kics scanning

Update image tag in Readme #31

Triggered via push November 15, 2023 14:34

weeco

master

Status Success

Total duration 1m 2s

Artifacts –

This run and associated checks have been archived and are scheduled for deletion. Learn more about checks retention

kics-iac.yml

on: push

11 warnings

The following actions uses node12 which is deprecated and will be forced to run on node16: actions/checkout@v2. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/

CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

CPU requests should be set to ensure the sum of the resource requests of the scheduled Containers is less than the capacity of the node

Check if containers are running with low UID, which might cause conflicts with the host's user table.

Incoming container traffic should be bound to a specific host interface

Incoming container traffic should be bound to a specific host interface

Incoming container traffic should be bound to a specific host interface

Check containers periodically to see if they are running properly.

Check containers periodically to see if they are running properly.

Check containers periodically to see if they are running properly.

The hosts process namespace should not be shared by containers