Skip to content

OPSEXP-2411 Drop privileged for traefik containers #49

OPSEXP-2411 Drop privileged for traefik containers

OPSEXP-2411 Drop privileged for traefik containers #49

Triggered via pull request October 3, 2024 09:22
Status Success
Total duration 43s
Artifacts

kics.yml

on: pull_request
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
[HIGH] Docker Socket Mounted In Container: docker-compose/pre-release-docker-compose.yml#L219
Docker socket docker.sock should not be mounted on host. If the docker socket is mounted, it can allow its processes to execute docker commands.
[HIGH] Docker Socket Mounted In Container: docker-compose/community-docker-compose.yml#L166
Docker socket docker.sock should not be mounted on host. If the docker socket is mounted, it can allow its processes to execute docker commands.
[HIGH] Docker Socket Mounted In Container: docker-compose/7.1.N-docker-compose.yml#L202
Docker socket docker.sock should not be mounted on host. If the docker socket is mounted, it can allow its processes to execute docker commands.
[HIGH] Docker Socket Mounted In Container: docker-compose/7.2.N-docker-compose.yml#L222
Docker socket docker.sock should not be mounted on host. If the docker socket is mounted, it can allow its processes to execute docker commands.
[HIGH] Docker Socket Mounted In Container: docker-compose/7.4.N-docker-compose.yml#L214
Docker socket docker.sock should not be mounted on host. If the docker socket is mounted, it can allow its processes to execute docker commands.
[HIGH] Docker Socket Mounted In Container: docker-compose/7.3.N-docker-compose.yml#L213
Docker socket docker.sock should not be mounted on host. If the docker socket is mounted, it can allow its processes to execute docker commands.
[HIGH] Docker Socket Mounted In Container: docker-compose/docker-compose.yml#L256
Docker socket docker.sock should not be mounted on host. If the docker socket is mounted, it can allow its processes to execute docker commands.
[HIGH] No New Privileges Not Set: docker-compose/docker-compose.yml#L253
Ensuring the process does not gain any new privileges lessens the risk associated with many operations.
[HIGH] No New Privileges Not Set: docker-compose/7.4.N-docker-compose.yml#L211
Ensuring the process does not gain any new privileges lessens the risk associated with many operations.
[HIGH] No New Privileges Not Set: docker-compose/7.3.N-docker-compose.yml#L210
Ensuring the process does not gain any new privileges lessens the risk associated with many operations.