Refactor Person-Permissions #4356
casparneumann-cap
branch_meta
/
branch_meta
0s
create_branch_identifier_for_deletion
/
convert_branch_name
CodeQL
/
Analyze CodeQL
1m 35s
Linting
/
Nest Lint
1m 8s
Tests and Sonarcloud
/
Tests and Sonarcloud
6m 53s
scan_helm
/
Kics Helm Chart Scan
28s
Scheduled trivy scan of latest image
/
Trivy Scan
delete_namespace
/
create_keycloak_db_name
delete_namespace
/
create_spsh_app_db_name
delete_namespace
/
create_ticket_nr_variable
select_helm_version_generation_and_image_tag_generation
0s
delete_successful
0s
Publish image and scan with trivy
/
...
/
Trivy Scan
deploy
/
create_dbildungs_iam_keycloak_db_name
deploy
/
create_dbildungs_iam_server_db_name
deploy
/
...
/
search_for_helm_tagname
deploy
/
...
/
search_for_helm_tagname
deploy
/
...
/
search_for_helm_tagname
deploy
/
...
/
search_for_helm_tagname
deploy
/
...
/
run_playwright_end2end_tests
Annotations
2 errors and 13 warnings
|
Linting / Nest Lint
Process completed with exit code 1.
|
|
Tests and Sonarcloud / Tests and Sonarcloud
Process completed with exit code 1.
|
|
[MEDIUM] Container Running As Root:
charts/dbildungs-iam-server/templates/ldap-deployment.yaml#L21
Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise
|
|
[MEDIUM] Container Running As Root:
charts/dbildungs-iam-server/templates/redis-deployment.yaml#L22
Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise
|
|
[MEDIUM] Container Running With Low UID:
charts/dbildungs-iam-server/templates/ldap-deployment.yaml#L21
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Container Running With Low UID:
charts/dbildungs-iam-server/templates/backend-deployment.yaml#L23
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Container Running With Low UID:
charts/dbildungs-iam-server/templates/backend-deployment.yaml#L23
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Container Running With Low UID:
charts/dbildungs-iam-server/templates/redis-deployment.yaml#L34
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Container Running With Low UID:
charts/dbildungs-iam-server/templates/redis-deployment.yaml#L38
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Container Running With Low UID:
charts/dbildungs-iam-server/templates/backend-deployment.yaml#L23
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Container Running With Low UID:
charts/dbildungs-iam-server/templates/backend-deployment.yaml#L78
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] NET_RAW Capabilities Not Being Dropped:
charts/dbildungs-iam-server/templates/redis-deployment.yaml#L22
Containers should drop 'ALL' or at least 'NET_RAW' capabilities
|
|
release_helm / release
The following actions uses Node.js version which is deprecated and will be forced to run on node20: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
|
|
|