Skip to content

Merge pull request #357 from eclipse-tractusx/develop #922

Merge pull request #357 from eclipse-tractusx/develop

Merge pull request #357 from eclipse-tractusx/develop #922

Triggered via push November 13, 2024 06:38
Status Success
Total duration 1m 14s
Artifacts

kics.yml

on: push
Fit to window
Zoom out
Zoom in

Annotations

12 warnings
Analyze
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, github/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Analyze
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/
[MEDIUM] API Key Exposed In Global Security (v3): docs/api/revocation-service/openapi_v001.json#L21
API Keys should not be transported over network
[MEDIUM] Additional Properties Too Permissive: docs/api/miw/openapi_v001.json#L1086
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/revocation-service/openapi_v001.json#L284
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/miw/openapi_v001.json#L402
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/revocation-service/openapi_v001.json#L209
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/miw/openapi_v001.json#L1913
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/miw/openapi_v001.json#L1603
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/miw/openapi_v001.json#L1409
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/revocation-service/openapi_v001.json#L311
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/miw/openapi_v001.json#L2931
Objects should not accept 'additionalProperties' if it is possible