.github/workflows/security-scan.yml #40
ruvnetsecurity-scan.yml
on: schedule
Static Application Security Testing
2m 28s
Dependency Vulnerability Scan
2s
Container Security Scan
6m 57s
Infrastructure Security Scan
1m 48s
Secret Scanning
5s
License Compliance Scan
4s
Security Policy Compliance
4s
Security Report
3s
Annotations
28 errors and 12 warnings
|
Dependency Vulnerability Scan
This request has been automatically failed because it uses a deprecated version of `actions/upload-artifact: v3`. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/
|
|
License Compliance Scan
This request has been automatically failed because it uses a deprecated version of `actions/upload-artifact: v3`. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/
|
|
Security Policy Compliance
Process completed with exit code 1.
|
|
Secret Scanning
Process completed with exit code 1.
|
|
Secret Scanning
BASE and HEAD commits are the same. TruffleHog won't scan anything. Please see documentation (https://github.com/trufflesecurity/trufflehog#octocat-trufflehog-github-action).
|
|
Infrastructure Security Scan
KICS scan failed with exit code 50
|
|
Infrastructure Security Scan
CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/
|
|
Infrastructure Security Scan:
terraform/main.tf#L386
CKV_AWS_157: "Ensure that RDS instances have Multi-AZ enabled"
|
|
Infrastructure Security Scan:
terraform/main.tf#L386
CKV_AWS_226: "Ensure DB instance gets all minor upgrades automatically"
|
|
Infrastructure Security Scan:
terraform/main.tf#L236
CKV_AWS_39: "Ensure Amazon EKS public endpoint disabled"
|
|
Infrastructure Security Scan:
terraform/main.tf#L236
CKV_AWS_38: "Ensure Amazon EKS public endpoint not accessible to 0.0.0.0/0"
|
|
Infrastructure Security Scan:
terraform/main.tf#L219
CKV_AWS_23: "Ensure every security group and rule has a description"
|
|
Infrastructure Security Scan:
terraform/main.tf#L196
CKV_AWS_23: "Ensure every security group and rule has a description"
|
|
Infrastructure Security Scan:
terraform/main.tf#L196
CKV_AWS_382: "Ensure no security groups allow egress from 0.0.0.0:0 to port -1"
|
|
Infrastructure Security Scan:
terraform/main.tf#L180
CKV_AWS_23: "Ensure every security group and rule has a description"
|
|
Infrastructure Security Scan:
terraform/main.tf#L180
CKV_AWS_382: "Ensure no security groups allow egress from 0.0.0.0:0 to port -1"
|
|
Infrastructure Security Scan:
terraform/main.tf#L82
CKV_AWS_130: "Ensure VPC subnets do not assign public IP by default"
|
|
Static Application Security Testing
Path does not exist: semgrep.sarif
|
|
Static Application Security Testing
Path does not exist: bandit-results.sarif
|
|
Static Application Security Testing
CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/
|
|
Static Application Security Testing
Process completed with exit code 2.
|
|
Container Security Scan
Path does not exist: scout-results.sarif
|
|
Container Security Scan
could not authenticate: user githubactions not entitled to use Docker Scout
|
|
Container Security Scan
Input required and not supplied: sarif_file
|
|
Container Security Scan
Path does not exist: trivy-results.sarif
|
|
Container Security Scan
CodeQL Action major versions v1 and v2 have been deprecated. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2025-01-10-code-scanning-codeql-action-v2-is-now-deprecated/
|
|
Container Security Scan
Process completed with exit code 1.
|
|
Security Report
This request has been automatically failed because it uses a deprecated version of `actions/download-artifact: v3`. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/. This request has been automatically failed because it uses a deprecated version of `actions/upload-artifact: v3`. Learn more: https://github.blog/changelog/2024-04-16-deprecation-notice-v3-of-the-artifact-actions/
|
|
[HIGH] Passwords And Secrets - Generic Password:
docker-compose.yml#L101
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
.gitlab-ci.yml#L62
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
terraform/main.tf#L401
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
.github/workflows/ci.yml#L76
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
.gitlab-ci.yml#L97
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
docker-compose.yml#L46
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] KMS Key With Vulnerable Policy:
terraform/main.tf#L360
Checks if the policy is vulnerable and needs updating.
|
|
[HIGH] KMS Key With Vulnerable Policy:
terraform/main.tf#L423
Checks if the policy is vulnerable and needs updating.
|
|
[HIGH] KMS Key With Vulnerable Policy:
terraform/main.tf#L771
Checks if the policy is vulnerable and needs updating.
|
|
[HIGH] KMS Key With Vulnerable Policy:
terraform/main.tf#L563
Checks if the policy is vulnerable and needs updating.
|
|
Infrastructure Security Scan
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|
|
Infrastructure Security Scan
The `set-output` command is deprecated and will be disabled soon. Please upgrade to using Environment Files. For more information see: https://github.blog/changelog/2022-10-11-github-actions-deprecating-save-state-and-set-output-commands/
|