Skip to content
[BE][FE][SECURITY] Kics

Switching to CodeQL & Dependabot #1021

Sign in to view logs

Switching to CodeQL & Dependabot

Switching to CodeQL & Dependabot #1021

Triggered via pull request February 14, 2024 21:37
@scherersebastianscherersebastian
synchronize #654
ci/security-tooling
Status Success
Total duration 1m 0s
Artifacts –

kics.yml

on: pull_request
Analyze frontend
51s
Analyze frontend
Analyze backend
43s
Analyze backend
Fit to window
Zoom out
Zoom in

Annotations

14 warnings
[MEDIUM] Global Server Object Uses HTTP: tx-backend/openapi/traceability-foss-backend.json#L13
Global server object URL should use 'https' protocol instead of 'http'
[MEDIUM] Media Type Object Without Schema: tx-backend/openapi/traceability-foss-backend.json#L1432
The Media Type Object should have the attribute 'schema' defined
[MEDIUM] Media Type Object Without Schema: tx-backend/openapi/traceability-foss-backend.json#L1548
The Media Type Object should have the attribute 'schema' defined
[MEDIUM] Media Type Object Without Schema: tx-backend/openapi/traceability-foss-backend.json#L411
The Media Type Object should have the attribute 'schema' defined
[MEDIUM] Media Type Object Without Schema: tx-backend/openapi/traceability-foss-backend.json#L544
The Media Type Object should have the attribute 'schema' defined
[MEDIUM] Response on operations that should not have a body has declared content (v3): tx-backend/openapi/traceability-foss-backend.json#L550
If a response is head or its code is 204 or 304, it shouldn't have a content defined
[INFO] Invalid Media Type Value (v3): tx-backend/openapi/traceability-foss-backend.json#L3850
The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]
[INFO] Operation Without Successful HTTP Status Code (v3): tx-backend/openapi/traceability-foss-backend.json#L2146
Operation Object should have at least one successful HTTP status code defined
[INFO] Unknown Prefix (v3): tx-backend/openapi/traceability-foss-backend.json#L3850
The media type prefix should be set as 'application', 'audio', 'font', 'example', 'image', 'message', 'model', 'multipart', 'text' or 'video'
[MEDIUM] Healthcheck Not Set: frontend/cypress/docker-compose.yml#L24
Check containers periodically to see if they are running properly.
[MEDIUM] Host Namespace is Shared: frontend/cypress/docker-compose.yml#L24
The hosts process namespace should not be shared by containers
[MEDIUM] Host Namespace is Shared: frontend/docker-compose.yml#L45
The hosts process namespace should not be shared by containers
[MEDIUM] Networks Not Set: frontend/cypress/docker-compose.yml#L24
Setting networks in services ensures you are not using dockers default bridge (docker0), which shares traffic bewteen all containers.
[MEDIUM] Shared Host Network Namespace: frontend/cypress/docker-compose.yml#L35
Container should not share the host network namespace