added deployment logic #64

saargon · 2023-07-04T07:00:48Z

No description provided.

github-actions · 2023-07-04T10:07:16Z

.github/workflows/aquasec.yml

@@ -68,3 +69,16 @@ jobs:
              --aqua-secret "${{ secrets.AQUA_SECRET }}" \
              --artifact-path "saargondocker/graphql-vuln:${{ github.sha }}" 

+  deploy:
+    name: deploy to k8s


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-PIPELINE-0008
Check Name: Unrestricted dependency version
Severity: MEDIUM
Message: Dependency aws-actions/configure-aws-credentials v1 version should be pinned to the commit sha
[This comment was created by Aqua Pipeline]

github-actions · 2023-07-04T10:07:17Z

.github/workflows/aquasec.yml

@@ -68,3 +69,16 @@ jobs:
              --aqua-secret "${{ secrets.AQUA_SECRET }}" \
              --artifact-path "saargondocker/graphql-vuln:${{ github.sha }}" 

+  deploy:
+    name: deploy to k8s


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-PIPELINE-0008
Check Name: Unrestricted dependency version
Severity: MEDIUM
Message: Dependency steebchen/kubectl-setup v1 version should be pinned to the commit sha
[This comment was created by Aqua Pipeline]

github-actions · 2023-07-04T10:47:11Z

.github/workflows/aquasec.yml

@@ -68,3 +69,13 @@ jobs:
              --aqua-secret "${{ secrets.AQUA_SECRET }}" \
              --artifact-path "saargondocker/graphql-vuln:${{ github.sha }}" 

+  deploy:
+    name: deploy to k8s


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-PIPELINE-0008
Check Name: Unrestricted dependency version
Severity: MEDIUM
Message: Dependency aws-actions/configure-aws-credentials v2 version should be pinned to the commit sha
[This comment was created by Aqua Pipeline]

github-actions · 2023-07-04T10:53:23Z

.github/workflows/aquasec.yml

+    name: deploy to k8s
+    runs-on: ubuntu-latest
+    permissions:
+          id-token: write


⚠️ Aqua detected sensitive data in your code

Category: Env Generic
Description: Env Generic Credential
Severity: HIGH
Match: id-token: *****
[This comment was created by Aqua Pipeline]

github-actions · 2023-07-05T11:20:23Z

.github/workflows/aquasec.yml

@@ -68,3 +68,16 @@ jobs:
              --aqua-secret "${{ secrets.AQUA_SECRET }}" \
              --artifact-path "saargondocker/graphql-vuln:${{ github.sha }}" 

+  deploy:
+    name: deploy to k8s


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-PIPELINE-0008
Check Name: Unrestricted dependency version
Severity: MEDIUM
Message: Dependency aws-actions/configure-aws-credentials v3 version should be pinned to the commit sha
[This comment was created by Aqua Pipeline]

github-actions · 2023-07-06T08:35:37Z

.github/workflows/aquasec.yml

@@ -68,3 +68,19 @@ jobs:
              --aqua-secret "${{ secrets.AQUA_SECRET }}" \
              --artifact-path "saargondocker/graphql-vuln:${{ github.sha }}" 

+  deploy:
+    name: deploy to k8s


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-PIPELINE-0008
Check Name: Unrestricted dependency version
Severity: MEDIUM
Message: Dependency aws-actions/amazon-ecr-login v1 version should be pinned to the commit sha
[This comment was created by Aqua Pipeline]

for a shorter build

github-actions · 2023-07-06T11:39:49Z

.github/workflows/aquasec.yml

+          IMAGE_TAG: ${{ github.sha }}
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v2


