IaC Scanning with Checkmarx KICS

Merge pull request #59 from githubabcs-devops/feature/about-page #58

Sign in to view logs

Triggered via push April 25, 2025 11:57

CalinL

main

Status Success

Total duration 1m 8s

Artifacts –

This run and associated checks have been archived and are scheduled for deletion. Learn more about checks retention

IACS-Checkmarx-kics.yml

on: push

Annotations

10 warnings

[HIGH] MySQL Server Public Access Enabled: terraform/azure/sql.tf#L50

MySQL Server public access should be disabled

[HIGH] Passwords And Secrets - Generic Password: terraform/azure/sql.tf#L41

Query to find passwords and secrets in infrastructure code.

[HIGH] Passwords And Secrets - Generic Password: terraform/azure/instance.tf#L11

Query to find passwords and secrets in infrastructure code.

[HIGH] Passwords And Secrets - Generic Password: terraform/azure/instance.tf#L36

Query to find passwords and secrets in infrastructure code.

[HIGH] Passwords And Secrets - Generic Password: terraform/azure/sql.tf#L15

Query to find passwords and secrets in infrastructure code.

[HIGH] Passwords And Secrets - Generic Password: terraform/azure/sql.tf#L64

Query to find passwords and secrets in infrastructure code.

[MEDIUM] AD Admin Not Configured For SQL Server: terraform/azure/sql.tf#L9

The Active Directory Administrator is not configured for a SQL server

[MEDIUM] AKS Private Cluster Disabled: terraform/azure/aks.tf#L1

Azure Kubernetes Service (AKS) API should not be exposed to the internet

[MEDIUM] AKS RBAC Disabled: terraform/azure/aks.tf#L23

Azure Container Service (AKS) instance should have role-based access control (RBAC) enabled

[MEDIUM] App Service Authentication Disabled: terraform/azure/app_service.tf#L31

Azure App Service authentication settings should be enabled