Skip to content
IaC Scanning with Checkmarx KICS

Update MSDO workflow to specify tools for analysis #41

Sign in to view logs

Update MSDO workflow to specify tools for analysis

Update MSDO workflow to specify tools for analysis #41

Triggered via pull request April 25, 2025 01:14
@CalinLCalinL
opened #55
feature/update27
Status Success
Total duration 1m 9s
Artifacts –

IACS-Checkmarx-kics.yml

on: pull_request
Run KICS scan
57s
Run KICS scan
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
[HIGH] MySQL Server Public Access Enabled: terraform/azure/sql.tf#L50
MySQL Server public access should be disabled
[HIGH] Passwords And Secrets - Generic Password: terraform/azure/sql.tf#L15
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: terraform/azure/instance.tf#L11
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: terraform/azure/instance.tf#L36
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: terraform/azure/sql.tf#L41
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: terraform/azure/sql.tf#L64
Query to find passwords and secrets in infrastructure code.
[MEDIUM] AD Admin Not Configured For SQL Server: terraform/azure/sql.tf#L9
The Active Directory Administrator is not configured for a SQL server
[MEDIUM] AKS Private Cluster Disabled: terraform/azure/aks.tf#L1
Azure Kubernetes Service (AKS) API should not be exposed to the internet
[MEDIUM] AKS RBAC Disabled: terraform/azure/aks.tf#L23
Azure Container Service (AKS) instance should have role-based access control (RBAC) enabled
[MEDIUM] App Service Authentication Disabled: terraform/azure/app_service.tf#L31
Azure App Service authentication settings should be enabled