Skip to content

Add initial deployment configuration files for Azure web app #23

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
CalinL merged 1 commit into from
Apr 21, 2025

Add initial deployment configuration files for Azure web app

5b940ef
Select commit
Loading
Failed to load commit list.
Merged

Add initial deployment configuration files for Azure web app #23

Add initial deployment configuration files for Azure web app
5b940ef
Select commit
Loading
Failed to load commit list.
GitHub Advanced Security / checkov failed Apr 21, 2025 in 6s

1 configuration not found

Warning: Code scanning may not have found all the alerts introduced by this pull request, because 1 configuration present on refs/heads/main was not found:

Actions workflow (MSDO-Microsoft-Security-DevOps.yml)

  • ❓  .github/workflows/MSDO-Microsoft-Security-DevOps.yml:MSDO

New alerts in code changed by this pull request

  • 181 errors
  • 60 notes

See annotations below for details.

View all branch alerts.

Annotations

Check notice on line 29 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure ACR admin account is disabled Note

Ensure ACR admin account is disabled

Check failure on line 29 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Enable vulnerability scanning for container images. Error

Enable vulnerability scanning for container images.

Check failure on line 29 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure container image quarantine, scan, and mark images verified Error

Ensure container image quarantine, scan, and mark images verified

Check notice on line 29 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure ACR set to disable public networking Note

Ensure ACR set to disable public networking

Check failure on line 42 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure the App Service Plan is zone redundant Error

Ensure the App Service Plan is zone redundant

Check failure on line 82 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure the web app has 'Client Certificates (Incoming client certificates)' set Error

Ensure the web app has 'Client Certificates (Incoming client certificates)' set

Check failure on line 82 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure FTP deployments are disabled Error

Ensure FTP deployments are disabled

Check failure on line 82 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure that 'HTTP Version' is the latest if used to run the web app Error

Ensure that 'HTTP Version' is the latest if used to run the web app

Check failure on line 82 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service Error

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service

Check notice on line 82 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure App Service has a minimum number of instances for failover Note

Ensure App Service has a minimum number of instances for failover

Check failure on line 82 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure web app is using the latest version of TLS encryption Error

Ensure web app is using the latest version of TLS encryption

Check failure on line 82 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure that Azure Web App public network access is disabled Error

Ensure that Azure Web App public network access is disabled

Check failure on line 82 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure that App Service configures health check Error

Ensure that App Service configures health check

Check notice on line 82 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service Slot Note

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service Slot

Check failure on line 82 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure that 'HTTP Version' is the latest, if used to run the Function app Error

Ensure that 'HTTP Version' is the latest, if used to run the Function app

Check failure on line 82 in infra/resources.bicep

See this annotation in the file changed.

Code scanning / checkov

Ensure that Function apps is only accessible over HTTPS Error

Ensure that Function apps is only accessible over HTTPS

Check notice on line 2 in samples/Dockerfile

See this annotation in the file changed.

Code scanning / checkov

Ensure that HEALTHCHECK instructions have been added to container images Note

Ensure that HEALTHCHECK instructions have been added to container images

Check notice on line 2 in samples/Dockerfile

See this annotation in the file changed.

Code scanning / checkov

Ensure that a user for the container has been created Note

Ensure that a user for the container has been created

Check failure on line 19 in samples/insecure_arm.json

See this annotation in the file changed.

Code scanning / checkov

Ensure the App Service Plan is zone redundant Error

Ensure the App Service Plan is zone redundant

Check failure on line 32 in samples/insecure_arm.json

See this annotation in the file changed.

Code scanning / checkov

Ensure the web app has 'Client Certificates (Incoming client certificates)' set Error

Ensure the web app has 'Client Certificates (Incoming client certificates)' set

Check failure on line 32 in samples/insecure_arm.json

See this annotation in the file changed.

Code scanning / checkov

Ensure FTP deployments are disabled Error

Ensure FTP deployments are disabled

Check failure on line 32 in samples/insecure_arm.json

See this annotation in the file changed.

Code scanning / checkov

Ensure that 'HTTP Version' is the latest if used to run the web app Error

Ensure that 'HTTP Version' is the latest if used to run the web app

Check failure on line 32 in samples/insecure_arm.json

See this annotation in the file changed.

Code scanning / checkov

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service Error

Ensure web app redirects all HTTP traffic to HTTPS in Azure App Service

Check failure on line 32 in samples/insecure_arm.json

See this annotation in the file changed.

Code scanning / checkov

Ensure that Register with Azure Active Directory is enabled on App Service Error

Ensure that Register with Azure Active Directory is enabled on App Service

Check notice on line 32 in samples/insecure_arm.json

See this annotation in the file changed.

Code scanning / checkov

Ensure that Managed identity provider is enabled for web apps Note

Ensure that Managed identity provider is enabled for web apps