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-PIPELINE-0005
Check Name: persist-credentials is true
Severity: HIGH
Message: Consider adding persist-credentials: false to the checkout action in job 'build image & push to ECR' inputs
Resolution: Add persist-credentials: false to the checkout action
[This comment was created by Aqua Pipeline]

github-actions · 2023-07-10T09:51:41Z

deployment.yml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0001
Check Name: Process can elevate its own privileges
Severity: MEDIUM
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'securityContext.allowPrivilegeEscalation' to false
Resolution: Set 'set containers[].securityContext.allowPrivilegeEscalation' to 'false'.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv001

github-actions · 2023-07-18T10:38:49Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0020
Check Name: Runs with low user ID
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'securityContext.runAsUser' > 10000
Resolution: Set 'containers[].securityContext.runAsUser' to an integer > 10000.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv020

github-actions · 2023-07-18T10:38:50Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0021
Check Name: Runs with low group ID
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'securityContext.runAsGroup' > 10000
Resolution: Set 'containers[].securityContext.runAsGroup' to an integer > 10000.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv021

github-actions · 2023-07-18T10:38:51Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0030
Check Name: Default Seccomp profile not set
Severity: LOW
Message: Either Pod or Container should set 'securityContext.seccompProfile.type' to 'RuntimeDefault'
Resolution: Set 'spec.securityContext.seccompProfile.type', 'spec.containers[].securityContext.seccompProfile' and 'spec.initContainers[].securityContext.seccompProfile' to 'RuntimeDefault' or undefined.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv030

github-actions · 2023-07-18T10:38:52Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0106
Check Name: Container capabilities must only include NET_BIND_SERVICE
Severity: LOW
Message: container should drop all
Resolution: Set 'spec.containers[].securityContext.capabilities.drop' to 'ALL' and only add 'NET_BIND_SERVICE' to 'spec.containers[].securityContext.capabilities.add'.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv106

github-actions · 2023-07-18T10:46:17Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0018
Check Name: Memory not limited
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'resources.limits.memory'
Resolution: Set a limit value under 'containers[].resources.limits.memory'.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv018

github-actions · 2023-07-18T10:46:18Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0020
Check Name: Runs with low user ID
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'securityContext.runAsUser' > 10000
Resolution: Set 'containers[].securityContext.runAsUser' to an integer > 10000.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv020

github-actions · 2023-07-18T10:46:18Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0021
Check Name: Runs with low group ID
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'securityContext.runAsGroup' > 10000
Resolution: Set 'containers[].securityContext.runAsGroup' to an integer > 10000.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv021

github-actions · 2023-07-18T10:46:19Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0030
Check Name: Default Seccomp profile not set
Severity: LOW
Message: Either Pod or Container should set 'securityContext.seccompProfile.type' to 'RuntimeDefault'
Resolution: Set 'spec.securityContext.seccompProfile.type', 'spec.containers[].securityContext.seccompProfile' and 'spec.initContainers[].securityContext.seccompProfile' to 'RuntimeDefault' or undefined.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv030

github-actions · 2023-07-18T10:46:21Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0106
Check Name: Container capabilities must only include NET_BIND_SERVICE
Severity: LOW
Message: container should drop all
Resolution: Set 'spec.containers[].securityContext.capabilities.drop' to 'ALL' and only add 'NET_BIND_SERVICE' to 'spec.containers[].securityContext.capabilities.add'.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv106

github-actions · 2023-07-24T12:58:56Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0018
Check Name: Memory not limited
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'resources.limits.memory'
Resolution: Set a limit value under 'containers[].resources.limits.memory'.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv018

github-actions · 2023-07-24T12:58:57Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0020
Check Name: Runs with low user ID
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'securityContext.runAsUser' > 10000
Resolution: Set 'containers[].securityContext.runAsUser' to an integer > 10000.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv020

github-actions · 2023-07-24T12:58:58Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0021
Check Name: Runs with low group ID
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'securityContext.runAsGroup' > 10000
Resolution: Set 'containers[].securityContext.runAsGroup' to an integer > 10000.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv021

github-actions · 2023-07-24T12:58:59Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0030
Check Name: Default Seccomp profile not set
Severity: LOW
Message: Either Pod or Container should set 'securityContext.seccompProfile.type' to 'RuntimeDefault'
Resolution: Set 'spec.securityContext.seccompProfile.type', 'spec.containers[].securityContext.seccompProfile' and 'spec.initContainers[].securityContext.seccompProfile' to 'RuntimeDefault' or undefined.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv030

github-actions · 2023-07-24T12:59:00Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0106
Check Name: Container capabilities must only include NET_BIND_SERVICE
Severity: LOW
Message: container should drop all
Resolution: Set 'spec.containers[].securityContext.capabilities.drop' to 'ALL' and only add 'NET_BIND_SERVICE' to 'spec.containers[].securityContext.capabilities.add'.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv106

github-actions · 2023-07-24T12:59:04Z

.github/workflows/aquasec.yml

+          docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG
+          docker push $ECR_REGISTRY/$ECR_REPOSITORY:latest
+  deploy:
+    name: deploy to k8s


