Secure Code Analysis · ministryofjustice/modernisation-platform-terraform-aws-vm-import@d7693d3

Triggered via schedule July 3, 2023 02:10

main

Status Failure

Total duration 47s

Artifacts –

code-scanning.yml

on: schedule

Matrix: tflint

4 errors and 1 notice

checkov: main.tf#L83

CKV_AWS_290: "Ensure IAM policies does not allow write access without constraints"

checkov: main.tf#L83

CKV_AWS_355: "Ensure no IAM policies documents allow "*" as a statement's resource for restrictable actions"

checkov: main.tf#L83

CKV_AWS_289: "Ensure IAM policies does not allow permissions management / resource exposure without constraints"

checkov: main.tf#L1

CKV_TF_1: "Ensure Terraform module sources use a commit hash"

Consider setting a GITHUB_TOKEN to prevent GitHub api rate limits