Security Scan

Merge pull request #10 from swisstxt/fix/checkout-leak #54

Annotations

10 errors and 2 warnings

CKV_AWS_55: "Ensure S3 bucket has ignore public ACLs enabled"

CKV_AWS_53: "Ensure S3 bucket has block public ACLS enabled"

CKV_AWS_54: "Ensure S3 bucket has block public policy enabled"

CKV_AWS_56: "Ensure S3 bucket has 'restrict_public_buckets' enabled"

CKV2_AWS_62: "Ensure S3 buckets should have event notifications enabled"

CKV_AWS_145: "Ensure that S3 buckets are encrypted with KMS by default"

CKV2_AWS_6: "Ensure that S3 bucket has a Public Access block"

CKV_AWS_144: "Ensure that S3 bucket has cross-region replication enabled"

CKV2_AWS_61: "Ensure that an S3 bucket has a lifecycle configuration"

CKV_AWS_21: "Ensure all data stored in the S3 bucket have versioning enabled"

The following actions use a deprecated Node.js version and will be forced to run on node20: github/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/