my-devsecops / moon

Moon Project

moon's Issues

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #32

Rule Name	Severity	Files	Description
Run-With-High-ID	high	iac/vulnerable-iac.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #26

Rule Name	Severity	Files	Description
Run-With-High-ID	high	iac/vulnerable-iac.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Prisma Cloud IaC Scan Failed - 12 Issues found in scan

Prisma Cloud Security Issues for pull request : #92

Severity	Policy Name	Files
High	All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Container configured to use the default set of capabilities	./iac/vulnerable-iac.yaml:[2,18]
Medium	Entrypoint of the container must be run with a user with a high ID	./iac/vulnerable-iac.yaml:[23]
Medium	Gordon All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Root filesystem is writable	./iac/vulnerable-iac.yaml:[2,18]
Low	CPU limits not configued	./iac/vulnerable-iac.yaml:[2,18]
Low	Container configured with custom hosts	./iac/vulnerable-iac.yaml:[2]
Low	Container could run using outdated docker image	./iac/vulnerable-iac.yaml:[2,18]
Low	Liveness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Memory limits not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Readiness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Use high UID for containers	./iac/vulnerable-iac.yaml:[2,18]

Prisma Cloud IaC Scan Failed - 12 Issues found in scan

Prisma Cloud Security Issues for pull request : #101

Severity	Policy Name	Files
High	All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Container configured to use the default set of capabilities	./iac/vulnerable-iac.yaml:[2,18]
Medium	Entrypoint of the container must be run with a user with a high ID	./iac/vulnerable-iac.yaml:[23]
Medium	Gordon All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Root filesystem is writable	./iac/vulnerable-iac.yaml:[2,18]
Low	CPU limits not configued	./iac/vulnerable-iac.yaml:[2,18]
Low	Container configured with custom hosts	./iac/vulnerable-iac.yaml:[2]
Low	Container could run using outdated docker image	./iac/vulnerable-iac.yaml:[2,18]
Low	Liveness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Memory limits not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Readiness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Use high UID for containers	./iac/vulnerable-iac.yaml:[2,18]

Prisma Cloud IaC Scan Failed - 12 Issues found in scan

Prisma Cloud Security Issues for pull request : #96

Severity	Policy Name	Files
High	All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Container configured to use the default set of capabilities	./iac/vulnerable-iac.yaml:[2,18]
Medium	Entrypoint of the container must be run with a user with a high ID	./iac/vulnerable-iac.yaml:[23]
Medium	Gordon All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Root filesystem is writable	./iac/vulnerable-iac.yaml:[2,18]
Low	CPU limits not configued	./iac/vulnerable-iac.yaml:[2,18]
Low	Container configured with custom hosts	./iac/vulnerable-iac.yaml:[2]
Low	Container could run using outdated docker image	./iac/vulnerable-iac.yaml:[2,18]
Low	Liveness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Memory limits not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Readiness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Use high UID for containers	./iac/vulnerable-iac.yaml:[2,18]

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #40

Rule Name	Severity	Files	Description
Running-With-High-ID	high	iac/vulnerable-iac.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Invalid format, please input a valid Cloudformation, Terraform or Kubernetes configuration template in valid JSON, YAML or HCL format.

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #36

Rule Name	Severity	Files	Description
Running-With-High-ID	high	iac/vulnerable-iac.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #24

Rule Name	Severity	Files	Description
Entrypoint of the container must be run with a user with a high ID	high	iac/template.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #11

Rule Name	Severity	Files	Description
Entrypoint of the container must be run with a user with a high ID	high	iac/template.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Prisma Cloud IaC Scan Failed - 12 Issues found in scan

Prisma Cloud Security Issues for pull request : #98

Severity	Policy Name	Files
High	All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Container configured to use the default set of capabilities	./iac/vulnerable-iac.yaml:[2,18]
Medium	Entrypoint of the container must be run with a user with a high ID	./iac/vulnerable-iac.yaml:[23]
Medium	Gordon All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Root filesystem is writable	./iac/vulnerable-iac.yaml:[2,18]
Low	CPU limits not configued	./iac/vulnerable-iac.yaml:[2,18]
Low	Container configured with custom hosts	./iac/vulnerable-iac.yaml:[2]
Low	Container could run using outdated docker image	./iac/vulnerable-iac.yaml:[2,18]
Low	Liveness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Memory limits not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Readiness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Use high UID for containers	./iac/vulnerable-iac.yaml:[2,18]

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #38

Rule Name	Severity	Files	Description
Running-With-High-ID	high	iac/vulnerable-iac.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Invalid format, please input a valid Cloudformation, Terraform or Kubernetes configuration template in valid JSON, YAML or HCL format.

