<summary><a href='#'><img src='https://integration-api.securecodewarrior.com/explorer/favicon-32x32.png' width=15 height=15></a> Secure Code Warrior Training Material</summary>

</details>

<details><summary><a href='#'><img src='https://mend-resources.mend.io/images/eyeslash.svg' width=15 height=15></a> Suppress Finding</summary>

To suppress this finding as a **acceptable risk**, comment:
```bash
/mend code suppress acceptable-risk eedafc4d-95a9-44f8-9ecf-0131090d8223 Optional Comment
```

To suppress this finding as a **false positive**, comment:
```bash
/mend code suppress false-positive eedafc4d-95a9-44f8-9ecf-0131090d8223 Optional Comment
```

</details>

</td></tr><tr><td colspan='6'>&nbsp;</td></tr>

<tr><td><a href='#'><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20></a> Medium</td><td>Heap Inspection</td><td>

[CWE-244](https://cwe.mitre.org/data/definitions/244.html)

</td><td>

[flags.go:154](https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L154)

</td><td>1</td><td>2024-12-04 04:30pm</td></tr><tr><td colspan='6'><details><summary><a href='#'><img src='https://saas.mend.io/sast/favicon.png' width=15 height=15></a> Vulnerable Code</summary>

https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L154

</details>

<details>

<summary><a href='#'><img src='https://integration-api.securecodewarrior.com/explorer/favicon-32x32.png' width=15 height=15></a> Secure Code Warrior Training Material</summary>

</details>

<details><summary><a href='#'><img src='https://mend-resources.mend.io/images/eyeslash.svg' width=15 height=15></a> Suppress Finding</summary>

To suppress this finding as a **acceptable risk**, comment:
```bash
/mend code suppress acceptable-risk 173d1605-fea3-49b2-bd57-23db451987c3 Optional Comment
```

To suppress this finding as a **false positive**, comment:
```bash
/mend code suppress false-positive 173d1605-fea3-49b2-bd57-23db451987c3 Optional Comment
```

</details>

</td></tr><tr><td colspan='6'>&nbsp;</td></tr>

<tr><td><a href='#'><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20></a> Medium</td><td>Heap Inspection</td><td>

[CWE-244](https://cwe.mitre.org/data/definitions/244.html)

</td><td>

[flags.go:104](https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L104)

</td><td>1</td><td>2024-12-04 04:30pm</td></tr><tr><td colspan='6'><details><summary><a href='#'><img src='https://saas.mend.io/sast/favicon.png' width=15 height=15></a> Vulnerable Code</summary>

https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L104

</details>

<details>

<summary><a href='#'><img src='https://integration-api.securecodewarrior.com/explorer/favicon-32x32.png' width=15 height=15></a> Secure Code Warrior Training Material</summary>

</details>

<details><summary><a href='#'><img src='https://mend-resources.mend.io/images/eyeslash.svg' width=15 height=15></a> Suppress Finding</summary>

To suppress this finding as a **acceptable risk**, comment:
```bash
/mend code suppress acceptable-risk 37f69a5d-c8d0-40b1-b5f7-459394497dd5 Optional Comment
```

To suppress this finding as a **false positive**, comment:
```bash
/mend code suppress false-positive 37f69a5d-c8d0-40b1-b5f7-459394497dd5 Optional Comment
```

</details>

</td></tr><tr><td colspan='6'>&nbsp;</td></tr>

<tr><td><a href='#'><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20></a> Medium</td><td>Heap Inspection</td><td>

[CWE-244](https://cwe.mitre.org/data/definitions/244.html)

</td><td>

[flags.go:147](https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L147)

</td><td>1</td><td>2024-12-04 04:30pm</td></tr><tr><td colspan='6'><details><summary><a href='#'><img src='https://saas.mend.io/sast/favicon.png' width=15 height=15></a> Vulnerable Code</summary>

https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L147

</details>

<details>

<summary><a href='#'><img src='https://integration-api.securecodewarrior.com/explorer/favicon-32x32.png' width=15 height=15></a> Secure Code Warrior Training Material</summary>

</details>

<details><summary><a href='#'><img src='https://mend-resources.mend.io/images/eyeslash.svg' width=15 height=15></a> Suppress Finding</summary>

To suppress this finding as a **acceptable risk**, comment:
```bash
/mend code suppress acceptable-risk abec7d65-ea53-4657-8dcb-b553e876f150 Optional Comment
```

To suppress this finding as a **false positive**, comment:
```bash
/mend code suppress false-positive abec7d65-ea53-4657-8dcb-b553e876f150 Optional Comment
```

