FrankChen021 commented on PR #19828:
URL: https://github.com/apache/druid/pull/19828#issuecomment-5137457262

   Follow-up commit beb54f19d6 fixes the CodeQL gate without changing 
cryptographic behavior. The prior two-line explanatory comment shifted the 
existing legacy Cipher.getInstance call by one line, causing CodeQL to treat 
the baseline CBC/PKCS5 alert as new. The clarified comment is now one line and 
the legacy call is restored to its original baseline location. 
CryptoServiceTest passed (9 tests), as did full processing 
Checkstyle/PMD/enforcer validation. The separate QueryVirtualStorageTest 
failure is unrelated to this PR and occurred despite the Maven build 
succeeding; the new head will rerun it.


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to