FrankChen021 commented on PR #19828: URL: https://github.com/apache/druid/pull/19828#issuecomment-5137457262
Follow-up commit beb54f19d6 fixes the CodeQL gate without changing cryptographic behavior. The prior two-line explanatory comment shifted the existing legacy Cipher.getInstance call by one line, causing CodeQL to treat the baseline CBC/PKCS5 alert as new. The clarified comment is now one line and the legacy call is restored to its original baseline location. CryptoServiceTest passed (9 tests), as did full processing Checkstyle/PMD/enforcer validation. The separate QueryVirtualStorageTest failure is unrelated to this PR and occurred despite the Maven build succeeding; the new head will rerun it. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
