Skip to content

Add exception to KICS for http in non-security scenario #27

Add exception to KICS for http in non-security scenario

Add exception to KICS for http in non-security scenario #27

Triggered via pull request November 6, 2024 15:56
Status Success
Total duration 1m 2s
Artifacts

kics.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
[HIGH] Passwords And Secrets - Generic Password: molecule/elasticsearch_test_modules/converge.yml#L53
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: molecule/elasticstack_default/converge.yml#L21
Query to find passwords and secrets in infrastructure code.
[MEDIUM] Communication Over HTTP: roles/elasticsearch/tasks/main.yml#L276
Using HTTP URLs (without encryption) could lead to security vulnerabilities and risks
[LOW] Unpinned Package Version: roles/beats/tasks/filebeat.yml#L44
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
[LOW] Unpinned Package Version: roles/beats/tasks/metricbeat.yml#L59
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
[LOW] Unpinned Package Version: molecule/elasticstack_default/prepare.yml#L49
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
[LOW] Unpinned Package Version: roles/beats/tasks/metricbeat.yml#L45
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
[LOW] Unpinned Package Version: roles/beats/tasks/filebeat.yml#L70
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
[LOW] Unpinned Package Version: roles/beats/tasks/auditbeat.yml#L71
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
[LOW] Unpinned Package Version: roles/beats/tasks/filebeat.yml#L58
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service