Repository navigation

IaC Scanning with Checkmarx KICS

Bump advanced-security/spdx-dependency-submission-action from 0.1.1 to 0.2.0 #252

Sign in to view logs

Triggered via pull request March 31, 2026 10:44

dependabot[bot]

opened #157

dependabot/github_actions/advanced-security/spdx-dependency-submission-action-0.2.0

Status Success

Total duration 54s

Artifacts –

IACS-Checkmarx-kics.yml

on: pull_request

Annotations

10 warnings

[MEDIUM] App Service Authentication Disabled: terraform/azure/app_service.tf#L12

Azure App Service authentication settings should be enabled

[MEDIUM] App Service Authentication Disabled: terraform/azure/app_service.tf#L31

Azure App Service authentication settings should be enabled

[MEDIUM] AKS RBAC Disabled: terraform/azure/aks.tf#L23

Azure Container Service (AKS) instance should have role-based access control (RBAC) enabled

[MEDIUM] AKS Private Cluster Disabled: terraform/azure/aks.tf#L1

Azure Kubernetes Service (AKS) API should not be exposed to the internet

[MEDIUM] AD Admin Not Configured For SQL Server: terraform/azure/sql.tf#L9

The Active Directory Administrator is not configured for a SQL server

[HIGH] RDP Is Exposed To The Internet: terraform/azure/networking.tf#L64

Port 3389 (Remote Desktop) is exposed to the internet

[HIGH] Passwords And Secrets - Generic Password: terraform/azure/sql.tf#L15

Query to find passwords and secrets in infrastructure code.

[HIGH] Passwords And Secrets - Generic Password: terraform/azure/sql.tf#L64

Query to find passwords and secrets in infrastructure code.

[HIGH] MySQL Server Public Access Enabled: terraform/azure/sql.tf#L50

MySQL Server public access should be disabled

[HIGH] Default Azure Storage Account Network Access Is Too Permissive: terraform/azure/storage.tf#L13

Default Azure Storage Account network access should be set to Deny