Skip to content

Add DevSecOps page with security news and examples; update project dependencies #67

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
CalinL wants to merge 3 commits into
base: main
Choose a base branch
from

Add new sample files

a93d0af
Select commit
Loading
Failed to load commit list.
Open

Add DevSecOps page with security news and examples; update project dependencies #67

Add new sample files
a93d0af
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / checkov failed May 12, 2025 in 9s

229 new alerts including 171 errors

New alerts in code changed by this pull request

  • 171 errors
  • 58 notes

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 64 in samples/example-02.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that HTTP (port 80) access is restricted from the internet Error

Ensure that HTTP (port 80) access is restricted from the internet

Check failure on line 64 in samples/example-02.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that SSH access is restricted from the internet Error

Ensure that SSH access is restricted from the internet

Check notice on line 77 in samples/example-02.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that Network Interfaces don't use public IPs Note

Ensure that Network Interfaces don't use public IPs

Check notice on line 129 in samples/example-02.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure Azure Instance does not use basic authentication(Use SSH Key Instead) Note

Ensure Azure Instance does not use basic authentication(Use SSH Key Instead)

Check notice on line 129 in samples/example-02.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines Note

Ensure that Microsoft Antimalware is configured to automatically updates for Virtual Machines

Check notice on line 129 in samples/example-02.tf

See this annotation in the file changed.

Code scanning / checkov

Ensure that virtual machines are backed up using Azure Backup Note

Ensure that virtual machines are backed up using Azure Backup

Check failure on line 19 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure the App Service Plan is zone redundant Error

Ensure the App Service Plan is zone redundant

Check failure on line 32 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure the web app has 'Client Certificates (Incoming client certificates)' set Error

Ensure the web app has 'Client Certificates (Incoming client certificates)' set

Check failure on line 32 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure FTP deployments are disabled Error

Ensure FTP deployments are disabled

Check failure on line 32 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure that 'HTTP Version' is the latest if used to run the web app Error

Ensure that 'HTTP Version' is the latest if used to run the web app

Check failure on line 32 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service Error

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service

Check failure on line 32 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure that Register with Azure Active Directory is enabled on App Service Error

Ensure that Register with Azure Active Directory is enabled on App Service

Check notice on line 32 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure that Managed identity provider is enabled for web apps Note

Ensure that Managed identity provider is enabled for web apps

Check notice on line 32 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure App Service has a minimum number of instances for failover Note

Ensure App Service has a minimum number of instances for failover

Check failure on line 32 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure web app is using the latest version of TLS encryption Error

Ensure web app is using the latest version of TLS encryption

Check failure on line 32 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure that Azure Web App public network access is disabled Error

Ensure that Azure Web App public network access is disabled

Check failure on line 32 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure that App Service configures health check Error

Ensure that App Service configures health check

Check notice on line 32 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service Slot Note

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service Slot

Check failure on line 32 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure that 'HTTP Version' is the latest, if used to run the Function app Error

Ensure that 'HTTP Version' is the latest, if used to run the Function app

Check failure on line 32 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure that Function apps is only accessible over HTTPS Error

Ensure that Function apps is only accessible over HTTPS

Check failure on line 46 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure the web app has 'Client Certificates (Incoming client certificates)' set Error

Ensure the web app has 'Client Certificates (Incoming client certificates)' set

Check failure on line 46 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure FTP deployments are disabled Error

Ensure FTP deployments are disabled

Check failure on line 46 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure that 'HTTP Version' is the latest if used to run the web app Error

Ensure that 'HTTP Version' is the latest if used to run the web app

Check failure on line 46 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service Error

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service

Check failure on line 46 in samples/insecure_arm-01.json

See this annotation in the file changed.

Code scanning / checkov

Ensure that Register with Azure Active Directory is enabled on App Service Error

Ensure that Register with Azure Active Directory is enabled on App Service