refactor: remove grades, reframe README ownership, rename week-prefixed folders to descriptive names #58
sodiq-codetrivy-scan.yml
on: pull_request
IaC Misconfiguration Scan
2s
Container & Filesystem Scan
2s
Secret & Credential Scan
12s
Checkov Policy-as-Code Scan
31s
Annotations
12 errors and 3 warnings
|
Container & Filesystem Scan
Unable to resolve action `aquasecurity/trivy-action@0.28.0`, unable to find version `0.28.0`
|
|
IaC Misconfiguration Scan
Unable to resolve action `aquasecurity/trivy-action@0.28.0`, unable to find version `0.28.0`
|
|
Checkov Policy-as-Code Scan:
k8s-ecommerce-project/microservices-demo/terraform/main.tf#L40
CKV_GCP_64: "Ensure clusters are created with Private Nodes"
|
|
Checkov Policy-as-Code Scan:
k8s-ecommerce-project/microservices-demo/terraform/main.tf#L62
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
|
Checkov Policy-as-Code Scan:
k8s-ecommerce-project/microservices-demo/terraform/main.tf#L28
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
|
Checkov Policy-as-Code Scan:
ha-aws-architecture/main.tf#L282
CKV_AWS_150: "Ensure that Load Balancer has deletion protection enabled"
|
|
Checkov Policy-as-Code Scan:
ha-aws-architecture/main.tf#L186
CKV_AWS_382: "Ensure no security groups allow egress from 0.0.0.0:0 to port -1"
|
|
Checkov Policy-as-Code Scan:
ha-aws-architecture/main.tf#L151
CKV_AWS_260: "Ensure no security groups allow ingress from 0.0.0.0:0 to port 80"
|
|
Checkov Policy-as-Code Scan:
ha-aws-architecture/main.tf#L151
CKV_AWS_382: "Ensure no security groups allow egress from 0.0.0.0:0 to port -1"
|
|
Checkov Policy-as-Code Scan:
aws-foundation/main.tf#L79
CKV_AWS_126: "Ensure that detailed monitoring is enabled for EC2 instances"
|
|
Checkov Policy-as-Code Scan:
aws-foundation/main.tf#L79
CKV_AWS_135: "Ensure that EC2 is EBS optimized"
|
|
Checkov Policy-as-Code Scan:
aws-foundation/main.tf#L53
CKV_AWS_260: "Ensure no security groups allow ingress from 0.0.0.0:0 to port 80"
|
|
Secret & Credential Scan
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Checkov Policy-as-Code Scan
Node.js 20 actions are deprecated. The following actions are running on Node.js 20 and may not work as expected: actions/checkout@v4, github/codeql-action/upload-sarif@v3. Actions will be forced to run with Node.js 24 by default starting June 2nd, 2026. Node.js 20 will be removed from the runner on September 16th, 2026. Please check if updated versions of these actions are available that support Node.js 24. To opt into Node.js 24 now, set the FORCE_JAVASCRIPT_ACTIONS_TO_NODE24=true environment variable on the runner or in your workflow file. Once Node.js 24 becomes the default, you can temporarily opt out by setting ACTIONS_ALLOW_USE_UNSECURE_NODE_VERSION=true. For more information see: https://github.blog/changelog/2025-09-19-deprecation-of-node-20-on-github-actions-runners/
|
|
Checkov Policy-as-Code Scan
CodeQL Action v3 will be deprecated in December 2026. Please update all occurrences of the CodeQL Action in your workflow files to v4. For more information, see https://github.blog/changelog/2025-10-28-upcoming-deprecation-of-codeql-action-v3/
|