feature: Automated DAST scanning #346

Sign in to view logs

Summary
Jobs
- Analyze
Run details
- Usage
- Workflow file

Triggered via pull request February 19, 2024 15:21

drcgjung

opened #89

drcgjung:feature/q-gate-dast-workflow

Status Failure

Total duration 1m 6s

Artifacts –

kics.yml

on: pull_request

Annotations

1 error and 11 warnings

KICS scan failed with exit code 50

Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: github/codeql-action/upload-sarif@689fdc5193eeb735ecb2e52e819e3382876f93f4. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.

[HIGH] Array Without Maximum Number of Items (v3): docs/openapi.json#L1173

Array schema should have the field 'maxItems' set

[HIGH] Array Without Maximum Number of Items (v3): docs/openapi.json#L735

Array schema should have the field 'maxItems' set

[HIGH] Array Without Maximum Number of Items (v3): docs/openapi.json#L209

Array schema should have the field 'maxItems' set

[HIGH] Array Without Maximum Number of Items (v3): docs/openapi.json#L324

Array schema should have the field 'maxItems' set

[HIGH] Array Without Maximum Number of Items (v3): docs/openapi.json#L541

Array schema should have the field 'maxItems' set

[MEDIUM] Additional Properties Too Permissive: docs/openapi.json#L304

Objects should not accept 'additionalProperties' if it is possible

[MEDIUM] Additional Properties Too Permissive: docs/openapi.json#L938

Objects should not accept 'additionalProperties' if it is possible

[MEDIUM] Additional Properties Too Permissive: docs/openapi.json#L624

Objects should not accept 'additionalProperties' if it is possible

[MEDIUM] Additional Properties Too Permissive: docs/openapi.json#L856

Objects should not accept 'additionalProperties' if it is possible

[MEDIUM] Additional Properties Too Permissive: docs/openapi.json#L709

Objects should not accept 'additionalProperties' if it is possible