Security Pipeline

Add juice shop #16

Triggered via push December 7, 2025 14:05

timothywarner

pushed 97f864a

main

Status Failure

Total duration 1m 51s

Artifacts 1

security-pipeline.yml

on: push

Secret Detection

10s

Dependency Vulnerability Scan

Annotations

14 errors and 8 warnings

Secret Detection

Process completed with exit code 1.

Secret Detection

BASE and HEAD commits are the same. TruffleHog won't scan anything. Please see documentation (https://github.com/trufflesecurity/trufflehog#octocat-trufflehog-github-action).

IaC Security Scan: TerraGoat/terraform/aws/db-app.tf#L116

CKV_AWS_23: "Ensure every security group and rule has a description"

IaC Security Scan: TerraGoat/terraform/aws/db-app.tf#L1

CKV_AWS_129: "Ensure that respective logs of Amazon Relational Database Service (Amazon RDS) are enabled"

IaC Security Scan: TerraGoat/terraform/aws/db-app.tf#L1

CKV_AWS_16: "Ensure all data stored in the RDS is securely encrypted at rest"

IaC Security Scan: TerraGoat/terraform/aws/db-app.tf#L1

CKV_AWS_161: "Ensure RDS database has IAM authentication enabled"

IaC Security Scan: TerraGoat/terraform/aws/db-app.tf#L1

CKV_AWS_293: "Ensure that AWS database instances have deletion protection enabled"

IaC Security Scan: TerraGoat/terraform/aws/db-app.tf#L1

CKV_AWS_118: "Ensure that enhanced monitoring is enabled for Amazon RDS instances"

IaC Security Scan: TerraGoat/terraform/aws/db-app.tf#L1

CKV_AWS_17: "Ensure all data stored in RDS is not publicly accessible"

IaC Security Scan: TerraGoat/terraform/aws/db-app.tf#L1

CKV_AWS_157: "Ensure that RDS instances have Multi-AZ enabled"

IaC Security Scan: TerraGoat/terraform/aws/db-app.tf#L1

CKV_AWS_133: "Ensure that RDS instances has backup policy"

IaC Security Scan: TerraGoat/terraform/aws/db-app.tf#L1

CKV_AWS_226: "Ensure DB instance gets all minor upgrades automatically"

Security Gate

Process completed with exit code 1.

Security Gate

Security gate failed - secrets detected in code

Secret Detection