Newly introduced findings

List of Findings

Error: SHELLCHECK_WARNING (CWE-571): [#def1]
/usr/share/go-fdo-server/fdo-utils.sh:72:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   70|     local response
#   71|     response=$(curl --fail --verbose --silent --insecure -w "HTTP_STATUS:%{http_code}" "${owner_url}/api/v1/owner/redirect" 2>/dev/null)
#   72|->   local http_status=$(echo "$response" | grep -o "HTTP_STATUS:[0-9]*" | cut -d: -f2)
#   73|     local body=$(echo "$response" | sed 's/HTTP_STATUS:[0-9]*$//')
#   74|     

Error: SHELLCHECK_WARNING (CWE-571): [#def2]
/usr/share/go-fdo-server/fdo-utils.sh:73:9: warning[SC2155]: Declare and assign separately to avoid masking return values.
#   71|     response=$(curl --fail --verbose --silent --insecure -w "HTTP_STATUS:%{http_code}" "${owner_url}/api/v1/owner/redirect" 2>/dev/null)
#   72|     local http_status=$(echo "$response" | grep -o "HTTP_STATUS:[0-9]*" | cut -d: -f2)
#   73|->   local body=$(echo "$response" | sed 's/HTTP_STATUS:[0-9]*$//')
#   74|     
#   75|     # Return empty string if not found (404) or any error, otherwise return body

Error: SHELLCHECK_WARNING (CWE-563): [#def3]
/usr/share/go-fdo-server/fdo-utils.sh:85:32: warning[SC2034]: ip appears unused. Verify use (or export if used externally).
#   83|   # Helper function for POST/PUT operations on /api/v1/owner/redirect
#   84|   _ownerinfo_request() {
#   85|->   local method=$1 owner_url=$2 ip=$3 dns=$4 port=$5 protocol=$6
#   86|     local json='[{"dns":"'${dns}'","port":"'${port}'","protocol":"'${protocol}'"}]'
#   87|     curl --fail --verbose --silent --insecure -X "${method}" "${owner_url}/api/v1/owner/redirect" \

Scan Properties

analyzer-version-clippy1.92.0
analyzer-version-cppcheck2.18.3
analyzer-version-gcc15.2.1
analyzer-version-gcc-analyzer15.2.1
analyzer-version-shellcheck0.11.0
analyzer-version-unicontrol0.0.2
diffbase-analyzer-version-clippy1.92.0
diffbase-analyzer-version-cppcheck2.18.3
diffbase-analyzer-version-gcc15.2.1
diffbase-analyzer-version-gcc-analyzer15.2.1
diffbase-analyzer-version-shellcheck0.11.0
diffbase-analyzer-version-unicontrol0.0.2
diffbase-enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
diffbase-exit-code0
diffbase-hostip-172-16-1-239.us-west-2.compute.internal
diffbase-known-false-positives/usr/share/csmock/known-false-positives.js
diffbase-known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
diffbase-mock-configfedora-rawhide-x86_64
diffbase-project-namego-fdo-server-0.0.4-1.20251218153633176746.main.13.g82f236f
diffbase-store-results-to/tmp/tmpvbk24qtd/go-fdo-server-0.0.4-1.20251218153633176746.main.13.g82f236f.tar.xz
diffbase-time-created2025-12-18 16:07:01
diffbase-time-finished2025-12-18 16:09:40
diffbase-toolcsmock
diffbase-tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,unicontrol,gcc,shellcheck,clippy' '-o' '/tmp/tmpvbk24qtd/go-fdo-server-0.0.4-1.20251218153633176746.main.13.g82f236f.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmpvbk24qtd/go-fdo-server-0.0.4-1.20251218153633176746.main.13.g82f236f.src.rpm'
diffbase-tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9
enabled-pluginsclippy, cppcheck, gcc, shellcheck, unicontrol
exit-code0
hostip-172-16-1-239.us-west-2.compute.internal
known-false-positives/usr/share/csmock/known-false-positives.js
known-false-positives-rpmknown-false-positives-0.0.0.20250521.132812.g8eff701.main-1.el9.noarch
mock-configfedora-rawhide-x86_64
project-namego-fdo-server-0.0.4-1.20251218154155941080.pr130.8.g4a29174
store-results-to/tmp/tmp67zn_76a/go-fdo-server-0.0.4-1.20251218154155941080.pr130.8.g4a29174.tar.xz
time-created2025-12-18 16:10:06
time-finished2025-12-18 16:12:17
titleNewly introduced findings
toolcsmock
tool-args'/usr/bin/csmock' '-r' 'fedora-rawhide-x86_64' '-t' 'cppcheck,unicontrol,gcc,shellcheck,clippy' '-o' '/tmp/tmp67zn_76a/go-fdo-server-0.0.4-1.20251218154155941080.pr130.8.g4a29174.tar.xz' '--gcc-analyze' '--unicontrol-notests' '--unicontrol-bidi-only' '--install' 'pam' '/tmp/tmp67zn_76a/go-fdo-server-0.0.4-1.20251218154155941080.pr130.8.g4a29174.src.rpm'
tool-versioncsmock-3.8.3.20251215.161544.g62de9a5-1.el9