Experience Builder

Security Scanning

This repository failed the Experience Builder Terraform Module's Security Scanning validation. This means that a security scanning tool was not found to be implemented in any of the CICD tool configuration files in the repository.

There is an opportunity to:

• Remediate the findings identified by one of the recommended Terraform security scanning tools (example checkov output found below)
• Implement one of the security scanning tools within the CICD framework used by the repository

Checkov Output

                
                  2023-10-05 15:02:58,848 [MainThread  ] [WARNI]  Failed to download module scholzj/minikube/aws:None (for external modules, the --download-external-modules flag is required)
circleci_pipelines scan results:

Passed checks: 1, Failed checks: 1, Skipped checks: 0

Check: CKV_CIRCLECIPIPELINES_1: "Ensure the pipeline image uses a non latest version tag"
	FAILED for resource: jobs(s3_upload).docker.image[1](circleci/python:latest)
	File: /.circleci/config.yml:5-7

		5 |       - image: circleci/python:latest
		6 |     steps:
		7 |       - checkout



                
              

Linting

This repository failed the Experience Builder Terraform Module's Linting validation. This means that a linting tool was not found to be implemented in any of the CICD tool configuration files in the repository.

There is an opportunity to:

• Remediate the findings identified by one of the recommended Terraform linting tools