[BE][FE][SECURITY] Kics

[BE][FE][SECURITY] Kics #1145

Sign in to view logs

Triggered via schedule March 24, 2024 00:21

mkanal

main

Status Success

Total duration 1m 5s

Artifacts –

kics.yml

on: schedule

Analyze frontend

Analyze backend

Annotations

13 warnings

[MEDIUM] Global Server Object Uses HTTP: tx-backend/openapi/traceability-foss-backend.json#L13

Global server object URL should use 'https' protocol instead of 'http'

[MEDIUM] Media Type Object Without Schema: tx-backend/openapi/traceability-foss-backend.json#L7753

The Media Type Object should have the attribute 'schema' defined

[MEDIUM] Media Type Object Without Schema: tx-backend/openapi/traceability-foss-backend.json#L1718

The Media Type Object should have the attribute 'schema' defined

[INFO] Invalid Media Type Value (v3): tx-backend/openapi/traceability-foss-backend.json#L7754

The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]

[INFO] Invalid Media Type Value (v3): tx-backend/openapi/traceability-foss-backend.json#L7756

The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]

[INFO] Invalid Media Type Value (v3): tx-backend/openapi/traceability-foss-backend.json#L7758

The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]

[INFO] Invalid Media Type Value (v3): tx-backend/openapi/traceability-foss-backend.json#L7757

The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]

[INFO] Invalid Media Type Value (v3): tx-backend/openapi/traceability-foss-backend.json#L7755

The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]

[INFO] Operation Without Successful HTTP Status Code (v3): tx-backend/openapi/traceability-foss-backend.json#L2786

Operation Object should have at least one successful HTTP status code defined

[INFO] Shared Volumes Between Containers: tx-backend/docker/docker-compose.yml#L23

Volumes shared between containers can cause data corruption or can be used to share malicious files between containers.

[MEDIUM] Healthcheck Not Set: frontend/cypress/docker-compose.yml#L24

Check containers periodically to see if they are running properly.

[MEDIUM] Host Namespace is Shared: frontend/docker-compose.yml#L45

The hosts process namespace should not be shared by containers

[MEDIUM] Shared Host Network Namespace: frontend/cypress/docker-compose.yml#L35

Container should not share the host network namespace