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #7

Rule Name	Severity	Files	Description
Entrypoint of the container must be run with a user with a high ID	high	iac/template.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #9

Rule Name	Severity	Files	Description
Entrypoint of the container must be run with a user with a high ID	high	iac/template.yaml	Ensure entrypoint of the container runs with a user with a high ID.

test issue

test

Prisma Cloud IaC Scan Failed - 12 Issues found in scan

Prisma Cloud Security Issues for pull request : #90

Severity	Policy Name	Files
High	All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Container configured to use the default set of capabilities	./iac/vulnerable-iac.yaml:[2,18]
Medium	Entrypoint of the container must be run with a user with a high ID	./iac/vulnerable-iac.yaml:[23]
Medium	Gordon All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Root filesystem is writable	./iac/vulnerable-iac.yaml:[2,18]
Low	CPU limits not configued	./iac/vulnerable-iac.yaml:[2,18]
Low	Container configured with custom hosts	./iac/vulnerable-iac.yaml:[2]
Low	Container could run using outdated docker image	./iac/vulnerable-iac.yaml:[2,18]
Low	Liveness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Memory limits not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Readiness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Use high UID for containers	./iac/vulnerable-iac.yaml:[2,18]

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #28

Rule Name	Severity	Files	Description
Run-With-High-ID	high	iac/vulnerable-iac.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #15

Rule Name	Severity	Files	Description
Entrypoint of the container must be run with a user with a high ID	high	iac/template.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #13

Rule Name	Severity	Files	Description
Entrypoint of the container must be run with a user with a high ID	high	iac/template.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Prisma Cloud IaC Scan Failed - 12 Issues found in scan

Prisma Cloud Security Issues for pull request : #94

Severity	Policy Name	Files
High	All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Container configured to use the default set of capabilities	./iac/vulnerable-iac.yaml:[2,18]
Medium	Entrypoint of the container must be run with a user with a high ID	./iac/vulnerable-iac.yaml:[23]
Medium	Gordon All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Root filesystem is writable	./iac/vulnerable-iac.yaml:[2,18]
Low	CPU limits not configued	./iac/vulnerable-iac.yaml:[2,18]
Low	Container configured with custom hosts	./iac/vulnerable-iac.yaml:[2]
Low	Container could run using outdated docker image	./iac/vulnerable-iac.yaml:[2,18]
Low	Liveness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Memory limits not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Readiness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Use high UID for containers	./iac/vulnerable-iac.yaml:[2,18]

Prisma Cloud IaC Scan Failed - 12 Issues found in scan

Prisma Cloud Security Issues for pull request : #98

Severity	Policy Name	Files
High	All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Container configured to use the default set of capabilities	./iac/vulnerable-iac.yaml:[2,18]
Medium	Entrypoint of the container must be run with a user with a high ID	./iac/vulnerable-iac.yaml:[23]
Medium	Gordon All capabilities should be dropped	./iac/vulnerable-iac.yaml:[2,18]
Medium	Root filesystem is writable	./iac/vulnerable-iac.yaml:[2,18]
Low	CPU limits not configued	./iac/vulnerable-iac.yaml:[2,18]
Low	Container configured with custom hosts	./iac/vulnerable-iac.yaml:[2]
Low	Container could run using outdated docker image	./iac/vulnerable-iac.yaml:[2,18]
Low	Liveness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Memory limits not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Readiness probe not configured	./iac/vulnerable-iac.yaml:[2,18]
Low	Use high UID for containers	./iac/vulnerable-iac.yaml:[2,18]

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #5

Rule Name	Severity	Files	Description
Entrypoint of the container must be run with a user with a high ID	high	iac/template.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #30

Rule Name	Severity	Files	Description
Run-With-High-ID	high	iac/vulnerable-iac.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Vulnerabilities Found : 1

Prisma Cloud Security Issues for pull request : #42

Rule Name	Severity	Files	Description
Running-With-High-ID	high	iac/vulnerable-iac.yaml	Ensure entrypoint of the container runs with a user with a high ID.

Invalid format, please input a valid Cloudformation, Terraform or Kubernetes configuration template in valid JSON, YAML or HCL format.

test

test

Issues found during full repo scan

Cannot find config.yml under .prismaCloud folder in repo moon. Please make sure the file is present in correct format (sample file - https://docs.paloaltonetworks.com/prisma/prisma-cloud/prisma-cloud-admin/prisma-cloud-devops-security/use-the-prisma-cloud-app-for-github.html) at the master branch of your repo under .prismaCloud folder.