[BE][FE][SECURITY] Kics #135
bajaioanakics.yml
on: schedule
Analyze frontend
49s
Analyze backend
45s
Annotations
15 warnings
|
[MEDIUM] Global Server Object Uses HTTP:
tx-backend/openapi/traceability-foss-backend.json#L13
Global server object URL should use 'https' protocol instead of 'http'
|
|
[MEDIUM] Media Type Object Without Schema:
tx-backend/openapi/traceability-foss-backend.json#L6747
The Media Type Object should have the attribute 'schema' defined
|
|
[MEDIUM] Media Type Object Without Schema:
tx-backend/openapi/traceability-foss-backend.json#L1719
The Media Type Object should have the attribute 'schema' defined
|
|
[INFO] Invalid Media Type Value (v3):
tx-backend/openapi/traceability-foss-backend.json#L6751
The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]
|
|
[INFO] Invalid Media Type Value (v3):
tx-backend/openapi/traceability-foss-backend.json#L6752
The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]
|
|
[INFO] Invalid Media Type Value (v3):
tx-backend/openapi/traceability-foss-backend.json#L6748
The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]
|
|
[INFO] Invalid Media Type Value (v3):
tx-backend/openapi/traceability-foss-backend.json#L6750
The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]
|
|
[INFO] Invalid Media Type Value (v3):
tx-backend/openapi/traceability-foss-backend.json#L6749
The Media Type value should match the following format: <type>/<subtype>[+suffix][;parameters]
|
|
[INFO] Operation Without Successful HTTP Status Code (v3):
tx-backend/openapi/traceability-foss-backend.json#L723
Operation Object should have at least one successful HTTP status code defined
|
|
[INFO] Shared Volumes Between Containers:
tx-backend/docker/docker-compose.yml#L23
Volumes shared between containers can cause data corruption or can be used to share malicious files between containers.
|
|
[MEDIUM] Container Capabilities Unrestricted:
frontend/docker-compose.yml#L24
Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.
|
|
[MEDIUM] Container Capabilities Unrestricted:
frontend/cypress/docker-compose.yml#L24
Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.
|
|
[MEDIUM] Healthcheck Not Set:
frontend/cypress/docker-compose.yml#L24
Check containers periodically to see if they are running properly.
|
|
[MEDIUM] Host Namespace is Shared:
frontend/docker-compose.yml#L45
The hosts process namespace should not be shared by containers
|
|
[MEDIUM] Shared Host Network Namespace:
frontend/cypress/docker-compose.yml#L35
Container should not share the host network namespace
|