Skip to content

feat: z/OSMF JWT Preflight Check #4531

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
hrishikesh-nalawade wants to merge 30 commits into
base: v3.x.x
Choose a base branch
from

Merge branch 'v3.x.x' into hrishikesh-nalawade/GH4526/jwt-pre-flight-…

28c83a1
Select commit
Loading
Failed to load commit list.
Draft

feat: z/OSMF JWT Preflight Check #4531

Merge branch 'v3.x.x' into hrishikesh-nalawade/GH4526/jwt-pre-flight-…
28c83a1
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / SonarCloud failed May 28, 2026 in 2s

4 new alerts including 4 high severity security vulnerabilities

New alerts in code changed by this pull request

Security Alerts:

  • 4 high

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 84 in zosmf-jwt-check/src/main/java/org/zowe/apiml/SSLContextFactory.java

See this annotation in the file changed.

Code scanning / SonarCloud

Server certificates should be verified during SSL/TLS connections High

Enable server certificate validation on this SSL/TLS connection. See more on SonarQube Cloud

Check failure on line 88 in zosmf-jwt-check/src/main/java/org/zowe/apiml/SSLContextFactory.java

See this annotation in the file changed.

Code scanning / SonarCloud

Server certificates should be verified during SSL/TLS connections High

Enable server certificate validation on this SSL/TLS connection. See more on SonarQube Cloud

Check failure on line 53 in zosmf-jwt-check/src/main/java/org/zowe/apiml/ZosmfJwtCheck.java

See this annotation in the file changed.

Code scanning / SonarCloud

Server hostnames should be verified during SSL/TLS connections High

Enable server hostname verification on this SSL/TLS connection. See more on SonarQube Cloud

Check failure on line 61 in zosmf-jwt-check/src/main/java/org/zowe/apiml/ZosmfJwtCheck.java

See this annotation in the file changed.

Code scanning / SonarCloud

Server hostnames should be verified during SSL/TLS connections High

Enable server hostname verification on this SSL/TLS connection. See more on SonarQube Cloud