Skip to content
KICS

chore(deps): bump github/codeql-action from 3.25.11 to 3.28.0 #1464

Sign in to view logs

chore(deps): bump github/codeql-action from 3.25.11 to 3.28.0

chore(deps): bump github/codeql-action from 3.25.11 to 3.28.0 #1464

Triggered via pull request December 23, 2024 00:33
@dependabotdependabot[bot]
opened #484
dependabot/github_actions/main/github/codeql-action-3.28.0
Status Success
Total duration 1m 9s
Artifacts 1

kics.yml

on: pull_request
Analyze
1m 2s
Analyze
Fit to window
Zoom out
Zoom in

Annotations

11 warnings
Analyze
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
[MEDIUM] Readiness Probe Is Not Configured: charts/digital-product-pass/templates/deployment-backend.yaml#L51
Check if Readiness Probe is not configured.
[MEDIUM] Readiness Probe Is Not Configured: charts/digital-product-pass/templates/deployment-frontend.yaml#L125
Check if Readiness Probe is not configured.
[MEDIUM] Service Account Token Automount Not Disabled: charts/digital-product-pass/templates/deployment-frontend.yaml#L48
Service Account Tokens are automatically mounted even if not necessary
[MEDIUM] Service Account Token Automount Not Disabled: charts/digital-product-pass/templates/deployment-backend.yaml#L44
Service Account Tokens are automatically mounted even if not necessary
[MEDIUM] Unpinned Package Version in Apk Add: dpp-verification/simple-wallet/Dockerfile#L36
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes
[MEDIUM] Unpinned Package Version in Apk Add: dpp-frontend/Dockerfile#L72
Package version pinning reduces the range of versions that can be installed, reducing the chances of failure due to unanticipated changes
[MEDIUM] Using Unrecommended Namespace: charts/digital-product-pass/templates/secret-backend.yaml#L46
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used
[MEDIUM] Using Unrecommended Namespace: charts/digital-product-pass/templates/deployment-backend.yaml#L27
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used
[MEDIUM] Using Unrecommended Namespace: charts/digital-product-pass/templates/service-backend.yaml#L28
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used
[MEDIUM] Using Unrecommended Namespace: charts/digital-product-pass/templates/service-frontend.yaml#L32
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used

Artifacts

Produced during runtime
Name Size
kicsResults.json
7.84 KB