Review OpenScanHub results for libdnf

[ppisar]

Fedora scanned F41 critical packages for insecure pieces of source code https://lists.fedoraproject.org/archives/list/[email protected]/thread/ZNWA2K3H6OS3LFJOTA5H4FJJC64EBLRK/ Results are at https://svashisht.fedorapeople.org/f41-22-Apr-2024/. There are some findings for libdnf. It would be great to review and the address true positives.

[siteshwar]

A more recent report is available at https://svashisht.fedorapeople.org/f41-03-Jul-2024/

But it contains high number of false positives due to cppcheck warning about limiting analysis of branches. It should be fixed in the future mass scans.

[siteshwar]

Report for Fedora 42 (rawhide) is available at https://svashisht.fedorapeople.org/openscanhub/mass-scans/f42-13-Nov-2024/, it significantly reduces number of false positives.