KICS #975
Annotations
12 warnings
|
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, github/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
Upload SARIF file for GitHub Advanced Security Dashboard
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/
|
|
KICS scan:
backend/postgres/docker-compose.yml#L24
Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.
|
|
KICS scan:
backend/loadtests/docker-compose.yml#L35
Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.
|
|
KICS scan:
backend/loadtests/docker-compose.yml#L25
Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.
|
|
KICS scan:
backend/loadtests/docker-compose.yml#L62
Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.
|
|
KICS scan:
backend/postgres/docker-compose.yml#L34
Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.
|
|
KICS scan:
backend/loadtests/docker-compose.yml#L53
Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.
|
|
KICS scan:
charts/registry/templates/registry/registry-deployment.yaml#L39
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
KICS scan:
backend/postgres/docker-compose.yml#L37
Incoming container traffic should be bound to a specific host interface
|
|
KICS scan:
backend/loadtests/docker-compose.yml#L28
Incoming container traffic should be bound to a specific host interface
|
|
KICS scan:
backend/loadtests/docker-compose.yml#L41
Incoming container traffic should be bound to a specific host interface
|
Loading