Skip to content

Add Terraform configurations for Azure resources and update CI/CD workflows #36

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
CalinL merged 2 commits into from
Apr 22, 2025

Update allowed licenses in dependency review workflow to include GPL-3.0

8a28140
Select commit
Loading
Failed to load commit list.
Merged

Add Terraform configurations for Azure resources and update CI/CD workflows #36

Update allowed licenses in dependency review workflow to include GPL-3.0
8a28140
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / KICS failed Apr 21, 2025 in 4s

55 new alerts including 6 errors

New alerts in code changed by this pull request

  • 6 errors
  • 33 warnings
  • 10 notes

See annotations below for details.

View all branch alerts.

Annotations

Check warning on line 1 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / KICS

AKS Private Cluster Disabled Warning

'azurerm_kubernetes_cluster[k8s_cluster].private_cluster_enabled' is undefined

Check notice on line 1 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / KICS

AKS Disk Encryption Set ID Undefined Note

'azurerm_kubernetes_cluster[k8s_cluster].disk_encryption_set_id' is undefined or null

Check notice on line 1 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / KICS

AKS Network Policy Misconfigured Note

'azurerm_kubernetes_cluster[k8s_cluster].network_profile' is undefined

Check notice on line 14 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / KICS

AKS Uses Azure Policies Add-On Disabled Note

'azurerm_kubernetes_cluster[k8s_cluster].addon_profile.azure_policy' is undefined or null

Check notice on line 19 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / KICS

Dashboard Is Enabled Note

'azurerm_kubernetes_cluster[k8s_cluster].addon_profile.kube_dashboard.enabled' is true

Check warning on line 23 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / KICS

AKS RBAC Disabled Warning

'azurerm_kubernetes_cluster[k8s_cluster].role_based_access_control.enabled' is not set to true

Check warning on line 12 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / KICS

App Service Authentication Disabled Warning

'azurerm_app_service[app-service1].auth_settings' is not defined

Check warning on line 12 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / KICS

Azure App Service Client Certificate Disabled Warning

'azurerm_app_service[app-service1].client_cert_enabled' is undefined

Check notice on line 12 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / KICS

App Service Managed Identity Disabled Note

'azurerm_app_service[app-service1].identity' is undefined or null

Check notice on line 12 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / KICS

Name Is Not Snake Case

'app-service1' is not in snake case

Check warning on line 17 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / KICS

Web App Accepting Traffic Other Than HTTPS Warning

'azurerm_app_service[app-service1].https_only' is not set to true

Check warning on line 18 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / KICS

App Service HTTP2 Disabled Warning

'azurerm_app_service[app-service1].site_config.http2_enabled' is undefined or null

Check warning on line 19 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / KICS

App Service Not Using Latest TLS Encryption Version Warning

'azurerm_app_service[app-service1].site_config.min_tls_version' is not set to '1.2'

Check warning on line 23 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / KICS

App Service HTTP2 Disabled Warning

'azurerm_app_service[app-service2].site_config' is undefined or null

Check warning on line 23 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / KICS

Azure App Service Client Certificate Disabled Warning

'azurerm_app_service[app-service2].client_cert_enabled' is undefined

Check notice on line 23 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / KICS

App Service Managed Identity Disabled Note

'azurerm_app_service[app-service2].identity' is undefined or null

Check notice on line 23 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / KICS

Name Is Not Snake Case

'app-service2' is not in snake case

Check warning on line 31 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / KICS

App Service Authentication Disabled Warning

'azurerm_app_service[app-service2].auth_settings.enabled' is defined to 'false'

Check warning on line 9 in terraform/azure/instance.tf

See this annotation in the file changed.

Code scanning / KICS

Azure Instance Using Basic Authentication Warning

'azurerm_linux_virtual_machine[linux_machine]' is using username and password for authentication

Check failure on line 11 in terraform/azure/instance.tf

See this annotation in the file changed.

Code scanning / KICS

Passwords And Secrets - Generic Password Error

Hardcoded secret key appears in source

Check failure on line 36 in terraform/azure/instance.tf

See this annotation in the file changed.

Code scanning / KICS

Passwords And Secrets - Generic Password Error

Hardcoded secret key appears in source

Check warning on line 1 in terraform/azure/key_vault.tf

See this annotation in the file changed.

Code scanning / KICS

Vault Auditing Disabled Warning

'azurerm_key_vault' is not associated with 'azurerm_monitor_diagnostic_setting'

Check warning on line 24 in terraform/azure/key_vault.tf

See this annotation in the file changed.

Code scanning / KICS

Key Expiration Not Set Warning

'expiration_date' is missing

Check warning on line 39 in terraform/azure/key_vault.tf

See this annotation in the file changed.

Code scanning / KICS

Key Vault Secrets Content Type Undefined Warning

'azurerm_key_vault_secret[secret].content_type' is undefined or null

Check warning on line 39 in terraform/azure/key_vault.tf

See this annotation in the file changed.

Code scanning / KICS

Secret Expiration Not Set Warning

'expiration_date' is missing