Skip to content
KICS security and vulnerability scanner

chore(deps): bump org.sonatype.plugins:nexus-staging-maven-plugin from 1.6.13 to 1.7.0 #22

Sign in to view logs

chore(deps): bump org.sonatype.plugins:nexus-staging-maven-plugin from 1.6.13 to 1.7.0

chore(deps): bump org.sonatype.plugins:nexus-staging-maven-plugin from 1.6.13 to 1.7.0 #22

Triggered via pull request June 25, 2024 11:43
@dependabotdependabot[bot]
opened #6
dependabot/maven/org.sonatype.plugins-nexus-staging-maven-plugin-1.7.0
Status Success
Total duration 57s
Artifacts 1

kics.yml

on: pull_request
Analyze
47s
Analyze
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
[MEDIUM] Using Unrecommended Namespace: charts/item-relationship-service/templates/deployment.yaml#L24
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used
[MEDIUM] Using Unrecommended Namespace: charts/item-relationship-service/templates/configmap-spring-app-config.yaml#L26
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used
[MEDIUM] Using Unrecommended Namespace: charts/item-relationship-service/templates/service.yaml#L25
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used
[LOW] Image Pull Policy Of The Container Is Not Set To Always: charts/item-relationship-service/templates/deployment.yaml#L58
Image Pull Policy of the container must be defined and set to Always
[LOW] Image Without Digest: charts/item-relationship-service/templates/deployment.yaml#L58
Images should be specified together with their digests to ensure integrity
[LOW] Missing AppArmor Profile: charts/item-relationship-service/templates/deployment.yaml#L40
Containers should be configured with an AppArmor profile to enforce fine-grained access control over low-level system resources
[LOW] Pod or Container Without LimitRange: charts/item-relationship-service/templates/deployment.yaml#L23
Each namespace should have a LimitRange policy associated to ensure that resource allocations of Pods, Containers and PersistentVolumeClaims do not exceed the defined boundaries
[LOW] Pod or Container Without ResourceQuota: charts/item-relationship-service/templates/deployment.yaml#L23
Each namespace should have a ResourceQuota policy associated to limit the total amount of resources Pods, Containers and PersistentVolumeClaims can consume
[LOW] Secrets As Environment Variables: charts/item-relationship-service/templates/deployment.yaml#L73
Container should not use secrets as environment variables
[LOW] Secrets As Environment Variables: charts/item-relationship-service/templates/deployment.yaml#L73
Container should not use secrets as environment variables

Artifacts

Produced during runtime
Name Size
kicsResults.json Expired
6.18 KB