Skip to content
[BE][FE][SECURITY] Kics

[BE][FE][SECURITY] Kics #1100

Sign in to view logs

[BE][FE][SECURITY] Kics

[BE][FE][SECURITY] Kics #1100

Triggered via schedule March 14, 2024 00:18
@mkanalmkanal
⁠ 8132d1b
main
Status Success
Total duration 1m 14s
Artifacts –

kics.yml

on: schedule
Analyze frontend
1m 5s
Analyze frontend
Analyze backend
50s
Analyze backend
Fit to window
Zoom out
Zoom in

Annotations

13 warnings
[MEDIUM] Global Server Object Uses HTTP: tx-backend/openapi/traceability-foss-backend.json#L13
Global server object URL should use 'https' protocol instead of 'http'
[MEDIUM] Invalid OAuth2 Token URL (v3): tx-backend/openapi/traceability-foss-backend.json#L8156
OAuth2 security scheme flow requires a valid URL in the tokenUrl field
[MEDIUM] Media Type Object Without Schema: tx-backend/openapi/traceability-foss-backend.json#L1655
The Media Type Object should have the attribute 'schema' defined
[MEDIUM] Media Type Object Without Schema: tx-backend/openapi/traceability-foss-backend.json#L529
The Media Type Object should have the attribute 'schema' defined
[MEDIUM] Media Type Object Without Schema: tx-backend/openapi/traceability-foss-backend.json#L1539
The Media Type Object should have the attribute 'schema' defined
[MEDIUM] Media Type Object Without Schema: tx-backend/openapi/traceability-foss-backend.json#L440
The Media Type Object should have the attribute 'schema' defined
[MEDIUM] Response on operations that should not have a body has declared content (v3): tx-backend/openapi/traceability-foss-backend.json#L503
If a response is head or its code is 204 or 304, it shouldn't have a content defined
[INFO] Invalid Media Type Value (v3): tx-backend/openapi/traceability-foss-backend.json#L4572
The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]
[INFO] Operation Without Successful HTTP Status Code (v3): tx-backend/openapi/traceability-foss-backend.json#L2633
Operation Object should have at least one successful HTTP status code defined
[INFO] Shared Volumes Between Containers: tx-backend/docker/docker-compose.yml#L23
Volumes shared between containers can cause data corruption or can be used to share malicious files between containers.
[MEDIUM] Healthcheck Not Set: frontend/cypress/docker-compose.yml#L24
Check containers periodically to see if they are running properly.
[MEDIUM] Host Namespace is Shared: frontend/docker-compose.yml#L45
The hosts process namespace should not be shared by containers
[MEDIUM] Shared Host Network Namespace: frontend/cypress/docker-compose.yml#L35
Container should not share the host network namespace