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-PIPELINE-0008
Check Name: Unrestricted dependency version
Severity: MEDIUM
Message: Dependency kodermax/kubectl-aws-eks master version should be pinned to the commit sha
[This comment was created by Aqua Pipeline]

github-actions · 2023-07-24T13:04:54Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0018
Check Name: Memory not limited
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'resources.limits.memory'
Resolution: Set a limit value under 'containers[].resources.limits.memory'.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv018

github-actions · 2023-07-24T13:04:55Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0020
Check Name: Runs with low user ID
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'securityContext.runAsUser' > 10000
Resolution: Set 'containers[].securityContext.runAsUser' to an integer > 10000.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv020

github-actions · 2023-07-24T13:04:56Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0021
Check Name: Runs with low group ID
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'securityContext.runAsGroup' > 10000
Resolution: Set 'containers[].securityContext.runAsGroup' to an integer > 10000.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv021

github-actions · 2023-07-24T13:04:57Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0030
Check Name: Default Seccomp profile not set
Severity: LOW
Message: Either Pod or Container should set 'securityContext.seccompProfile.type' to 'RuntimeDefault'
Resolution: Set 'spec.securityContext.seccompProfile.type', 'spec.containers[].securityContext.seccompProfile' and 'spec.initContainers[].securityContext.seccompProfile' to 'RuntimeDefault' or undefined.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv030

github-actions · 2023-07-24T13:04:58Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0106
Check Name: Container capabilities must only include NET_BIND_SERVICE
Severity: LOW
Message: container should drop all
Resolution: Set 'spec.containers[].securityContext.capabilities.drop' to 'ALL' and only add 'NET_BIND_SERVICE' to 'spec.containers[].securityContext.capabilities.add'.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv106

github-actions · 2023-07-24T13:05:02Z

.github/workflows/aquasec.yml

+          docker push $ECR_REGISTRY/$ECR_REPOSITORY:$IMAGE_TAG
+          docker push $ECR_REGISTRY/$ECR_REPOSITORY:latest
+  deploy:
+    name: deploy to k8s


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-PIPELINE-0008
Check Name: Unrestricted dependency version
Severity: MEDIUM
Message: Dependency kodermax/kubectl-aws-eks master version should be pinned to the commit sha
[This comment was created by Aqua Pipeline]

github-actions · 2023-07-24T13:15:20Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0018
Check Name: Memory not limited
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'resources.limits.memory'
Resolution: Set a limit value under 'containers[].resources.limits.memory'.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv018

github-actions · 2023-07-24T13:15:21Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0020
Check Name: Runs with low user ID
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'securityContext.runAsUser' > 10000
Resolution: Set 'containers[].securityContext.runAsUser' to an integer > 10000.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv020

github-actions · 2023-07-24T13:15:22Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0021
Check Name: Runs with low group ID
Severity: LOW
Message: Container '${{ secrets.ECR_REPOSITORY }}' of Deployment '${{ secrets.ECR_REPOSITORY }}' should set 'securityContext.runAsGroup' > 10000
Resolution: Set 'containers[].securityContext.runAsGroup' to an integer > 10000.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv021

github-actions · 2023-07-24T13:15:23Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0030
Check Name: Default Seccomp profile not set
Severity: LOW
Message: Either Pod or Container should set 'securityContext.seccompProfile.type' to 'RuntimeDefault'
Resolution: Set 'spec.securityContext.seccompProfile.type', 'spec.containers[].securityContext.seccompProfile' and 'spec.initContainers[].securityContext.seccompProfile' to 'RuntimeDefault' or undefined.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv030

github-actions · 2023-07-24T13:15:24Z

deployment.yaml

+        - name: ${{ secrets.ECR_REPOSITORY }}
+          image: ${{ secrets.ECR_REGISTRY }}/${{ secrets.ECR_REPOSITORY }}:latest
+          ports:
+            - containerPort: 80
+              protocol: TCP
+            - containerPort: 3000
+              protocol: TCP
+          imagePullPolicy: Always


