feat: Token service #321

Sign in to view logs

Summary
Jobs
- Analyze
Run details
- Usage
- Workflow file

Triggered via pull request December 6, 2023 16:10

m-gora

synchronize #179

m-gora:token-service

Status Failure

Total duration 1m 31s

Artifacts –

kics.yml

on: pull_request

Annotations

1 error and 10 warnings

KICS scan failed with exit code 50

[HIGH] Array Without Maximum Number of Items (v3): docs/secure-token-service-openapi.yml#L70

Array schema should have the field 'maxItems' set

[HIGH] Field 'securityScheme' On Components Is Undefined: docs/secure-token-service-openapi.yml#L76

Components' securityScheme field must have a valid scheme

[HIGH] Global Security Field Is Undefined (v3): docs/secure-token-service-openapi.yml#L1

Global security field should be defined to prevent API to have insecure paths and have this rules defined on securitySchemes

[HIGH] No Global And Operation Security Defined (v3): docs/secure-token-service-openapi.yml#L9

All paths should have security scheme, if it is omitted, global security field should be defined

[MEDIUM] Additional Properties Too Permissive: docs/openapi_v001.json#L1350

Objects should not accept 'additionalProperties' if it is possible

[MEDIUM] Additional Properties Too Permissive: docs/openapi_v001.json#L154

Objects should not accept 'additionalProperties' if it is possible

[MEDIUM] Additional Properties Too Permissive: docs/openapi_v001.json#L2102

Objects should not accept 'additionalProperties' if it is possible

[MEDIUM] Additional Properties Too Permissive: docs/secure-token-service-openapi.yml#L29

Objects should not accept 'additionalProperties' if it is possible

[MEDIUM] Additional Properties Too Permissive: docs/openapi_v001.json#L1924

Objects should not accept 'additionalProperties' if it is possible

[MEDIUM] Additional Properties Too Permissive: docs/openapi_v001.json#L1138

Objects should not accept 'additionalProperties' if it is possible