Skip to content

[PM-35393] MasterPasswordService auth integration #19684

[PM-35393] MasterPasswordService auth integration

[PM-35393] MasterPasswordService auth integration #19684

Triggered via pull request May 4, 2026 15:24
@enmandeenmande
synchronize #7575
Status Success
Total duration 7m 7s
Artifacts

scan.yml

on: pull_request_target
Check PR run  /  Check
8s
Check PR run / Check
Checkmarx  /  SAST scan
4s
Checkmarx / SAST scan
Sonar  /  Quality scan
6m 49s
Sonar / Quality scan
Fit to window
Zoom out
Zoom in

Annotations

12 warnings
Check PR run / Check
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions-cool/check-user-permission@7b90a27f92f3961b368376107661682c441f6103. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Sonar / Quality scan
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/setup-dotnet@67a3573c9a986a3f9c594539f4ab511d57bb3ce9, actions/setup-java@c1e323688fd81a25caa38c78aa6df2d33d3e20d9. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
Sonar / Quality scan: src/Core/Models/Mail/Provider/ProviderUserInvitedViewModel.cs#L14
The behavior of 'string.Format(string, params ReadOnlySpan<object>)' could vary based on the current user's locale settings. Replace this call in 'ProviderUserInvitedViewModel.Url.get' with a call to 'string.Format(IFormatProvider, string, params ReadOnlySpan<object>)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Sonar / Quality scan: src/Core/Utilities/EmailValidation.cs#L57
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'EmailValidation.GetDomain(string)' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Sonar / Quality scan: src/Core/Utilities/EnumerationProtectionHelpers.cs#L30
The behavior of 'long.Parse(string, NumberStyles)' could vary based on the current user's locale settings. Replace this call in 'EnumerationProtectionHelpers.GetIndexForInputHash(byte[], string, int)' with a call to 'long.Parse(string, NumberStyles, IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Sonar / Quality scan: src/Core/Utilities/EncryptedStringLengthAttribute.cs#L13
The behavior of 'string.Format(string, object, object)' could vary based on the current user's locale settings. Replace this call in 'EncryptedStringLengthAttribute.FormatErrorMessage(string)' with a call to 'string.Format(IFormatProvider, string, params object[])'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Sonar / Quality scan: src/Core/Utilities/HostBuilderExtensions.cs#L14
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'IHostBuilder.ConfigureCustomAppConfiguration(string[])' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Sonar / Quality scan: src/Core/Utilities/JsonHelpers.cs#L127
The behavior of 'long.ToString()' could vary based on the current user's locale settings. Replace this call in 'MsEpochConverter.Write(Utf8JsonWriter, DateTime?, JsonSerializerOptions)' with a call to 'long.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Sonar / Quality scan: src/Core/Billing/Pricing/Organizations/Purchasable.cs#L79
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'FreeOrScalableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Sonar / Quality scan: src/Core/Billing/Pricing/Organizations/Purchasable.cs#L30
The behavior of 'string.ToLower()' could vary based on the current user's locale settings. Replace this call in 'PurchasableJsonConverter._typePropertyName' with a call to 'string.ToLower(CultureInfo)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1304)
Sonar / Quality scan: util/Server/Startup.cs#L102
The behavior of 'DateTime.ToString()' could vary based on the current user's locale settings. Replace this call in 'Startup.Configure(IApplicationBuilder, IConfiguration, ILogger<Startup>)' with a call to 'DateTime.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)
Sonar / Quality scan: util/Server/Startup.cs#L43
The behavior of 'DateTime.ToString()' could vary based on the current user's locale settings. Replace this call in 'Startup.Configure(IApplicationBuilder, IConfiguration, ILogger<Startup>)' with a call to 'DateTime.ToString(IFormatProvider)'. (https://learn.microsoft.com/dotnet/fundamentals/code-analysis/quality-rules/ca1305)