Code Security Report: 2 total findings [main]

[mend-for-github-com]

Code Security Report

Scan Metadata

Latest Scan: 2026-04-17 05:44am
Total Findings: 2 | New Findings: 0 | Resolved Findings: 0
Tested Project Files: 9
Detected Programming Languages: 2 (Kotlin, Secrets)

• Check this box to manually trigger a scan

Note: GitHub may take a few seconds to process actions triggered via checkboxes.
Please wait until the change is visible before continuing.

Finding Details

Severity	Vulnerability Type	CWE	File	Data Flows	Detected
Low	System Properties Change	CWE-20	build.gradle.kts:65	1	2026-04-06 12:39pm
Vulnerable Code core-module-15729/plugin-build/plugin/build.gradle.kts Lines 60 to 65 in a9f20c4 if (key == null || secret == null) { throw GradleException("gradlePublishKey and/or gradlePublishSecret are not defined environment variables") } System.setProperty("gradle.publish.key", key) System.setProperty("gradle.publish.secret", secret) 1 Data Flow/s detected core-module-15729/plugin-build/plugin/build.gradle.kts Line 58 in a9f20c4 val secret = System.getenv("GRADLE_PUBLISH_SECRET") Secure Code Warrior Training Material Suppress Finding ... as False Alarm ... as Acceptable Risk Note: GitHub may take a few seconds to process actions triggered via checkboxes. Please wait until the change is visible before continuing.
Low	System Properties Change	CWE-20	build.gradle.kts:64	1	2026-04-06 12:39pm
Vulnerable Code core-module-15729/plugin-build/plugin/build.gradle.kts Lines 59 to 64 in a9f20c4 if (key == null || secret == null) { throw GradleException("gradlePublishKey and/or gradlePublishSecret are not defined environment variables") } System.setProperty("gradle.publish.key", key) 1 Data Flow/s detected core-module-15729/plugin-build/plugin/build.gradle.kts Line 57 in a9f20c4 val key = System.getenv("GRADLE_PUBLISH_KEY") Secure Code Warrior Training Material Suppress Finding ... as False Alarm ... as Acceptable Risk Note: GitHub may take a few seconds to process actions triggered via checkboxes. Please wait until the change is visible before continuing.