Skip to content
KICS

Ci: Add Codeql and make trivy work for next containers #301

Sign in to view logs

Ci: Add Codeql and make trivy work for next containers

Ci: Add Codeql and make trivy work for next containers #301

Triggered via pull request November 17, 2023 16:58
@tom-rm-meyer-ISSTtom-rm-meyer-ISST
synchronize #90
FraunhoferISST:ci/security
Status Success
Total duration 1m 12s
Artifacts –
This run and associated checks have been archived and are scheduled for deletion. Learn more about checks retention

kics.yml

on: pull_request
Analyze
55s
Analyze
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
[MEDIUM] Container Running With Low UID: charts/puris/charts/frontend/templates/deployment.yaml#L1
Check if containers are running with low UID, which might cause conflicts with the host's user table.
[MEDIUM] Container Running With Low UID: charts/puris/charts/backend/templates/deployment.yaml#L1
Check if containers are running with low UID, which might cause conflicts with the host's user table.
[MEDIUM] Container Traffic Not Bound To Host Interface: frontend/docker-compose.yaml#L26
Incoming container traffic should be bound to a specific host interface
[MEDIUM] Container Traffic Not Bound To Host Interface: local/daps/docker-compose.yaml#L26
Incoming container traffic should be bound to a specific host interface
[MEDIUM] Container Traffic Not Bound To Host Interface: local/docker-compose.yaml#L45
Incoming container traffic should be bound to a specific host interface
[MEDIUM] Container Traffic Not Bound To Host Interface: backend/docker-compose.yaml#L26
Incoming container traffic should be bound to a specific host interface
[MEDIUM] Container Traffic Not Bound To Host Interface: local/docker-compose.yaml#L45
Incoming container traffic should be bound to a specific host interface
[MEDIUM] Container Traffic Not Bound To Host Interface: local/docker-compose.yaml#L240
Incoming container traffic should be bound to a specific host interface
[MEDIUM] Container Traffic Not Bound To Host Interface: local/docker-compose.yaml#L176
Incoming container traffic should be bound to a specific host interface
[MEDIUM] Container Traffic Not Bound To Host Interface: local/docker-compose.yaml#L176
Incoming container traffic should be bound to a specific host interface