Skip to content

Demo-Code02 - Add demo files with intentional security vulnerabilities for GitHub A… #138

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
CalinL wants to merge 1 commit into
base: main
Choose a base branch
from

Add demo files with intentional security vulnerabilities for GitHub A…

8434868
Select commit
Loading
Failed to load commit list.
Open

Demo-Code02 - Add demo files with intentional security vulnerabilities for GitHub A… #138

Add demo files with intentional security vulnerabilities for GitHub A…
8434868
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / defsec failed Feb 10, 2026 in 4s

5 new alerts including 5 errors

New alerts in code changed by this pull request

  • 5 errors

See annotations below for details.

View all branch alerts.

Annotations

Check failure on line 64 in devsecops-demo/example-02.tf

See this annotation in the file changed.

Code scanning / defsec

An inbound network security rule allows traffic from /0. Error

Security group rule allows ingress from public internet.

Check failure on line 64 in devsecops-demo/example-02.tf

See this annotation in the file changed.

Code scanning / defsec

An inbound network security rule allows traffic from /0. Error

Security group rule allows ingress from public internet.

Check failure on line 64 in devsecops-demo/example-02.tf

See this annotation in the file changed.

Code scanning / defsec

An inbound network security rule allows traffic from /0. Error

Security group rule allows ingress from public internet.

Check failure on line 64 in devsecops-demo/example-02.tf

See this annotation in the file changed.

Code scanning / defsec

SSH access should not be accessible from the Internet, should be blocked on port 22 Error

Security group rule allows ingress to SSH port from multiple public internet addresses.

Check failure on line 129 in devsecops-demo/example-02.tf

See this annotation in the file changed.

Code scanning / defsec

Password authentication should be disabled on Azure virtual machines Error

Linux virtual machine allows password authentication.