Kics #172
HariSekhonAnnotations
1 error and 12 warnings
|
Kics / Kics Scan
KICS scan failed with exit code 50
|
|
Kics / Kics Scan
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, github/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
[HIGH] Missing User Instruction:
tests/Dockerfile#L17
A user should be specified in the dockerfile, otherwise the image will run as root
|
|
[MEDIUM] Apt Get Install Pin Version Not Defined:
tests/Dockerfile#L20
When installing a package, its pin version should be defined
|
|
[MEDIUM] Apt Get Install Pin Version Not Defined:
tests/Dockerfile#L1
When installing a package, its pin version should be defined
|
|
[MEDIUM] Apt Get Install Pin Version Not Defined:
tests/Dockerfile#L1
When installing a package, its pin version should be defined
|
|
[MEDIUM] Apt Get Install Pin Version Not Defined:
tests/Dockerfile#L1
When installing a package, its pin version should be defined
|
|
[MEDIUM] Apt Get Install Pin Version Not Defined:
tests/Dockerfile#L20
When installing a package, its pin version should be defined
|
|
[MEDIUM] Apt Get Install Pin Version Not Defined:
tests/Dockerfile#L1
When installing a package, its pin version should be defined
|
|
[MEDIUM] Apt Get Install Pin Version Not Defined:
tests/Dockerfile#L20
When installing a package, its pin version should be defined
|
|
[MEDIUM] Container Capabilities Unrestricted:
tests/docker/nginx-docker-compose.yml#L18
Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.
|
|
[MEDIUM] Container Capabilities Unrestricted:
tests/docker/hbase-docker-compose.yml#L17
Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.
|
|
Kics / Kics Scan
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/
|