← Scan another repo

github.com/bregman-arie/devops-exercises

@ 9e49ef97f163

Submitted 8/4/2026, 10:25:55 AM · Status: ok

Risk grade
F
100 / 100
Findings
124
0 critical18 high83 medium23 low0 info0 on CISA KEV0ATT&CK
Showing 124 of 124 findings

Findings

  • Default network should not be created at project level
    The default network which is provided for a project contains multiple insecure firewall rules which allow ingress to the project's infrastructure. Creation of this network should therefore be disabled.
    trivytopics/gcp/exercises/create_project/main.tf:1
  • Prevent binding to privileged ports
    The ports which are lower than 1024 receive and transmit various sensitive and privileged data. Allowing containers to use them can bring serious implications.
    trivytopics/kubernetes/exercises/kustomize_common_labels/someApp/deployment.yml:0
  • Prevent binding to privileged ports
    The ports which are lower than 1024 receive and transmit various sensitive and privileged data. Allowing containers to use them can bring serious implications.
    trivytopics/cicd/solutions/deploy_to_kubernetes/helloworld.yml:1
  • Root file system is not read-only
    An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.
    trivytopics/cicd/solutions/deploy_to_kubernetes/helloworld.yml:20
  • Root file system is not read-only
    An immutable root file system prevents applications from writing to their local disk. This can limit intrusions, as attackers will not be able to tamper with the file system or write foreign executables to disk.
    trivytopics/kubernetes/exercises/kustomize_common_labels/someApp/deployment.yml:18
  • S3 Access block should block public ACL
    S3 buckets should block public ACLs on buckets and any objects they contain. By blocking, PUTs with fail if the object has any public ACL a.
    trivytopics/aws/exercises/s3/new_bucket/terraform/main.tf:1
  • S3 Access block should block public ACL
    S3 buckets should block public ACLs on buckets and any objects they contain. By blocking, PUTs with fail if the object has any public ACL a.
    trivytopics/aws/exercises/s3/new_bucket/terraform/main.tf:17
  • S3 Access block should block public policy
    S3 bucket policy should have block public policy to prevent users from putting a policy that enable public access.
    trivytopics/aws/exercises/s3/new_bucket/terraform/main.tf:1
  • S3 Access block should block public policy
    S3 bucket policy should have block public policy to prevent users from putting a policy that enable public access.
    trivytopics/aws/exercises/s3/new_bucket/terraform/main.tf:17
  • S3 Access Block should Ignore Public Acl
    S3 buckets should ignore public ACLs on buckets and any objects they contain. By ignoring rather than blocking, PUT calls with public ACLs will still be applied but the ACL will be ignored.
    trivytopics/aws/exercises/s3/new_bucket/terraform/main.tf:1
  • S3 Access Block should Ignore Public Acl
    S3 buckets should ignore public ACLs on buckets and any objects they contain. By ignoring rather than blocking, PUT calls with public ACLs will still be applied but the ACL will be ignored.
    trivytopics/aws/exercises/s3/new_bucket/terraform/main.tf:17
  • S3 Access block should restrict public bucket to limit access
    S3 buckets should restrict public policies for the bucket. By enabling, the restrict_public_buckets, only the bucket owner and AWS Services can access if it has a public policy.
    trivytopics/aws/exercises/s3/new_bucket/terraform/main.tf:1
  • S3 Access block should restrict public bucket to limit access
    S3 buckets should restrict public policies for the bucket. By enabling, the restrict_public_buckets, only the bucket owner and AWS Services can access if it has a public policy.
    trivytopics/aws/exercises/s3/new_bucket/terraform/main.tf:17
  • S3 Buckets not publicly accessible through ACL.
    Buckets should not have ACLs that allow public access
    trivytopics/aws/exercises/s3/new_bucket/terraform/main.tf:33
  • S3 encryption should use Customer Managed Keys
    Encryption using AWS keys provides protection for your S3 buckets. To increase control of the encryption and manage factors like rotation use customer managed keys.
    trivytopics/aws/exercises/s3/new_bucket/terraform/main.tf:1
  • S3 encryption should use Customer Managed Keys
    Encryption using AWS keys provides protection for your S3 buckets. To increase control of the encryption and manage factors like rotation use customer managed keys.
    trivytopics/aws/exercises/s3/new_bucket/terraform/main.tf:17
  • Unencrypted S3 bucket.
    S3 Buckets should be encrypted to protect the data that is stored within them if access is compromised.
    trivytopics/aws/exercises/s3/new_bucket/terraform/main.tf:1
  • Unencrypted S3 bucket.
    S3 Buckets should be encrypted to protect the data that is stored within them if access is compromised.
    trivytopics/aws/exercises/s3/new_bucket/terraform/main.tf:17

This report is public.