KICS · eclipse-tractusx/sldt-bpn-discovery@32464d5

ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636

CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/

KICS scan: charts/bpndiscovery/templates/deployment.yaml#L38

Check if containers are running with low UID, which might cause conflicts with the host's user table.

KICS scan: backend/src/main/resources/static/bpn-discovery-service-openapi.yaml#L33

Global server object URL should use 'https' protocol instead of 'http'

KICS scan: charts/bpndiscovery/templates/deployment.yaml#L38

Containers should drop 'ALL' or at least 'NET_RAW' capabilities

KICS scan: backend/src/main/resources/static/bpn-discovery-service-openapi.yaml#L275

String schema should have 'pattern' defined.

KICS scan: backend/src/main/resources/static/bpn-discovery-service-openapi.yaml#L231

String schema should have 'pattern' defined.

KICS scan: backend/src/main/resources/static/bpn-discovery-service-openapi.yaml#L217

String schema should have 'pattern' defined.