QPPSE-910: MVP And SubGroup Submissions · CMSgov/qpp-conversion-tool@0ed295d

Triggered via pull request October 6, 2023 14:56

synchronize #1372

Status Failure

Total duration 1m 0s

Artifacts –

checkov-tf.yml

on: pull_request

10 errors and 1 warning

CKV_AWS_290: "Ensure IAM policies does not allow write access without constraints"

CKV_AWS_355: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"

CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"

CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"

CKV_AWS_337: "Ensure SSM parameters are using KMS CMK"

CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"

CKV_AWS_290: "Ensure IAM policies does not allow write access without constraints"

CKV_AWS_355: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"

CKV_AWS_272: "Ensure AWS Lambda function is configured to validate code-signing"

CKV_AWS_61: "Ensure AWS IAM policy does not allow assume role permission across all services"

The following actions uses node12 which is deprecated and will be forced to run on node16: actions/checkout@v2, actions/setup-python@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/