Skip to content

Update main branch#532

Open
chakladarj-nih wants to merge 1952 commits intomainfrom
dev
Open

Update main branch#532
chakladarj-nih wants to merge 1952 commits intomainfrom
dev

Conversation

@chakladarj-nih
Copy link
Collaborator

Update main branch and move the branch management for SSJ from main going forward.

Lechuga and others added 30 commits July 21, 2025 10:39
SSJ-443: Updates to the Profile Tab
SSJ-452 Stadtman applicant selecting one focus area causes null value to display for VM
Status of References for Vacancy Managers
SSJ-460: Vacancy close date discrepancy on the UI
Editing Created Pre-Live Vacancy Error && Deleting Draft and Finalized Vacancy Error
…, offset, orderBy, and orderColumn. This update did not affect Rolling Close workflow
…l need to configure data to split between recommended vs non-recommended
…een recommended and non-recommended applicants
Lechuga and others added 29 commits January 29, 2026 11:48
SSJ-602: Vacancy POC Information validation not working
SSJ-623: Applicant List Ascending and Descending Order
SSJ-672: Using Only E-mail Distribution List Causes Error
@@ -0,0 +1,3 @@
export const isRichTextEditorEmpty = (value) => {
return value.replace(/<(.|\n)*?>/g, '').trim().length === 0;

Check failure

Code scanning / CodeQL

Incomplete multi-character sanitization High

This string may still contain
<script
, which may cause an HTML element injection vulnerability.
Comment on lines +76 to +83
new webpack.DefinePlugin({
'process.env.REACT_APP_USER': JSON.stringify(
servicenowConfig.REACT_APP_USER
),
'process.env.REACT_APP_PASSWORD': JSON.stringify(
servicenowConfig.REACT_APP_PASSWORD
),
}),

Check failure

Code scanning / CodeQL

Storage of sensitive information in build artifact High

This creates a build artifact that depends on
sensitive data returned byan access to process.env.REACT_APP_PASSWORD
.
This creates a build artifact that depends on
sensitive data returned byan access to REACT_APP_PASSWORD
.
Comment on lines +10 to +25
runs-on: ubuntu-latest

steps:
- name: Checkout repository
uses: actions/checkout@v4

- name: Set up Node.js
uses: actions/setup-node@v4
with:
node-version: '23.4'

- name: Install dependencies
run: npm install

- name: Run Jest tests
run: npm test No newline at end of file

Check warning

Code scanning / CodeQL

Workflow does not contain permissions Medium

Actions job or workflow does not limit the permissions of the GITHUB_TOKEN. Consider setting an explicit permissions block, using the following as a minimal starting point: {contents: read}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants