Entrega do Projeto

[wellalencarweb]

Porque?

Transações estavam falhando

Como?

Ajustes, uso de SOLID, Object Calisthenics

Tarefa no Quadro

[RicardoZandonaiPicPay]

Checkmarx One – Scan Summary & Details – 30a9c2fc-ee5f-4398-a90d-18da8b22b576

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Container Traffic Not Bound To Host Interface	/docker-compose.yml: 7	Incoming container traffic should be bound to a specific host interface
	Healthcheck Not Set	/docker-compose.yml: 3	Check containers periodically to see if they are running properly.
	Host Namespace is Shared	/docker-compose.yml: 3	The hosts process namespace should not be shared by containers
	Memory Not Limited	/docker-compose.yml: 3	Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than t...
	Networks Not Set	/docker-compose.yml: 3	Setting networks in services ensures you are not using dockers default bridge (docker0), which shares traffic bewteen all containers.
	Privileged Ports Mapped In Container	/docker-compose.yml: 7	Privileged ports (1 to 1023) should not be mapped. Also you should drop net_bind_service linux capability from the container unless you absolutely ...
	Security Opt Not Set	/docker-compose.yml: 3	Attribute 'security_opt' should be defined.
	Unpinned Actions Full Length Commit SHA	/ci.yml: 18	Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps...
	Container Capabilities Unrestricted	/docker-compose.yml: 3	Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessa...
	Cpus Not Limited	/docker-compose.yml: 3	CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests
	Healthcheck Instruction Missing	/Dockerfile: 1	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working