Merge pull request #2 from nitin-vavdiya/feat/initial-contribution #1
nitin-vavdiyaAnnotations
1 error and 12 warnings
|
Analyze
KICS scan failed with exit code 50
|
|
Analyze
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, github/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
Analyze
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/
|
|
[HIGH] Privilege Escalation Allowed:
charts/ssi-dim-wallet-stub/templates/deployment.yaml#L42
Containers should not run with allowPrivilegeEscalation in order to prevent them from gaining more privileges than their parent process
|
|
[MEDIUM] Array Without Maximum Number of Items (v3):
docs/api/openAPI.json#L667
Array schema should have the field 'maxItems' set
|
|
[MEDIUM] Array Without Maximum Number of Items (v3):
docs/api/openAPI.json#L661
Array schema should have the field 'maxItems' set
|
|
[MEDIUM] Container Running As Root:
charts/ssi-dim-wallet-stub/templates/deployment.yaml#L42
Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise
|
|
[MEDIUM] Container Running With Low UID:
charts/ssi-dim-wallet-stub/templates/deployment.yaml#L42
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Global Server Object Uses HTTP:
docs/api/openAPI.json#L16
Global server object URL should use 'https' protocol instead of 'http'
|
|
[MEDIUM] Media Type Object Without Schema:
docs/api/openAPI.json#L402
The Media Type Object should have the attribute 'schema' defined
|
|
[MEDIUM] Media Type Object Without Schema:
docs/api/openAPI.json#L47
The Media Type Object should have the attribute 'schema' defined
|
|
[MEDIUM] Media Type Object Without Schema:
docs/api/openAPI.json#L509
The Media Type Object should have the attribute 'schema' defined
|
|
[MEDIUM] Media Type Object Without Schema:
docs/api/openAPI.json#L130
The Media Type Object should have the attribute 'schema' defined
|