</details>

</td></tr><tr><td colspan='6'>&nbsp;</td></tr>

<tr><td><a href='#'><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20></a> Medium</td><td>Weak Pseudo-Random</td><td>

[CWE-338](https://cwe.mitre.org/data/definitions/338.html)

</td><td>

[sessions.go:192](https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/pkg/accounts/sessions.go#L192)

</td><td>1</td><td>2024-11-19 10:02pm</td></tr><tr><td colspan='6'><details><summary><a href='#'><img src='https://saas.mend.io/sast/favicon.png' width=15 height=15></a> Vulnerable Code</summary>

https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/pkg/accounts/sessions.go#L192

</details>

<details>

<summary><a href='#'><img src='https://integration-api.securecodewarrior.com/explorer/favicon-32x32.png' width=15 height=15></a> Secure Code Warrior Training Material</summary>

● Training

&nbsp;&nbsp;&nbsp;▪ [Secure Code Warrior Weak Pseudo-Random Training](https://portal.securecodewarrior.com/?utm_source=partner-integration:mend&partner_id=mend#/contextual-microlearning/web/crypto/insecurerandomness/go/vanilla)

● Videos

&nbsp;&nbsp;&nbsp;▪ [Secure Code Warrior Weak Pseudo-Random Video](https://media.securecodewarrior.com/v2/Module_59_Insecure_Randomness_v2.mp4)

● Further Reading

&nbsp;&nbsp;&nbsp;▪ [OWASP Insecure Randomness](https://owasp.org/www-community/vulnerabilities/Insecure_Randomness)

</details>

<details><summary><a href='#'><img src='https://mend-resources.mend.io/images/eyeslash.svg' width=15 height=15></a> Suppress Finding</summary>

To suppress this finding as a **acceptable risk**, comment:
```bash
/mend code suppress acceptable-risk 71f397ca-6e52-4537-9c23-3fa5b1e3c41f Optional Comment
```

To suppress this finding as a **false positive**, comment:
```bash
/mend code suppress false-positive 71f397ca-6e52-4537-9c23-3fa5b1e3c41f Optional Comment
```

</details>

</td></tr><tr><td colspan='6'>&nbsp;</td></tr>

<tr><td><a href='#'><img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20></a> Medium</td><td>Heap Inspection</td><td>

[CWE-244](https://cwe.mitre.org/data/definitions/244.html)

</td><td>

[flags.go:103](https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L103)

</td><td>1</td><td>2024-12-04 04:30pm</td></tr><tr><td colspan='6'><details><summary><a href='#'><img src='https://saas.mend.io/sast/favicon.png' width=15 height=15></a> Vulnerable Code</summary>

https://github.com/Seagate/cfm/blob/4e9f6335e1ae779549d4fbce4b54cf804bea861d/cli/pkg/serviceLib/flags/flags.go#L103

</details>

<details>

<summary><a href='#'><img src='https://integration-api.securecodewarrior.com/explorer/favicon-32x32.png' width=15 height=15></a> Secure Code Warrior Training Material</summary>

</details>

<details><summary><a href='#'><img src='https://mend-resources.mend.io/images/eyeslash.svg' width=15 height=15></a> Suppress Finding</summary>

To suppress this finding as a **acceptable risk**, comment:
```bash
/mend code suppress acceptable-risk 127efa9c-3fbd-4d52-88ed-e39bf79d9442 Optional Comment
```

To suppress this finding as a **false positive**, comment:
```bash
/mend code suppress false-positive 127efa9c-3fbd-4d52-88ed-e39bf79d9442 Optional Comment
```

</details>

</td></tr></tbody></table>



### Findings Overview



| Severity | Vulnerability Type | CWE | Language | Count |
|-|-|-|-|-|
|<img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20> Medium|Heap Inspection|[CWE-244](https://cwe.mitre.org/data/definitions/244.html)|Go|10|
|<img src='https://whitesource-resources.whitesourcesoftware.com/medium_vul.png?' width=19 height=20> Medium|Weak Pseudo-Random|[CWE-338](https://cwe.mitre.org/data/definitions/338.html)|Go|1|

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Code Security Report: 11 total findings [main] #82

Code Security Report

Scan Metadata

Most Relevant Findings

Findings Overview

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Severity	Vulnerability Type	CWE	Language	Count
Medium	Heap Inspection	CWE-244	Go	10
Medium	Weak Pseudo-Random	CWE-338	Go	1

Uh oh!

Code Security Report: 11 total findings [main] #82

Description

Code Security Report

Scan Metadata

Most Relevant Findings

Findings Overview

Metadata

Metadata

Assignees

Labels

Type

Projects

Milestone

Relationships

Development

Issue actions