Apcxtest patch 4

[apcxtest]

No description provided.

[apcxtest]

Checkmarx One – Scan Summary & Details – f2b0bec0-d344-4e0c-8f24-540bbbce17d4

Policy Management Violations

Policy Name	Rule(s)	Break Build
aptest policy	testrepopub rule	false

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Unpinned Actions Full Length Commit SHA	/cxaction.yml: 24	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	IAM Access Analyzer Not Enabled	/negative1.tf: 1	IAM Access Analyzer should be enabled and configured to continuously monitor resource permissions

Fixed Issues

Severity	Issue	Source File / Package
	ALB Listening on HTTP	/positive2.tf: 70
	ALB Listening on HTTP	/positive1.tf: 9
	EC2 Instance Has Public IP	/positive2.tf: 95
	EC2 Instance Has Public IP	/negative2.tf: 109
	EC2 Instance Has Public IP	/positive2.tf: 108
	EC2 Instance Has Public IP	/negative2.tf: 83
	EC2 Instance Has Public IP	/positive2.tf: 82
	EC2 Instance Has Public IP	/negative2.tf: 96
	Missing User Instruction	/Dockerfile: 1
	ALB Not Dropping Invalid Headers	/negative1.tf: 15
	ALB Not Dropping Invalid Headers	/positive1.tf: 15
	ALB Not Dropping Invalid Headers	/positive2.tf: 49
	ALB Not Dropping Invalid Headers	/negative2.tf: 49
	Apt Get Install Pin Version Not Defined	/Dockerfile: 5
	Unpinned Actions Full Length Commit SHA	/cxaction.yml: 30
	Unpinned Actions Full Length Commit SHA	/cxaction.yml: 18
	VPC Without Network Firewall	/negative2.tf: 26
	VPC Without Network Firewall	/positive2.tf: 26
	ALB Deletion Protection Disabled	/negative2.tf: 49
	ALB Deletion Protection Disabled	/negative1.tf: 15
	ALB Deletion Protection Disabled	/positive1.tf: 15
	ALB Deletion Protection Disabled	/positive2.tf: 49
	EC2 Instance Using Default Security Group	/positive2.tf: 96
	EC2 Instance Using Default Security Group	/positive2.tf: 83
	EC2 Instance Using Default Security Group	/positive2.tf: 109
	EC2 Instance Using Default Security Group	/negative2.tf: 110
	EC2 Instance Using Default Security Group	/negative2.tf: 97
	EC2 Instance Using Default Security Group	/negative2.tf: 84
	Healthcheck Instruction Missing	/Dockerfile: 1
	IAM Access Analyzer Not Enabled	/negative1.tf: 1
	Shield Advanced Not In Use	/negative1.tf: 15
	Shield Advanced Not In Use	/positive2.tf: 49
	Shield Advanced Not In Use	/negative2.tf: 49
	Shield Advanced Not In Use	/positive1.tf: 15
	VPC FlowLogs Disabled	/negative2.tf: 26
	VPC FlowLogs Disabled	/positive2.tf: 26