KICS #145
nitin-vavdiyaAnnotations
1 error and 11 warnings
|
Analyze
CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/
|
|
Analyze
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
[MEDIUM] Array Without Maximum Number of Items (v3):
docs/api/openAPI.json#L676
Array schema should have the field 'maxItems' set
|
|
[MEDIUM] Array Without Maximum Number of Items (v3):
docs/api/openAPI.json#L682
Array schema should have the field 'maxItems' set
|
|
[MEDIUM] Container Running As Root:
charts/ssi-dim-wallet-stub/templates/deployment.yaml#L42
Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise
|
|
[MEDIUM] Container Running With Low UID:
charts/ssi-dim-wallet-stub/templates/deployment.yaml#L42
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Global Server Object Uses HTTP:
docs/api/openAPI.json#L16
Global server object URL should use 'https' protocol instead of 'http'
|
|
[MEDIUM] Media Type Object Without Schema:
docs/api/openAPI.json#L269
The Media Type Object should have the attribute 'schema' defined
|
|
[MEDIUM] Media Type Object Without Schema:
docs/api/openAPI.json#L458
The Media Type Object should have the attribute 'schema' defined
|
|
[MEDIUM] Media Type Object Without Schema:
docs/api/openAPI.json#L524
The Media Type Object should have the attribute 'schema' defined
|
|
[MEDIUM] Media Type Object Without Schema:
docs/api/openAPI.json#L130
The Media Type Object should have the attribute 'schema' defined
|
|
[MEDIUM] Media Type Object Without Schema:
docs/api/openAPI.json#L203
The Media Type Object should have the attribute 'schema' defined
|