checkov

AUT-2776 contact us page spamming - Sanitize free text value into contact us forms #2352

Annotations

10 errors and 2 warnings

CKV_AWS_109: "Ensure IAM policies does not allow permissions management / resource exposure without constraints"

CKV_AWS_356: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"

CKV_AWS_111: "Ensure IAM policies does not allow write access without constraints"

CKV_AWS_338: "Ensure CloudWatch log groups retains logs for at least 1 year"

CKV_AWS_336: "Ensure ECS containers are limited to read-only access to root filesystems"

CKV_AWS_191: "Ensure ElastiCache replication group is encrypted by KMS using a customer managed Key (CMK)"

CKV_AWS_23: "Ensure every security group and rule has a description"

Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: actions/checkout@v3, github/codeql-action/upload-sarif@v2. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.

CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/