Assets Api changes to support bom lifecycles #571

Sign in to view logs

Triggered via pull request August 30, 2023 06:53

ds-mmaul

opened #275

catenax-ng:main

Status Success

Total duration 1m 51s

Artifacts –

kics.yml

on: pull_request

Analyze frontend

Analyze backend

Annotations

20 warnings

[MEDIUM] Healthcheck Not Set: frontend/cypress/docker-compose.yml#L24

Check containers periodically to see if they are running properly.

[MEDIUM] Host Namespace is Shared: frontend/docker-compose.yml#L45

The hosts process namespace should not be shared by containers

[MEDIUM] Host Namespace is Shared: frontend/cypress/docker-compose.yml#L24

The hosts process namespace should not be shared by containers

[MEDIUM] Last User Is 'root': frontend/cypress/Dockerfile#L32

Leaving the last user as root can cause security risks. Change to another user after running the commands the need privileges

[MEDIUM] Networks Not Set: frontend/cypress/docker-compose.yml#L24

Setting networks in services ensures you are not using dockers default bridge (docker0), which shares traffic bewteen all containers.

[MEDIUM] Shared Host Network Namespace: frontend/cypress/docker-compose.yml#L35

Container should not share the host network namespace

[LOW] Container Capabilities Unrestricted: frontend/cypress/docker-compose.yml#L24

Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.

[LOW] Container Capabilities Unrestricted: frontend/docker-compose.yml#L24

Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.

[LOW] Healthcheck Instruction Missing: frontend/cypress/Dockerfile#L30

Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

[LOW] Multiple RUN, ADD, COPY, Instructions Listed: frontend/Dockerfile#L69

Multiple commands (RUN, COPY, ADD) should be grouped in order to reduce the number of layers.

[MEDIUM] Default Response Undefined On Operations (v3): tx-backend/openapi/traceability-foss-backend.json#L113

Operations responses should have a default response defined

[MEDIUM] Default Response Undefined On Operations (v3): tx-backend/openapi/traceability-foss-backend.json#L1334

Operations responses should have a default response defined

[MEDIUM] Default Response Undefined On Operations (v3): tx-backend/openapi/traceability-foss-backend.json#L1221

Operations responses should have a default response defined

[MEDIUM] Default Response Undefined On Operations (v3): tx-backend/openapi/traceability-foss-backend.json#L2142

Operations responses should have a default response defined

[MEDIUM] Default Response Undefined On Operations (v3): tx-backend/openapi/traceability-foss-backend.json#L2694

Operations responses should have a default response defined

[MEDIUM] Default Response Undefined On Operations (v3): tx-backend/openapi/traceability-foss-backend.json#L2059

Operations responses should have a default response defined

[MEDIUM] Default Response Undefined On Operations (v3): tx-backend/openapi/traceability-foss-backend.json#L2655

Operations responses should have a default response defined

[MEDIUM] Default Response Undefined On Operations (v3): tx-backend/openapi/traceability-foss-backend.json#L908

Operations responses should have a default response defined

[MEDIUM] Default Response Undefined On Operations (v3): tx-backend/openapi/traceability-foss-backend.json#L809

Operations responses should have a default response defined

[MEDIUM] Default Response Undefined On Operations (v3): tx-backend/openapi/traceability-foss-backend.json#L2129

Operations responses should have a default response defined