Bump checkmarx/kics-github-action from 2.1.2 to 2.1.3 #40
dependabot[bot]Annotations
2 warnings
|
[MEDIUM] Communication Over HTTP:
roles/sync/handlers/main.yml#L21
Using HTTP URLs (without encryption) could lead to security vulnerabilities and risks
|
|
[INFO] Risky File Permissions:
roles/tomcat/tasks/main.yml#L1
Some modules could end up creating new files on disk with permissions that might be too open or unpredictable
|