Skip to content

updated README.md #1622

updated README.md

updated README.md #1622

Triggered via push February 5, 2025 12:38
Status Failure
Total duration 3m 30s
Artifacts

kics.yaml

on: push
Fit to window
Zoom out
Zoom in

Annotations

2 errors and 10 warnings
Kics / Kics Scan
KICS scan failed with exit code 50
Kics / Kics Scan
CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/
[HIGH] Container Is Privileged: vagrant-configs/kubernetes/calico.yaml#L3596
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
[HIGH] Container Is Privileged: vagrant-configs/kubernetes/calico.yaml#L3521
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
[HIGH] Container Is Privileged: vagrant-configs/kubernetes/calico.yaml#L3512
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
[HIGH] Container Is Privileged: vagrant-configs/kubernetes/calico.yaml#L3476
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
[HIGH] Non Kube System Pod With Host Mount: kubernetes-configs/jenkins/base/agent.statefulset-DooD.yaml#L231
A non kube-system workload should not have hostPath mounted
[HIGH] Non Kube System Pod With Host Mount: kubernetes-configs/jenkins/base/agent.cloud-pod-DooD.yaml#L123
A non kube-system workload should not have hostPath mounted
[HIGH] Passwords And Secrets - Generic Password: docker-compose/concourse.yml#L44
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: kubernetes-configs/sonarqube/base/values.yaml#L255
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: kubernetes-configs/jenkins/base/initial-admin-secret.patch.yaml#L34
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: kubernetes-configs/argocd/base/values.yaml#L218
Query to find passwords and secrets in infrastructure code.