Create checkmarx.yaml #62
Conversation
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
.github/workflows/checkmarx.yaml
Outdated
| @@ -0,0 +1,36 @@ | |||
| name: build | |||
There was a problem hiding this comment.
⚠️ Aqua detected misconfiguration in your code
Misconfiguration ID: AVD-PIPELINE-0020
Check Name: Ensure scanners are in place to identify and prevent sensitive data in pipeline files
Severity: HIGH
Message: No secrets scanning tool is used in pipeline
[This comment was created by Aqua Pipeline]
.github/workflows/checkmarx.yaml
Outdated
| @@ -0,0 +1,36 @@ | |||
| name: build | |||
There was a problem hiding this comment.
⚠️ Aqua detected misconfiguration in your code
Misconfiguration ID: AVD-PIPELINE-0021
Check Name: Ensure pipelines are automatically scanned for vulnerabilities
Severity: HIGH
Message: No vulnerabilities scanning tool is used in pipeline
[This comment was created by Aqua Pipeline]
|
|
||
| jobs: | ||
| checkmarx: | ||
| name: Aqua scanner |
There was a problem hiding this comment.
⚠️ Aqua detected misconfiguration in your code
Misconfiguration ID: AVD-PIPELINE-0022
Check Name: Ensure pipeline steps produce an SBOM
Severity: HIGH
Message: Consider adding SBOM generation tool to build job 'Aqua scanner'
[This comment was created by Aqua Pipeline]
.github/workflows/checkmarx.yaml
Outdated
| @@ -0,0 +1,36 @@ | |||
| name: build | |||
There was a problem hiding this comment.
⚠️ Aqua detected misconfiguration in your code
Misconfiguration ID: AVD-PIPELINE-0024
Check Name: Ensure scanners are in place to identify and prevent IaC misconfigurations in pipeline files
Severity: HIGH
Message: No IaC scanning tool is used in pipeline
[This comment was created by Aqua Pipeline]
|
|
||
| jobs: | ||
| checkmarx: | ||
| name: Aqua scanner |
There was a problem hiding this comment.
⚠️ Aqua detected misconfiguration in your code
Misconfiguration ID: AVD-PIPELINE-0011
Check Name: HTTP usage instead of HTTPS
Severity: MEDIUM
Message: Avoid fetching from usecured resources (using http) in job 'Aqua scanner', step 'Simulate secret exfiltration'
[This comment was created by Aqua Pipeline]
.github/workflows/checkmarx.yaml
Outdated
| @@ -0,0 +1,60 @@ | |||
| name: build | |||
There was a problem hiding this comment.
⚠️ Aqua detected misconfiguration in your code
Misconfiguration ID: AVD-PIPELINE-0025
Check Name: Ensure scanners are in place to identify and prevent SAST findings in pipeline files
Severity: HIGH
Message: No SAST scanning tool is used in pipeline
[This comment was created by Aqua Pipeline]
No description provided.