[BE][FE][SECURITY] Kics

chore(deps): Bump mikefarah/yq from 4.40.2 to 4.40.3 #817

Sign in to view logs

Triggered via pull request November 28, 2023 08:32

dependabot[bot]

opened #367

dependabot/github_actions/mikefarah/yq-4.40.3

Status Success

Total duration 1m 14s

Artifacts –

kics.yml

on: pull_request

Analyze frontend

Analyze backend

Annotations

15 warnings

[MEDIUM] Healthcheck Not Set: frontend/cypress/docker-compose.yml#L24

Check containers periodically to see if they are running properly.

[MEDIUM] Host Namespace is Shared: frontend/cypress/docker-compose.yml#L24

The hosts process namespace should not be shared by containers

[MEDIUM] Host Namespace is Shared: frontend/docker-compose.yml#L45

The hosts process namespace should not be shared by containers

[MEDIUM] Networks Not Set: frontend/cypress/docker-compose.yml#L24

Setting networks in services ensures you are not using dockers default bridge (docker0), which shares traffic bewteen all containers.

[MEDIUM] Shared Host Network Namespace: frontend/cypress/docker-compose.yml#L35

Container should not share the host network namespace

[MEDIUM] Container Traffic Not Bound To Host Interface: tx-backend/docker/docker-compose.yml#L25

Incoming container traffic should be bound to a specific host interface

[MEDIUM] Global Server Object Uses HTTP: tx-backend/openapi/traceability-foss-backend.json#L13

Global server object URL should use 'https' protocol instead of 'http'

[MEDIUM] Healthcheck Not Set: tx-backend/docker/docker-compose.yml#L20

Check containers periodically to see if they are running properly.

[MEDIUM] Host Namespace is Shared: tx-backend/docker/docker-compose.yml#L20

The hosts process namespace should not be shared by containers

[MEDIUM] Media Type Object Without Schema: tx-backend/openapi/traceability-foss-backend.json#L435

The Media Type Object should have the attribute 'schema' defined

[MEDIUM] Response on operations that should have a body has undefined schema (v3): tx-backend/openapi/traceability-foss-backend.json#L1415

If a response is not head or its code is not 204 or 304, it should have a schema defined

[MEDIUM] Response on operations that should have a body has undefined schema (v3): tx-backend/openapi/traceability-foss-backend.json#L2200

If a response is not head or its code is not 204 or 304, it should have a schema defined

[MEDIUM] Response on operations that should have a body has undefined schema (v3): tx-backend/openapi/traceability-foss-backend.json#L546

If a response is not head or its code is not 204 or 304, it should have a schema defined

[MEDIUM] Response on operations that should have a body has undefined schema (v3): tx-backend/openapi/traceability-foss-backend.json#L1628

If a response is not head or its code is not 204 or 304, it should have a schema defined

[MEDIUM] Response on operations that should have a body has undefined schema (v3): tx-backend/openapi/traceability-foss-backend.json#L2087

If a response is not head or its code is not 204 or 304, it should have a schema defined