Skip to content

Merge pull request #360 from eclipse-tractusx/main #923

Merge pull request #360 from eclipse-tractusx/main

Merge pull request #360 from eclipse-tractusx/main #923

Triggered via push November 13, 2024 10:51
Status Success
Total duration 1m 15s
Artifacts

kics.yml

on: push
Fit to window
Zoom out
Zoom in

Annotations

12 warnings
Analyze
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, github/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Analyze
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/
[MEDIUM] API Key Exposed In Global Security (v3): docs/api/revocation-service/openapi_v001.json#L21
API Keys should not be transported over network
[MEDIUM] Additional Properties Too Permissive: docs/api/miw/openapi_v001.json#L3033
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/revocation-service/openapi_v001.json#L311
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/miw/openapi_v001.json#L38
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/revocation-service/openapi_v001.json#L209
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/miw/openapi_v001.json#L2792
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/miw/openapi_v001.json#L887
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/miw/openapi_v001.json#L1913
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/miw/openapi_v001.json#L2577
Objects should not accept 'additionalProperties' if it is possible
[MEDIUM] Additional Properties Too Permissive: docs/api/miw/openapi_v001.json#L694
Objects should not accept 'additionalProperties' if it is possible