Skip to content

[NCL-10026] Disable Brew push/pull on primary instance - #768

Merged
patrikk0123 merged 1 commit into
project-ncl:mainfrom
patrikk0123:ncl10026
Sep 29, 2026
Merged

patrikk0123 merged 1 commit into
project-ncl:mainfrom
patrikk0123:ncl10026

Conversation

@patrikk0123

Copy link
Copy Markdown
Member

No description provided.

@github-actions

github-actions Bot commented Sep 25, 2026 •

Copy link
Copy Markdown

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output



Identified 98 dependencies

Detected 11 vulnerabilities (5 Critical, 6 High, 0 Medium, 0 Low)

+----------+------------------+-----------------+------------------------------------------------------------------------------------------------------+
| SEVERITY |     LIBRARY      |       ID        |                                               TOP FIX                                                |
+----------+------------------+-----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | axios-1.18.1.tgz | CVE-2026-101898 | Upgrade to version  https://github.com/axios/axios.git - v1.20.0,axios - 1.20.0                      |
+----------+------------------+-----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | axios-1.18.1.tgz | CVE-2026-101900 | Upgrade to version axios - 1.20.0,axios - 1.20.0, https://github.com/axios/axios.git - v1.20.0       |
+----------+------------------+-----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | axios-1.18.1.tgz | CVE-2026-101904 | Upgrade to version  https://github.com/axios/axios.git - v0.34.0, https://github.com/axios/axios.git |
|          |                  |                 | - v1.20.0,axios - 0.34.0,axios - 0.34.0,axios - 1.20.0,axios - 1.20.0                                |
+----------+------------------+-----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | axios-1.18.1.tgz | CVE-2026-101907 | Upgrade to version axios - 1.20.0, https://github.com/axios/axios.git - v1.20.0,axios - 1.20.0       |
+----------+------------------+-----------------+------------------------------------------------------------------------------------------------------+
| CRITICAL | axios-1.18.1.tgz | CVE-2026-101908 | Upgrade to version axios - 1.20.0,axios - 1.20.0, https://github.com/axios/axios.git - v1.20.0       |
+----------+------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | axios-1.18.1.tgz | CVE-2026-101901 | Upgrade to version axios - 1.20.0, https://github.com/axios/axios.git - v1.20.0                      |
+----------+------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | axios-1.18.1.tgz | CVE-2026-101902 | Upgrade to version axios - 0.34.0, https://github.com/axios/axios.git - v0.34.0,                     |
|          |                  |                 | https://github.com/axios/axios.git - v1.20.0,axios - 1.20.0,axios - 0.34.0,axios - 1.20.0            |
+----------+------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | axios-1.18.1.tgz | CVE-2026-101903 | Upgrade to version axios - 1.20.0, https://github.com/axios/axios.git - v1.20.0                      |
+----------+------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | axios-1.18.1.tgz | CVE-2026-101905 | Upgrade to version axios - 1.20.0, https://github.com/axios/axios.git - v1.20.0                      |
+----------+------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | axios-1.18.1.tgz | CVE-2026-101906 | Upgrade to version axios - 1.20.0,axios - 0.34.0, https://github.com/axios/axios.git - v1.20.0,      |
|          |                  |                 | https://github.com/axios/axios.git - v0.34.0                                                         |
+----------+------------------+-----------------+------------------------------------------------------------------------------------------------------+
| HIGH     | axios-1.18.1.tgz | CVE-2026-101909 | Upgrade to version axios - 1.20.0,axios - 1.20.0,axios - 0.34.0,axios - 0.34.0,                      |
|          |                  |                 | https://github.com/axios/axios.git - v1.20.0, https://github.com/axios/axios.git - v0.34.0           |
+----------+------------------+-----------------+------------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

axios-1.18.1.tgz [5 CRITICAL, 6 HIGH]


No Policy violations were detected

Project 'pnc-web-ui-react-pr' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=6f416836-4316-44dc-86ce-23e64d1c524a
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=7b3328fa24f143e1ac5c90357bfcfb4c6190ffcc1fb94e64a705c217a2b4835a

Mend AI scan succeeded.

Support Token: 327ba10f6d3984885aeb10c5b326ea3811790672579976
SAST scan output
*no findings*

Full logs and artifacts

@patrikk0123
patrikk0123 force-pushed the ncl10026 branch 3 times, most recently from 4176967 to ea1cb3f Compare September 25, 2026 11:14
@matedo1
matedo1 self-requested a review September 25, 2026 14:05

@matedo1 matedo1 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you please add some icon to highlight when the reason tooltip for Brew Pull Active is available? Otherwise looks good. Thanks

@patrikk0123
patrikk0123 merged commit 98bf443 into project-ncl:main Sep 29, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants