Skip to content

updated sonar-project.properties #2

updated sonar-project.properties

updated sonar-project.properties #2

Triggered via push November 19, 2024 15:26
Status Failure
Total duration 2m 48s
Artifacts

kics.yaml

on: push
Fit to window
Zoom out
Zoom in

Annotations

1 error and 12 warnings
Kics / Kics Scan
KICS scan failed with exit code 50
Kics / Kics Scan
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, github/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
[HIGH] Container Is Privileged: bash-tools/vagrant-configs/kubernetes/calico.yaml#L3521
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
[HIGH] Container Is Privileged: bash-tools/templates/vagrant-templates/kubernetes/calico.yaml#L3476
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
[HIGH] Container Is Privileged: bash-tools/templates/vagrant-templates/kubernetes/calico.yaml#L3521
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
[HIGH] Container Is Privileged: bash-tools/vagrant-configs/kubernetes/calico.yaml#L3512
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
[HIGH] Container Is Privileged: bash-tools/vagrant-configs/kubernetes/calico.yaml#L3476
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
[HIGH] Container Is Privileged: bash-tools/vagrant-configs/kubernetes/calico.yaml#L3596
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
[HIGH] Container Is Privileged: bash-tools/templates/vagrant-templates/kubernetes/calico.yaml#L3512
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
[HIGH] Container Is Privileged: bash-tools/templates/vagrant-templates/kubernetes/calico.yaml#L3596
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
[HIGH] DB Security Group Open To Large Scope: bash-tools/templates/ec2.yaml#L29
The IP address in a DB Security Group must not have more than 256 hosts.
[HIGH] Missing User Instruction: bash-tools/templates/Dockerfile#L312
A user should be specified in the dockerfile, otherwise the image will run as root
Kics / Kics Scan
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/