Skip to content

Merge pull request #18 from FraunhoferISST/ci/docker #50

Merge pull request #18 from FraunhoferISST/ci/docker

Merge pull request #18 from FraunhoferISST/ci/docker #50

Triggered via push August 18, 2023 13:14
Status Success
Total duration 1m 5s
Artifacts

kics.yml

on: push
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
[MEDIUM] Container Traffic Not Bound To Host Interface: frontend/docker-compose.yaml#L26
Incoming container traffic should be bound to a specific host interface
[MEDIUM] Container Traffic Not Bound To Host Interface: backend/docker-compose.yaml#L26
Incoming container traffic should be bound to a specific host interface
[MEDIUM] Healthcheck Not Set: backend/docker-compose.yaml#L23
Check containers periodically to see if they are running properly.
[MEDIUM] Healthcheck Not Set: frontend/docker-compose.yaml#L23
Check containers periodically to see if they are running properly.
[MEDIUM] Host Namespace is Shared: backend/docker-compose.yaml#L23
The hosts process namespace should not be shared by containers
[MEDIUM] Host Namespace is Shared: frontend/docker-compose.yaml#L23
The hosts process namespace should not be shared by containers
[MEDIUM] Memory Not Limited: backend/docker-compose.yaml#L23
Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than the designated amount of memory
[MEDIUM] Memory Not Limited: frontend/docker-compose.yaml#L23
Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than the designated amount of memory
[MEDIUM] NPM Install Command Without Pinned Version: frontend/Dockerfile#L38
Check if packages installed by npm are pinning a specific version.
[MEDIUM] Networks Not Set: backend/docker-compose.yaml#L23
Setting networks in services ensures you are not using dockers default bridge (docker0), which shares traffic bewteen all containers.