Skip to content

Optimized permissions policy #109

Optimized permissions policy

Optimized permissions policy #109

Triggered via pull request July 23, 2024 07:12
Status Failure
Total duration 52s
Artifacts

cf-test.yml

on: pull_request
Validatation (cfn-lint)
25s
Validatation (cfn-lint)
Security Checks (checkov)
19s
Security Checks (checkov)
Security Checks (cfn-nag)
42s
Security Checks (cfn-nag)
Fit to window
Zoom out
Zoom in

Annotations

1 error and 6 warnings
Validatation (cfn-lint)
Process completed with exit code 4.
Security Checks (checkov)
The following actions uses Node.js version which is deprecated and will be forced to run on node20: actions/checkout@v3. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Validatation (cfn-lint)
The following actions uses Node.js version which is deprecated and will be forced to run on node20: actions/checkout@v3. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
Validatation (cfn-lint): aws-observability/templates/sumologic_observability.master.template.yaml#L539
W3011 Both UpdateReplacePolicy and DeletionPolicy are needed to protect Resources/LambdaRole from deletion
Validatation (cfn-lint): aws-observability/templates/sumologic_observability.master.template.yaml#L586
W3011 Both UpdateReplacePolicy and DeletionPolicy are needed to protect Resources/TelemetryLambda from deletion
Security Checks (cfn-nag)
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/checkout@v2. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
Security Checks (cfn-nag)
The following actions uses Node.js version which is deprecated and will be forced to run on node20: actions/checkout@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/