Skip to content

KICS

KICS #741

Triggered via schedule January 17, 2025 00:09
Status Success
Total duration 49s
Artifacts

kics.yml

on: schedule
Fit to window
Zoom out
Zoom in

Annotations

1 error and 11 warnings
Analyze
CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/
Analyze
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
[MEDIUM] Container Running With Low UID: charts/bpndiscovery/templates/deployment.yaml#L38
Check if containers are running with low UID, which might cause conflicts with the host's user table.
[MEDIUM] Global Server Object Uses HTTP: backend/src/main/resources/static/bpn-discovery-service-openapi.yaml#L33
Global server object URL should use 'https' protocol instead of 'http'
[MEDIUM] NET_RAW Capabilities Not Being Dropped: charts/bpndiscovery/templates/deployment.yaml#L38
Containers should drop 'ALL' or at least 'NET_RAW' capabilities