Skip to content

SPSH-1278 New password generation (#731) #21

SPSH-1278 New password generation (#731)

SPSH-1278 New password generation (#731) #21

Re-run triggered November 4, 2024 14:54
Status Success
Total duration 43s
Artifacts 1
scan_helm  /  Kics Helm Chart Scan
26s
scan_helm / Kics Helm Chart Scan
CodeQL  /  Analyze CodeQL
2m 11s
CodeQL / Analyze CodeQL
Linting  /  Nest Lint
1m 16s
Linting / Nest Lint
Tests and Sonarcloud  /  Tests and Sonarcloud
14m 37s
Tests and Sonarcloud / Tests and Sonarcloud
release_helm  /  release
32s
release_helm / release
Publish image and scan with trivy  /  Publish image
1m 23s
Publish image and scan with trivy / Publish image
Publish image and scan with trivy  /  pre_scan
0s
Publish image and scan with trivy / pre_scan
Publish image and scan with trivy  /  ...  /  Trivy Scan
32s
Publish image and scan with trivy / Trivy scan for uploaded image / Trivy Scan
Fit to window
Zoom out
Zoom in

Annotations

11 warnings
[MEDIUM] Container Running As Root: charts/dbildungs-iam-server/templates/redis-deployment.yaml#L22
Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise
[MEDIUM] Container Running With Low UID: charts/dbildungs-iam-server/templates/backend-deployment.yaml#L22
Check if containers are running with low UID, which might cause conflicts with the host's user table.
[MEDIUM] Container Running With Low UID: charts/dbildungs-iam-server/templates/backend-deployment.yaml#L22
Check if containers are running with low UID, which might cause conflicts with the host's user table.
[MEDIUM] Container Running With Low UID: charts/dbildungs-iam-server/templates/backend-deployment.yaml#L69
Check if containers are running with low UID, which might cause conflicts with the host's user table.
[MEDIUM] Container Running With Low UID: charts/dbildungs-iam-server/templates/backend-deployment.yaml#L22
Check if containers are running with low UID, which might cause conflicts with the host's user table.
[MEDIUM] Container Running With Low UID: charts/dbildungs-iam-server/templates/redis-deployment.yaml#L38
Check if containers are running with low UID, which might cause conflicts with the host's user table.
[MEDIUM] Container Running With Low UID: charts/dbildungs-iam-server/templates/redis-deployment.yaml#L34
Check if containers are running with low UID, which might cause conflicts with the host's user table.
[MEDIUM] NET_RAW Capabilities Not Being Dropped: charts/dbildungs-iam-server/templates/redis-deployment.yaml#L22
Containers should drop 'ALL' or at least 'NET_RAW' capabilities
[MEDIUM] Seccomp Profile Is Not Configured: charts/dbildungs-iam-server/templates/redis-deployment.yaml#L38
Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls
[MEDIUM] Service Account Token Automount Not Disabled: charts/dbildungs-iam-server/templates/redis-deployment.yaml#L20
Service Account Tokens are automatically mounted even if not necessary
release_helm / release
The following actions use a deprecated Node.js version and will be forced to run on node20: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/