chore: synced file(s) with cds-snc/site-reliability-engineering #7897

Annotations

10 errors and 2 warnings

CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"

CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"

CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"

CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"

CKV_AWS_233: "Ensure Create before destroy for ACM certificates"

CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"

CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"

The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@f43a0e5ff2bd294095638e18286ca9a3d1956744, github/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/