Added revoked notification handling concept #980
kics.yml
on: pull_request
Analyze frontend
47s
Analyze backend
50s
Annotations
15 warnings
[MEDIUM] Healthcheck Not Set:
frontend/cypress/docker-compose.yml#L24
Check containers periodically to see if they are running properly.
|
[MEDIUM] Host Namespace is Shared:
frontend/cypress/docker-compose.yml#L24
The hosts process namespace should not be shared by containers
|
[MEDIUM] Host Namespace is Shared:
frontend/docker-compose.yml#L45
The hosts process namespace should not be shared by containers
|
[MEDIUM] Networks Not Set:
frontend/cypress/docker-compose.yml#L24
Setting networks in services ensures you are not using dockers default bridge (docker0), which shares traffic bewteen all containers.
|
[MEDIUM] Shared Host Network Namespace:
frontend/cypress/docker-compose.yml#L35
Container should not share the host network namespace
|
[MEDIUM] Global Server Object Uses HTTP:
tx-backend/openapi/traceability-foss-backend.json#L13
Global server object URL should use 'https' protocol instead of 'http'
|
[MEDIUM] Media Type Object Without Schema:
tx-backend/openapi/traceability-foss-backend.json#L1552
The Media Type Object should have the attribute 'schema' defined
|
[MEDIUM] Media Type Object Without Schema:
tx-backend/openapi/traceability-foss-backend.json#L1436
The Media Type Object should have the attribute 'schema' defined
|
[MEDIUM] Media Type Object Without Schema:
tx-backend/openapi/traceability-foss-backend.json#L401
The Media Type Object should have the attribute 'schema' defined
|
[MEDIUM] Response Code Missing (v3):
tx-backend/openapi/traceability-foss-backend.json#L3905
500, 429 and 400 responses should be defined for all operations, except head operation. 415 response should be defined for the post, put, and patch operations. 404 response should be defined for the get, put, head, delete operations. 200 response should be defined for options operation. 401 and 403 response should be defined for all operations when the security field is defined.
|
[MEDIUM] Response Code Missing (v3):
tx-backend/openapi/traceability-foss-backend.json#L3905
500, 429 and 400 responses should be defined for all operations, except head operation. 415 response should be defined for the post, put, and patch operations. 404 response should be defined for the get, put, head, delete operations. 200 response should be defined for options operation. 401 and 403 response should be defined for all operations when the security field is defined.
|
[MEDIUM] Response Code Missing (v3):
tx-backend/openapi/traceability-foss-backend.json#L3905
500, 429 and 400 responses should be defined for all operations, except head operation. 415 response should be defined for the post, put, and patch operations. 404 response should be defined for the get, put, head, delete operations. 200 response should be defined for options operation. 401 and 403 response should be defined for all operations when the security field is defined.
|
[MEDIUM] Response Code Missing (v3):
tx-backend/openapi/traceability-foss-backend.json#L3905
500, 429 and 400 responses should be defined for all operations, except head operation. 415 response should be defined for the post, put, and patch operations. 404 response should be defined for the get, put, head, delete operations. 200 response should be defined for options operation. 401 and 403 response should be defined for all operations when the security field is defined.
|
[MEDIUM] Response Code Missing (v3):
tx-backend/openapi/traceability-foss-backend.json#L3905
500, 429 and 400 responses should be defined for all operations, except head operation. 415 response should be defined for the post, put, and patch operations. 404 response should be defined for the get, put, head, delete operations. 200 response should be defined for options operation. 401 and 403 response should be defined for all operations when the security field is defined.
|
[MEDIUM] Response Code Missing (v3):
tx-backend/openapi/traceability-foss-backend.json#L3905
500, 429 and 400 responses should be defined for all operations, except head operation. 415 response should be defined for the post, put, and patch operations. 404 response should be defined for the get, put, head, delete operations. 200 response should be defined for options operation. 401 and 403 response should be defined for all operations when the security field is defined.
|