Skip to content

Add Terraform configurations for Azure resources and update CI/CD workflows #36

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
CalinL merged 2 commits into from
Apr 22, 2025

Update allowed licenses in dependency review workflow to include GPL-3.0

8a28140
Select commit
Loading
Failed to load commit list.
Merged

Add Terraform configurations for Azure resources and update CI/CD workflows #36

Update allowed licenses in dependency review workflow to include GPL-3.0
8a28140
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / checkov failed Apr 21, 2025 in 6s

103 new alerts including 66 errors

New alerts in code changed by this pull request

  • 66 errors
  • 37 notes

See annotations below for details.

View all branch alerts.

Annotations

Check notice on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure AKS has an API Server Authorized IP Ranges enabled Note

Ensure AKS has an API Server Authorized IP Ranges enabled

Check notice on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure Kubernetes Dashboard is disabled Note

Ensure Kubernetes Dashboard is disabled

Check notice on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that AKS enables private clusters Note

Ensure that AKS enables private clusters

Check failure on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that the AKS cluster encrypt temp disks, caches, and data flows between Compute and Storage resources Error

Ensure that the AKS cluster encrypt temp disks, caches, and data flows between Compute and Storage resources

Check failure on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure ephemeral disks are used for OS disks Error

Ensure ephemeral disks are used for OS disks

Check notice on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that AKS use the Paid Sku for its SLA Note

Ensure that AKS use the Paid Sku for its SLA

Check notice on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure AKS local admin account is disabled Note

Ensure AKS local admin account is disabled

Check failure on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure AKS logging to Azure Monitoring is Configured Error

Ensure AKS logging to Azure Monitoring is Configured

Check notice on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure Azure Kubernetes Cluster (AKS) nodes should use a minimum number of 50 pods. Note

Ensure Azure Kubernetes Cluster (AKS) nodes should use a minimum number of 50 pods.

Check notice on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure AKS cluster has Network Policy configured Note

Ensure AKS cluster has Network Policy configured

Check failure on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that only critical system pods run on system nodes Error

Ensure that only critical system pods run on system nodes

Check failure on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure RBAC is enabled on AKS clusters Error

Ensure RBAC is enabled on AKS clusters

Check failure on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure autorotation of Secrets Store CSI Driver secrets for AKS clusters Error

Ensure autorotation of Secrets Store CSI Driver secrets for AKS clusters

Check notice on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure AKS cluster upgrade channel is chosen Note

Ensure AKS cluster upgrade channel is chosen

Check notice on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that AKS uses Azure Policies Add-on Note

Ensure that AKS uses Azure Policies Add-on

Check notice on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that AKS uses disk encryption set Note

Ensure that AKS uses disk encryption set

Check failure on line 25 in terraform/azure/aks.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure AKS cluster has Azure CNI networking enabled Error

Ensure AKS cluster has Azure CNI networking enabled

Check failure on line 21 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure App Service Authentication is set on Azure App Service Error

Ensure App Service Authentication is set on Azure App Service

Check failure on line 21 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure the web app has 'Client Certificates (Incoming client certificates)' set Error

Ensure the web app has 'Client Certificates (Incoming client certificates)' set

Check notice on line 21 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that App service enables detailed error messages Note

Ensure that App service enables detailed error messages

Check notice on line 21 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that App service enables failed request tracing Note

Ensure that App service enables failed request tracing

Check failure on line 21 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure FTP deployments are disabled Error

Ensure FTP deployments are disabled

Check notice on line 21 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that App service enables HTTP logging Note

Ensure that App service enables HTTP logging

Check failure on line 21 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that 'HTTP Version' is the latest if used to run the web app Error

Ensure that 'HTTP Version' is the latest if used to run the web app

Check failure on line 21 in terraform/azure/app_service.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service Error

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service