Picpay Challenge

[elisiomualumene]

No description provided.

[RicardoZandonaiPicPay]

Checkmarx One – Scan Summary & Details – ca5e43ea-0dc8-4e40-86cc-077488036f70

New Issues

Severity	Issue	Source File / Package	Checkmarx Insight
	CVE-2023-45288	Go-golang.org/x/net-v0.20.0	Vulnerable Package
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 1	A user should be specified in the dockerfile, otherwise the image will run as root
	Missing User Instruction	/Dockerfile: 11	A user should be specified in the dockerfile, otherwise the image will run as root
	Reflected_XSS	/services/frontend/js/app.js: 77	Attack Vector
	Reflected_XSS	/services/frontend/js/app.js: 56	Attack Vector
	Reflected_XSS	/services/frontend/js/app.js: 125	Attack Vector
	Add Instead of Copy	/Dockerfile: 5	Using ADD to load external installation scripts could lead to an evil web server leveraging this and loading a malicious script.
	Container Traffic Not Bound To Host Interface	/docker-compose.yaml: 26	Incoming container traffic should be bound to a specific host interface
	Container Traffic Not Bound To Host Interface	/docker-compose.yaml: 17	Incoming container traffic should be bound to a specific host interface
	Container Traffic Not Bound To Host Interface	/docker-compose.yaml: 6	Incoming container traffic should be bound to a specific host interface
	Container Traffic Not Bound To Host Interface	/docker-compose.yaml: 35	Incoming container traffic should be bound to a specific host interface
	Healthcheck Not Set	/docker-compose.yaml: 14	Check containers periodically to see if they are running properly.
	Healthcheck Not Set	/docker-compose.yaml: 23	Check containers periodically to see if they are running properly.
	Healthcheck Not Set	/docker-compose.yaml: 32	Check containers periodically to see if they are running properly.
	Image Version Not Explicit	/Dockerfile: 11	Always tag the version of an image explicitly
	Memory Not Limited	/docker-compose.yaml: 23	Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than t...
	Memory Not Limited	/docker-compose.yaml: 32	Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than t...
	Memory Not Limited	/docker-compose.yaml: 14	Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than t...
	Security Opt Not Set	/docker-compose.yaml: 14	Attribute 'security_opt' should be defined.
	Security Opt Not Set	/docker-compose.yaml: 23	Attribute 'security_opt' should be defined.
	Security Opt Not Set	/docker-compose.yaml: 32	Attribute 'security_opt' should be defined.
	Container Capabilities Unrestricted	/docker-compose.yaml: 23	Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessa...
	Container Capabilities Unrestricted	/docker-compose.yaml: 32	Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessa...
	Container Capabilities Unrestricted	/docker-compose.yaml: 14	Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessa...
	Cpus Not Limited	/docker-compose.yaml: 32	CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests
	Cpus Not Limited	/docker-compose.yaml: 14	CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests
	Cpus Not Limited	/docker-compose.yaml: 23	CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests
	Healthcheck Instruction Missing	/Dockerfile: 1	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working
	Healthcheck Instruction Missing	/Dockerfile: 1	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working
	Healthcheck Instruction Missing	/Dockerfile: 11	Ensure that HEALTHCHECK is being used. The HEALTHCHECK instruction tells Docker how to test a container to check that it is still working

Fixed Issues

Severity	Issue	Source File / Package
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Missing User Instruction	/Dockerfile: 1
	Add Instead of Copy	/Dockerfile: 3
	Add Instead of Copy	/Dockerfile: 3
	Add Instead of Copy	/Dockerfile: 3
	Container Traffic Not Bound To Host Interface	/docker-compose.yaml: 18
	Container Traffic Not Bound To Host Interface	/docker-compose.yaml: 12
	Container Traffic Not Bound To Host Interface	/docker-compose.yaml: 5
	Cx65603961-769c	Npm-debug-2.6.9
	Healthcheck Not Set	/docker-compose.yaml: 16
	Healthcheck Not Set	/docker-compose.yaml: 10
	Healthcheck Not Set	/docker-compose.yaml: 22
	Host Namespace is Shared	/docker-compose.yaml: 3
	Host Namespace is Shared	/docker-compose.yaml: 22
	Host Namespace is Shared	/docker-compose.yaml: 10
	Host Namespace is Shared	/docker-compose.yaml: 16
	Image Version Using 'latest'	/Dockerfile: 1
	Memory Not Limited	/docker-compose.yaml: 16
	Memory Not Limited	/docker-compose.yaml: 10
	Memory Not Limited	/docker-compose.yaml: 22
	NPM Install Command Without Pinned Version	/Dockerfile: 4
	Networks Not Set	/docker-compose.yaml: 22
	Not Using JSON In CMD And ENTRYPOINT Arguments	/Dockerfile: 6
	Security Opt Not Set	/docker-compose.yaml: 22
	Security Opt Not Set	/docker-compose.yaml: 10
	Security Opt Not Set	/docker-compose.yaml: 16
	Container Capabilities Unrestricted	/docker-compose.yaml: 22
	Container Capabilities Unrestricted	/docker-compose.yaml: 10
	Container Capabilities Unrestricted	/docker-compose.yaml: 16
	Cpus Not Limited	/docker-compose.yaml: 16
	Cpus Not Limited	/docker-compose.yaml: 22
	Cpus Not Limited	/docker-compose.yaml: 10
	Healthcheck Instruction Missing	/Dockerfile: 1
	Healthcheck Instruction Missing	/Dockerfile: 1
	Healthcheck Instruction Missing	/Dockerfile: 1