Checkmarx 掃描報告 Springboot 應用程序中 main 方法的剩余調試代碼

Question

Checkmarx掃描在我的Springboot Application上作為CI/CD中的一個步驟運行。

在掃描結果中， Checkmarx報告了Leftover Debug Code問題，因為我將main方法作為Springboot Application的入口點。

如何通過Checkmarx掃描？

@SpringBootApplication(exclude = {JNDIConnectionFactoryAutoConfiguration.class, HibernateJpaAutoConfiguration.class, JpaRepositoriesAutoConfiguration.class, DataSourceTransactionManagerAutoConfiguration.class, TransactionAutoConfiguration.class})
@ImportResource({"classpath:applicatiomContext.xml"})
public class MyApplication extends SpringBootServletInitializer {

 public static void main(String args []) {

     SpringApplication springApplication = new SpringApplication(MyApplication.class);
     springApplication.run(args);

    }
}

Answer 1

Leftover Debug Code Checkmarx 查詢顯然是在尋找“public”和“static”關鍵字，因此請嘗試將修飾符更改為 private 或 protected：

@SpringBootApplication(exclude = {JNDIConnectionFactoryAutoConfiguration.class, HibernateJpaAutoConfiguration.class, JpaRepositoriesAutoConfiguration.class, DataSourceTransactionManagerAutoConfiguration.class, TransactionAutoConfiguration.class})
@ImportResource({"classpath:applicatiomContext.xml"})
public class MyApplication extends SpringBootServletInitializer {

 protected static void main(String args []) {

     SpringApplication springApplication = new SpringApplication(MyApplication.class);
     springApplication.run(args);

    }
}