KICS security and vulnerability scanner

feat: add e2e setup workflow #45

Sign in to view logs

Triggered via push June 27, 2024 12:54

main

Status Success

Total duration 55s

Artifacts 1

kics.yml

on: push

Annotations

46 warnings and 1 notice

[MEDIUM] Container Running With Low UID: .github/configs/deploy.yaml#L499

Check if containers are running with low UID, which might cause conflicts with the host's user table.

[MEDIUM] Memory Limits Not Defined: .github/configs/deploy.yaml#L611

Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than the designated amount of memory

[MEDIUM] Memory Limits Not Defined: .github/configs/deploy.yaml#L558

Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than the designated amount of memory

[MEDIUM] Memory Limits Not Defined: .github/configs/deploy.yaml#L463

Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than the designated amount of memory

[MEDIUM] Memory Requests Not Defined: .github/configs/deploy.yaml#L558

Memory requests should be defined for each container. This allows the kubelet to reserve the requested amount of system resources and prevents over-provisioning on individual nodes

[MEDIUM] Memory Requests Not Defined: .github/configs/deploy.yaml#L611

Memory requests should be defined for each container. This allows the kubelet to reserve the requested amount of system resources and prevents over-provisioning on individual nodes

[MEDIUM] RBAC Roles with Read Secrets Permissions: .github/configs/deploy.yaml#L59

Roles and ClusterRoles with get/watch/list RBAC permissions on Kubernetes secrets are dangerous and should be avoided. In case of compromise, attackers could abuse these roles to access sensitive data, such as passwords, tokens and keys

[MEDIUM] RBAC Roles with Read Secrets Permissions: .github/configs/deploy.yaml#L163

Roles and ClusterRoles with get/watch/list RBAC permissions on Kubernetes secrets are dangerous and should be avoided. In case of compromise, attackers could abuse these roles to access sensitive data, such as passwords, tokens and keys

[MEDIUM] RBAC Roles with Read Secrets Permissions: .github/configs/deploy.yaml#L140

Roles and ClusterRoles with get/watch/list RBAC permissions on Kubernetes secrets are dangerous and should be avoided. In case of compromise, attackers could abuse these roles to access sensitive data, such as passwords, tokens and keys

[MEDIUM] Service Account Token Automount Not Disabled: .github/configs/deploy.yaml#L595

Service Account Tokens are automatically mounted even if not necessary

SingleLevelBomAsBuilt Version Compatibility (Integration Tests for Aspect Version Compatibility #529) failed: Integration Tests for Aspect Version Compatibility #529#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 1s]

SingleLevelBomAsPlanned Version Compatibility (Integration Tests for Aspect Version Compatibility #529) failed: Integration Tests for Aspect Version Compatibility #529#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

SingleLevelUsageAsBuilt Version Compatibility (Integration Tests for Aspect Version Compatibility #529) failed: Integration Tests for Aspect Version Compatibility #529#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

SingleLevelUsageAsPlanned Version Compatibility (Integration Tests for Aspect Version Compatibility #529) failed: Integration Tests for Aspect Version Compatibility #529#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

BomLifecycle 'asBuilt' for testing "JustInSequencePart-Model [BPNL00000000BJTL] (IRS support for different aspect models) failed: IRS support for different aspect models#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

BomLifecycle 'asBuilt' for testing "Batch"-Model [BPNL00000003B5MJ] (IRS support for different aspect models) failed: IRS support for different aspect models#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

End 2 End for aspects "3.0.0#SingleLevelBomAsBuilt" (IRS support for different aspect models) failed: IRS support for different aspect models#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

End 2 End for aspects "3.0.0#SingleLevelBomAsPlanned", "2.0.0#PartAsPlanned" (IRS support for different aspect models) failed: IRS support for different aspect models#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

End 2 End for aspects "3.0.0#Batch" with "1.0.0#PartSiteInformationAsBuilt" (IRS support for different aspect models) failed: IRS support for different aspect models#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

End 2 End for aspects "3.0.0#JustInSequencePart", "3.0.0#SerialPart" with "1.0.0#PartSiteInformationAsBuilt" (IRS support for different aspect models) failed: IRS support for different aspect models#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

End 2 End for aspect "MaterialForRecycling" (IRS support for different aspect models) failed: IRS support for different aspect models#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Check correct job executions of batch processing (SingleLevelBomAsBuilt/SerialPart 3.0.0) (IRS Batch Processing) failed: IRS Batch Processing#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

End 2 End for upward direction and SingleLevelUsageAsBuilt (SingleLevelUsageAsBuilt) failed: SingleLevelUsageAsBuilt#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Tombstone for not found GlobalAssetId (SingleLevelUsageAsBuilt) failed: SingleLevelUsageAsBuilt#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

End 2 End for aspect "TractionBatteryCode" (SingleLevelUsageAsBuilt) failed: SingleLevelUsageAsBuilt#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

End 2 End for OEM-B (MB) [BPN:BPNL00000003AVTH] (SerialPart 3.0.0, SingleLevelBomAsBuilt 3.0.0 , Batch 3.0.0) (SingleLevelUsageAsBuilt) failed: SingleLevelUsageAsBuilt#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

End 2 End for Tier A (ZF) [BPN:BPNL00000003B2OM] (SerialPart 3.0.0, SingleLevelBomAsBuilt 3.0.0 , Batch 3.0.0) (SingleLevelUsageAsBuilt) failed: SingleLevelUsageAsBuilt#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

End 2 End for BomLifecycle 'asPlanned' Vehicle Model C for SAP [BPNL00000003AZQP] (BomLifecycle 'asPlanned' implementation) failed: BomLifecycle 'asPlanned' implementation#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

End 2 End for BomLifecycle 'asPlanned' Vehicle Model B for MercedesBenz [BPNL00000003AVTH] (BomLifecycle 'asPlanned' implementation) failed: BomLifecycle 'asPlanned' implementation#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

End 2 End for BomLifecycle 'asPlanned' Vehicle Model A for BMW [BPNL00000003AYRE] (BomLifecycle 'asPlanned' implementation) failed: BomLifecycle 'asPlanned' implementation#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Delete policy for BPN (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Trying to register a policy without payload should fail (bad case) (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Try to update policy with invalid policyId (bad case) (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Try to delete policy with invalid policyId (bad case) (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Registering a duplicate policy for same BPNL fails (bad case) (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Try to register policy with invalid policyId (bad case) (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Updating policy for invalid BPNL (bad case) (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Registering policy for invalid BPNL (bad case) (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Fetching policies by BPNLs should fail for invalid BPNLs (bad case) (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Register policy without validUntil (bad case) (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Delete some policies (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Add policyId to given BPNs (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Add BPN to policy (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Update a policy validUntil date for a policy that is associated to multiple BPNs (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Update a policy validUntil date (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

Policy Store API: Register policies (IRS Policy Store) failed: IRS Policy Store#L0

irs-cucumber-tests/target/cucumber-junit-report.xml [took 0s]

36 tests found

There are 36 tests, see "Raw output" for the full list of tests.

Artifacts

Produced during runtime

Name	Size
kicsResults.json Expired	10.1 KB