⚠️ Aqua detected misconfiguration in your code

Misconfiguration ID: AVD-KSV-0106
Check Name: Container capabilities must only include NET_BIND_SERVICE
Severity: LOW
Message: container should drop all
Resolution: Set 'spec.containers[].securityContext.capabilities.drop' to 'ALL' and only add 'NET_BIND_SERVICE' to 'spec.containers[].securityContext.capabilities.add'.
[This comment was created by Aqua Pipeline]

Read more at https://avd.aquasec.com/misconfig/ksv106

saargon added 2 commits July 4, 2023 10:00

Update aquasec.yml

3aa95fd

Update aquasec.yml

f623443

github-actions bot reviewed Jul 4, 2023

View reviewed changes

saargon added 2 commits July 4, 2023 13:07

Update aquasec.yml

71d5309

Update aquasec.yml

8d11bab

github-actions bot reviewed Jul 4, 2023

View reviewed changes

Update aquasec.yml

eb1c231

github-actions bot reviewed Jul 4, 2023

View reviewed changes

Update aquasec.yml

be8320b

github-actions bot reviewed Jul 5, 2023

View reviewed changes

saargon added 2 commits July 5, 2023 14:24

Update aquasec.yml

4b20e22

Update aquasec.yml

17177bf

github-actions bot reviewed Jul 6, 2023

View reviewed changes

saargon added 11 commits July 6, 2023 14:20

Update aquasec.yml

d9a6845

Update aquasec.yml

af167d8

Update aquasec.yml

57e859b

Update aquasec.yml

b6a7c77

Update aquasec.yml

f8c1713

Update aquasec.yml

a926fab

Update aquasec.yml

a480e09

Update aquasec.yml

ba08d25

Update aquasec.yml

dbfeda5

reduced sast and reachability

f482b8b

for a shorter build

Update aquasec.yml

867d560

github-actions bot reviewed Jul 6, 2023

View reviewed changes

saargon added 3 commits July 6, 2023 14:42

Update aquasec.yml

0cd9c27

Update aquasec.yml

48e1fec

Create deployment.yml

003a909

github-actions bot reviewed Jul 10, 2023

View reviewed changes

github-actions bot reviewed Jul 18, 2023

View reviewed changes

Update aquasec.yml

492e2a1

github-actions bot reviewed Jul 18, 2023

View reviewed changes

Update aquasec.yml

e0adabf

github-actions bot reviewed Jul 24, 2023

View reviewed changes

Update aquasec.yml

a31fa59

github-actions bot reviewed Jul 24, 2023

View reviewed changes

Update aquasec.yml

4d05d0a

github-actions bot reviewed Jul 24, 2023

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

added deployment logic #64

added deployment logic #64

saargon commented Jul 4, 2023

github-actions bot Jul 4, 2023

github-actions bot Jul 4, 2023

github-actions bot Jul 4, 2023

github-actions bot Jul 4, 2023

github-actions bot Jul 5, 2023

github-actions bot Jul 6, 2023

github-actions bot Jul 6, 2023

github-actions bot Jul 10, 2023

github-actions bot Jul 18, 2023

github-actions bot Jul 18, 2023

github-actions bot Jul 18, 2023

github-actions bot Jul 18, 2023

github-actions bot Jul 18, 2023

github-actions bot Jul 18, 2023

github-actions bot Jul 18, 2023

github-actions bot Jul 18, 2023

github-actions bot Jul 18, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

github-actions bot Jul 24, 2023

added deployment logic #64

Are you sure you want to change the base?

added deployment logic #64

Conversation

saargon commented Jul 4, 2023

github-actions bot Jul 4, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 4, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 4, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 4, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected sensitive data in your code

github-actions bot Jul 5, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 6, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 6, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 10, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 18, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 18, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 18, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 18, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 18, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 18, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 18, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 18, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 18, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 24, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 24, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 24, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 24, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 24, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 24, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 24, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code

github-actions bot Jul 24, 2023

Choose a reason for hiding this comment

⚠️ Aqua detected misconfiguration in your code