-
Notifications
You must be signed in to change notification settings - Fork 7
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Create checkmarx.yaml #62
base: master
Are you sure you want to change the base?
Conversation
.github/workflows/checkmarx.yaml
Outdated
@@ -0,0 +1,36 @@ | |||
name: build |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
⚠️ Aqua detected misconfiguration in your code
Misconfiguration ID: AVD-PIPELINE-0020
Check Name: Ensure scanners are in place to identify and prevent sensitive data in pipeline files
Severity: HIGH
Message: No secrets scanning tool is used in pipeline
[This comment was created by Aqua Pipeline]
.github/workflows/checkmarx.yaml
Outdated
@@ -0,0 +1,36 @@ | |||
name: build |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
⚠️ Aqua detected misconfiguration in your code
Misconfiguration ID: AVD-PIPELINE-0021
Check Name: Ensure pipelines are automatically scanned for vulnerabilities
Severity: HIGH
Message: No vulnerabilities scanning tool is used in pipeline
[This comment was created by Aqua Pipeline]
|
||
jobs: | ||
checkmarx: | ||
name: Aqua scanner |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
⚠️ Aqua detected misconfiguration in your code
Misconfiguration ID: AVD-PIPELINE-0022
Check Name: Ensure pipeline steps produce an SBOM
Severity: HIGH
Message: Consider adding SBOM generation tool to build job 'Aqua scanner'
[This comment was created by Aqua Pipeline]
.github/workflows/checkmarx.yaml
Outdated
@@ -0,0 +1,36 @@ | |||
name: build |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
⚠️ Aqua detected misconfiguration in your code
Misconfiguration ID: AVD-PIPELINE-0024
Check Name: Ensure scanners are in place to identify and prevent IaC misconfigurations in pipeline files
Severity: HIGH
Message: No IaC scanning tool is used in pipeline
[This comment was created by Aqua Pipeline]
|
||
jobs: | ||
checkmarx: | ||
name: Aqua scanner |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
⚠️ Aqua detected misconfiguration in your code
Misconfiguration ID: AVD-PIPELINE-0011
Check Name: HTTP usage instead of HTTPS
Severity: MEDIUM
Message: Avoid fetching from usecured resources (using http) in job 'Aqua scanner', step 'Simulate secret exfiltration'
[This comment was created by Aqua Pipeline]
.github/workflows/checkmarx.yaml
Outdated
@@ -0,0 +1,60 @@ | |||
name: build |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
⚠️ Aqua detected misconfiguration in your code
Misconfiguration ID: AVD-PIPELINE-0025
Check Name: Ensure scanners are in place to identify and prevent SAST findings in pipeline files
Severity: HIGH
Message: No SAST scanning tool is used in pipeline
[This comment was created by Aqua Pipeline]
No description provided.