[BE][FE][SECURITY] Kics

chore(deps): bump eclipse-temurin from 17-jre-alpine to 21-jre-alpine #1125

Sign in to view logs

Triggered via pull request March 18, 2024 13:54

dependabot[bot]

synchronize #675

dependabot/docker/eclipse-temurin-21-jre-alpine

Status Success

Total duration 1m 4s

Artifacts –

kics.yml

on: pull_request

Analyze frontend

Analyze backend

Annotations

13 warnings

[MEDIUM] Healthcheck Not Set: frontend/cypress/docker-compose.yml#L24

Check containers periodically to see if they are running properly.

[MEDIUM] Host Namespace is Shared: frontend/docker-compose.yml#L45

The hosts process namespace should not be shared by containers

[MEDIUM] Shared Host Network Namespace: frontend/cypress/docker-compose.yml#L35

Container should not share the host network namespace

[MEDIUM] Global Server Object Uses HTTP: tx-backend/openapi/traceability-foss-backend.json#L13

Global server object URL should use 'https' protocol instead of 'http'

[MEDIUM] Media Type Object Without Schema: tx-backend/openapi/traceability-foss-backend.json#L7768

The Media Type Object should have the attribute 'schema' defined

[MEDIUM] Media Type Object Without Schema: tx-backend/openapi/traceability-foss-backend.json#L1711

The Media Type Object should have the attribute 'schema' defined

[INFO] Invalid Media Type Value (v3): tx-backend/openapi/traceability-foss-backend.json#L7771

The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]

[INFO] Invalid Media Type Value (v3): tx-backend/openapi/traceability-foss-backend.json#L7773

The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]

[INFO] Invalid Media Type Value (v3): tx-backend/openapi/traceability-foss-backend.json#L7769

The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]

[INFO] Invalid Media Type Value (v3): tx-backend/openapi/traceability-foss-backend.json#L7770

The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]

[INFO] Invalid Media Type Value (v3): tx-backend/openapi/traceability-foss-backend.json#L7772

The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]

[INFO] Operation Without Successful HTTP Status Code (v3): tx-backend/openapi/traceability-foss-backend.json#L2792

Operation Object should have at least one successful HTTP status code defined

[INFO] Shared Volumes Between Containers: tx-backend/docker/docker-compose.yml#L23

Volumes shared between containers can cause data corruption or can be used to share malicious files between containers.