Merge pull request #166 from bci-oss/bugfix/fix-security-issues #636

Sign in to view logs

Summary
Jobs
- Analyze
Run details
- Usage
- Workflow file

Triggered via push October 10, 2024 11:47

tunacicek

main

Status Success

Total duration 48s

Artifacts –

kics.yml

on: push

Annotations

12 warnings

The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, github/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/

[MEDIUM] Container Running With Low UID: charts/bpndiscovery/templates/deployment.yaml#L38

Check if containers are running with low UID, which might cause conflicts with the host's user table.

[MEDIUM] Global Server Object Uses HTTP: backend/src/main/resources/static/bpn-discovery-service-openapi.yaml#L33

Global server object URL should use 'https' protocol instead of 'http'

[MEDIUM] NET_RAW Capabilities Not Being Dropped: charts/bpndiscovery/templates/deployment.yaml#L38

Containers should drop 'ALL' or at least 'NET_RAW' capabilities

[MEDIUM] Pattern Undefined (v3): backend/src/main/resources/static/bpn-discovery-service-openapi.yaml#L221

String schema should have 'pattern' defined.

[MEDIUM] Pattern Undefined (v3): backend/src/main/resources/static/bpn-discovery-service-openapi.yaml#L197

String schema should have 'pattern' defined.

[MEDIUM] Pattern Undefined (v3): backend/src/main/resources/static/bpn-discovery-service-openapi.yaml#L244

String schema should have 'pattern' defined.

[MEDIUM] Pattern Undefined (v3): backend/src/main/resources/static/bpn-discovery-service-openapi.yaml#L173

String schema should have 'pattern' defined.

[MEDIUM] Pattern Undefined (v3): backend/src/main/resources/static/bpn-discovery-service-openapi.yaml#L275

String schema should have 'pattern' defined.

[MEDIUM] Pattern Undefined (v3): backend/src/main/resources/static/bpn-discovery-service-openapi.yaml#L223

String schema should have 'pattern' defined.

[MEDIUM] Pattern Undefined (v3): backend/src/main/resources/static/bpn-discovery-service-openapi.yaml#L252

String schema should have 'pattern' defined.