Skip to content
IaC Scanning with Checkmarx KICS

Update workflow actions to latest versions for improved security and … #242

Sign in to view logs

Update workflow actions to latest versions for improved security and …

Update workflow actions to latest versions for improved security and … #242

Triggered via pull request March 30, 2026 15:59
@CalinLCalinL
opened #152
update-workflows
Status Success
Total duration 1m 4s
Artifacts –

IACS-Checkmarx-kics.yml

on: pull_request
Run KICS scan
1m 0s
Run KICS scan
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
[MEDIUM] App Service Authentication Disabled: terraform/azure/app_service.tf#L12
Azure App Service authentication settings should be enabled
[MEDIUM] App Service Authentication Disabled: terraform/azure/app_service.tf#L31
Azure App Service authentication settings should be enabled
[MEDIUM] AKS RBAC Disabled: terraform/azure/aks.tf#L23
Azure Container Service (AKS) instance should have role-based access control (RBAC) enabled
[MEDIUM] AKS Private Cluster Disabled: terraform/azure/aks.tf#L1
Azure Kubernetes Service (AKS) API should not be exposed to the internet
[MEDIUM] AD Admin Not Configured For SQL Server: terraform/azure/sql.tf#L9
The Active Directory Administrator is not configured for a SQL server
[HIGH] RDP Is Exposed To The Internet: terraform/azure/networking.tf#L64
Port 3389 (Remote Desktop) is exposed to the internet
[HIGH] Passwords And Secrets - Generic Password: terraform/azure/sql.tf#L64
Query to find passwords and secrets in infrastructure code.
[HIGH] Passwords And Secrets - Generic Password: terraform/azure/sql.tf#L15
Query to find passwords and secrets in infrastructure code.
[HIGH] MySQL Server Public Access Enabled: terraform/azure/sql.tf#L50
MySQL Server public access should be disabled
[HIGH] Default Azure Storage Account Network Access Is Too Permissive: terraform/azure/storage.tf#L13
Default Azure Storage Account network access should be set to Deny