Security concerns with the java code that Talend creates
I have generated multiple ETL jobs to move data from one database to another and ran a couple scans on the code that was created. The scans found many security flaws when scanning based on the Security Technical Implementation Guide (STIG). Does Talend support this security guide and does Talend update their software when security concerns are found?
I would say, STIG cannot be applied to generated code without any user interaction. Of course nobody e.g. would write SQL code with direct inline values but this code cannot misused because the purpose of the jobs are batch processing and this is not affected by the attempt of users to cheat the system. By the way, the database output components uses always prepared statements and therefore secure.
