Update bridgecrewio/checkov-action action to v12.2873.0 #1405
Triggered via pull request
September 20, 2024 14:05
renovate[bot]
Status
Failure
Total duration
1m 13s
Artifacts
–
ci-infra.yml
on: pull_request
Lint GitHub Actions workflows
6s
Lint scripts
3s
Check Terraform format
5s
Validate Terraform modules
59s
Check compliance with checkov
23s
Check compliance with tfsec
15s
Annotations
10 errors and 6 warnings
|
Check compliance with checkov
CKV_AWS_354: "Ensure RDS Performance Insights are encrypted using KMS CMKs"
|
|
Check compliance with checkov
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
|
|
Check compliance with checkov
CKV_TF_1: "Ensure Terraform module sources use a commit hash"
|
|
Check compliance with checkov
CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"
|
|
Check compliance with checkov
CKV2_AWS_64: "Ensure KMS key Policy is defined"
|
|
Check compliance with checkov
CKV2_AWS_64: "Ensure KMS key Policy is defined"
|
|
Check compliance with checkov
CKV2_AWS_64: "Ensure KMS key Policy is defined"
|
|
Check compliance with checkov
CKV2_AWS_64: "Ensure KMS key Policy is defined"
|
|
Check compliance with checkov
CKV2_AWS_64: "Ensure KMS key Policy is defined"
|
|
Check compliance with checkov
CKV2_AWS_64: "Ensure KMS key Policy is defined"
|
|
Lint scripts
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
Check Terraform format
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, hashicorp/setup-terraform@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
Lint GitHub Actions workflows
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
Check compliance with tfsec
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
Check compliance with checkov
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, actions/setup-python@v4. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
Validate Terraform modules
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, hashicorp/setup-terraform@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|