Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature/my awesome change #62

Closed
wants to merge 10 commits into from
Closed

Conversation

hmmachadocx
Copy link
Owner

No description provided.

@hmmachadocx
Copy link
Owner Author

hmmachadocx commented Dec 5, 2023

Logo
Checkmarx One – Scan Summary & Details90885fb5-3fc1-4110-b17c-1639286e6a8d

Policy Management Violations

Policy Name Rule(s) Break Build
11/1 Test false
Poli-Aging-PAT false
Policy Management Test false
jjj false

New Issues

Severity Issue Source File / Package Checkmarx Insight
HIGH Missing User Instruction /Dockerfile: 2 A user should be specified in the dockerfile, otherwise the image will run as root
MEDIUM Image Version Using 'latest' /Dockerfile: 2 When building images, always tag them with useful tags which codify version information, intended destination (prod or test, for instance), stabili...
MEDIUM Unpinned Actions Full Length Commit SHA /main.yml: 11 Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
LOW Healthcheck Instruction Missing /Dockerfile: 2 Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

Fixed Issues

Severity Issue Source File / Package
MEDIUM Unpinned Package Version in Apk Add /Dockerfile: 6
LOW Healthcheck Instruction Missing /Dockerfile: 3

@hmmachadocx hmmachadocx closed this Dec 7, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants