Merge pull request #147 from githubabcs-devops/feature/added-tools-to… #238
CalinLAnnotations
12 warnings
|
Run KICS scan
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: github/codeql-action/upload-sarif@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Run KICS scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|
|
[MEDIUM] AKS RBAC Disabled:
terraform/azure/aks.tf#L23
Azure Container Service (AKS) instance should have role-based access control (RBAC) enabled
|
|
[MEDIUM] AKS Private Cluster Disabled:
terraform/azure/aks.tf#L1
Azure Kubernetes Service (AKS) API should not be exposed to the internet
|
|
[MEDIUM] AD Admin Not Configured For SQL Server:
terraform/azure/sql.tf#L9
The Active Directory Administrator is not configured for a SQL server
|
|
[HIGH] RDP Is Exposed To The Internet:
terraform/azure/networking.tf#L64
Port 3389 (Remote Desktop) is exposed to the internet
|
|
[HIGH] Passwords And Secrets - Generic Password:
terraform/azure/sql.tf#L41
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
terraform/azure/instance.tf#L36
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
terraform/azure/instance.tf#L11
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
terraform/azure/sql.tf#L15
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
terraform/azure/sql.tf#L64
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] MySQL Server Public Access Enabled:
terraform/azure/sql.tf#L50
MySQL Server public access should be disabled
|