KICS Security Scan #154
github-merge-queue[bot]
This run and associated checks have been archived and are scheduled for deletion.
Learn more about checks retention
Annotations
10 warnings
|
[INFO] Risky File Permissions:
molecule/logstash_pipelines/verify.yml#L18
Some modules could end up creating new files on disk with permissions that might be too open or unpredictable
|
|
[LOW] Unpinned Package Version:
roles/beats/tasks/filebeat.yml#L58
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
|
|
[LOW] Unpinned Package Version:
roles/beats/tasks/filebeat.yml#L44
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
|
|
[LOW] Unpinned Package Version:
roles/beats/tasks/filebeat.yml#L70
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
|
|
[LOW] Unpinned Package Version:
roles/beats/tasks/auditbeat.yml#L62
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
|
|
[LOW] Unpinned Package Version:
roles/beats/tasks/auditbeat.yml#L74
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
|
|
[LOW] Unpinned Package Version:
roles/beats/tasks/metricbeat.yml#L72
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
|
|
[LOW] Unpinned Package Version:
roles/beats/tasks/metricbeat.yml#L45
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
|
|
[LOW] Unpinned Package Version:
roles/beats/tasks/metricbeat.yml#L59
Setting state to latest performs an update and installs additional packages possibly resulting in performance degradation or loss of service
|
|
[MEDIUM] Communication Over HTTP:
roles/elasticsearch/tasks/main.yml#L277
Using HTTP URLs (without encryption) could lead to security vulnerabilities and risks
|