1.0.54 Add Hadolint Scan Action #7
webpwnizedscan-dockerfiles-with-kics.yml
on: push
KICS Github Action
1m 26s
Annotations
1 error and 10 warnings
|
KICS Github Action
KICS scan failed with exit code 50
|
|
KICS Github Action
Unexpected input(s) 'continue-on-error', valid inputs are ['entryPoint', 'args', 'token', 'enable_annotations', 'enable_comments', 'enable_jobs_summary', 'comments_with_queries', 'excluded_column_for_comments_with_queries', 'path', 'ignore_on_exit', 'fail_on', 'timeout', 'profiling', 'config_path', 'platform_type', 'exclude_paths', 'exclude_queries', 'exclude_categories', 'exclude_results', 'exclude_severities', 'exclude_gitignore', 'output_formats', 'output_path', 'payload_path', 'queries', 'secrets_regexes_path', 'libraries_path', 'disable_full_descriptions', 'disable_secrets', 'type', 'verbose', 'include_queries', 'bom', 'cloud_provider']
|
|
[HIGH] Missing User Instruction:
ldap/Dockerfile#L8
A user should be specified in the dockerfile, otherwise the image will run as root
|
|
[HIGH] Missing User Instruction:
www/Dockerfile#L5
A user should be specified in the dockerfile, otherwise the image will run as root
|
|
[HIGH] Missing User Instruction:
database/Dockerfile#L4
A user should be specified in the dockerfile, otherwise the image will run as root
|
|
[HIGH] Missing User Instruction:
database_admin/Dockerfile#L5
A user should be specified in the dockerfile, otherwise the image will run as root
|
|
[HIGH] Missing User Instruction:
ldap_admin/Dockerfile#L5
A user should be specified in the dockerfile, otherwise the image will run as root
|
|
[HIGH] Passwords And Secrets - Generic Password:
www/Dockerfile#L10
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
database_admin/Dockerfile#L11
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
database/Dockerfile#L7
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
database_admin/Dockerfile#L13
Query to find passwords and secrets in infrastructure code.
|