Skip to content
Security (Nightly)

Security (Nightly) #42

Sign in to view logs

Security (Nightly)

Security (Nightly) #42

Triggered via schedule August 23, 2026 02:51
@github-merge-queuegithub-merge-queue[bot]
⁠ 85f699c
main
Status Success
Total duration 1m 14s
Artifacts 1

security-nightly.yml

on: schedule
Workflow Security
16s
Workflow Security
Secret Scan
32s
Secret Scan
Dockerfile Lint
19s
Dockerfile Lint
IaC Security
1m 11s
IaC Security
SAST (Static Application Security Testing)
31s
SAST (Static Application Security Testing)
Dependency Scan
37s
Dependency Scan
Fit to window
Zoom out
Zoom in

Annotations

1 error and 10 warnings
IaC Security
KICS scan failed with exit code 50
[HIGH] Passwords And Secrets - Generic Password: docker-compose.yaml#L139
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: docker-compose.yaml#L17
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: docker-compose.yaml#L116
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: docker-compose.yaml#L80
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: k8s/helm/t99-app/values.stage.yaml#L32
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: docker-compose.yaml#L189
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: docker-compose.yaml#L167
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: docker-compose.yaml#L206
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: docker-compose.yaml#L118
Query to find passwords and secrets in infrastructure code.
[HIGH] Missing User Instruction: apps/client/Dockerfile#L15
Always set a user in the runtime stage of your Dockerfile. Without it, the container defaults to root, even if earlier build stages define a user.

Artifacts

Produced during runtime
Name Size Digest
sbom-85f699c2f571f7f59a0e3de6861d35df6427d883
8.67 KB
sha256:a39a6ed4f0f1b0ed897f66950dc92dda35775a35a34e32d4d97618e1783b0716