Add DevSecOps page with security news and examples; update project dependencies #67

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open

CalinL wants to merge 3 commits into main from feature/devsecops-demo-05

GitHub Advanced Security / defsec failed May 12, 2025 in 3s

5 new alerts including 5 errors

New alerts in code changed by this pull request

5 errors

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 64 in samples/example-02.tf

Code scanning / defsec

An inbound network security rule allows traffic from /0. Error

Security group rule allows ingress from public internet.

Check failure on line 64 in samples/example-02.tf

Code scanning / defsec

An inbound network security rule allows traffic from /0. Error

Security group rule allows ingress from public internet.

Check failure on line 64 in samples/example-02.tf

Code scanning / defsec

An inbound network security rule allows traffic from /0. Error

Security group rule allows ingress from public internet.

Check failure on line 64 in samples/example-02.tf

Code scanning / defsec

SSH access should not be accessible from the Internet, should be blocked on port 22 Error

Security group rule allows ingress to SSH port from multiple public internet addresses.

Check failure on line 129 in samples/example-02.tf

Code scanning / defsec

Password authentication should be disabled on Azure virtual machines Error

Linux virtual machine allows password authentication.