Skip to content
Scan Dockerfile with KICS

1.0.63 Update Hadolint Scan Action #70

Sign in to view logs

1.0.63 Update Hadolint Scan Action

1.0.63 Update Hadolint Scan Action #70

Triggered via push May 16, 2024 00:44
@webpwnizedwebpwnized
pushed 4ac44cb
development
Status Success
Total duration 32s
Artifacts –

scan-dockerfiles-with-kics.yml

on: push
KICS Github Action
25s
KICS Github Action
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
[HIGH] Missing User Instruction: .build/database_admin/Dockerfile#L18
A user should be specified in the dockerfile, otherwise the image will run as root
[HIGH] Missing User Instruction: .build/ldap/Dockerfile#L21
A user should be specified in the dockerfile, otherwise the image will run as root
[HIGH] Missing User Instruction: .build/ldap_admin/Dockerfile#L18
A user should be specified in the dockerfile, otherwise the image will run as root
[HIGH] Missing User Instruction: .build/www/Dockerfile#L18
A user should be specified in the dockerfile, otherwise the image will run as root
[HIGH] Missing User Instruction: .build/database/Dockerfile#L17
A user should be specified in the dockerfile, otherwise the image will run as root
[HIGH] Passwords And Secrets - Generic Password: .build/database/Dockerfile#L20
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: .build/database_admin/Dockerfile#L24
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: .build/database_admin/Dockerfile#L26
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: .build/ldap/Dockerfile#L27
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: .build/ldap/Dockerfile#L28
Query to find passwords and secrets in infrastructure code.