Create yor.yaml #5
Annotations
10 errors and 3 warnings
scan
CKV_AWS_79: "Ensure Instance Metadata Service Version 1 is not enabled"
|
scan
CKV_AWS_135: "Ensure that EC2 is EBS optimized"
|
scan
CKV_AWS_126: "Ensure that detailed monitoring is enabled for EC2 instances"
|
scan
CKV_AWS_8: "Ensure all data stored in the Launch configuration or instance Elastic Blocks Store is securely encrypted"
|
scan
CKV_AWS_46: "Ensure no hard-coded secrets exist in EC2 user data"
|
scan
CKV_AWS_189: "Ensure EBS Volume is encrypted by KMS using a customer managed Key (CMK)"
|
scan
CKV_AWS_3: "Ensure all data stored in the EBS is securely encrypted"
|
scan
CKV_AWS_260: "Ensure no security groups allow ingress from 0.0.0.0:0 to port 80"
|
scan
CKV_AWS_24: "Ensure no security groups allow ingress from 0.0.0.0:0 to port 22"
|
scan
CKV_AWS_23: "Ensure every security group and rule has a description"
|
scan
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/checkout@v2. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/
|
scan
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v2, GitHub/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
scan
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/
|