IAM

Rule Name	AppSec Rule ID	Severity
Alibaba Cloud RAM password policy does not have a minimum of 14 characters misconfiguration detected in code	APPSEC_ALI_13	LOW
Alibaba Cloud RAM password policy does not have a number misconfiguration detected in code	APPSEC_ALI_14	MEDIUM
Alibaba Cloud RAM password policy does not have a symbol misconfiguration detected in code	APPSEC_ALI_15	LOW
Alibaba Cloud RAM password policy does not expire in 90 days misconfiguration detected in code	APPSEC_ALI_16	LOW
Alibaba Cloud RAM password policy does not have a lowercase character misconfiguration detected in code	APPSEC_ALI_17	LOW
Alibaba Cloud RAM password policy does not prevent password reuse misconfiguration detected in code	APPSEC_ALI_18	MEDIUM
Alibaba Cloud RAM password policy does not have an uppercase character misconfiguration detected in code	APPSEC_ALI_19	MEDIUM
Alibaba Cloud RAM password policy maximal login attempts is more than 4 misconfiguration detected in code	APPSEC_ALI_23	MEDIUM
Alibaba Cloud RAM does not enforce MFA misconfiguration detected in code	APPSEC_ALI_24	LOW
Alibaba Cloud KMS Key Rotation is disabled misconfiguration detected in code	APPSEC_ALI_27	LOW
Alibaba Cloud KMS Key is disabled misconfiguration detected in code	APPSEC_ALI_28	LOW
AWS IAM policies that allow full administrative privileges are created misconfiguration detected in code	APPSEC_AWS_1	LOW
AWS Customer Master Key (CMK) rotation is not enabled misconfiguration detected in code	APPSEC_AWS_7	LOW
AWS IAM password policy does not expire in 90 days misconfiguration detected in code	APPSEC_AWS_9	LOW
AWS IAM password policy does not have a minimum of 14 characters misconfiguration detected in code	APPSEC_AWS_10	LOW
AWS IAM password policy does not have a lowercase character misconfiguration detected in code	APPSEC_AWS_11	LOW
AWS IAM password policy does not have a number misconfiguration detected in code	APPSEC_AWS_12	LOW
AWS IAM password policy does allow password reuse misconfiguration detected in code	APPSEC_AWS_13	HIGH
AWS IAM password policy does not have a symbol misconfiguration detected in code	APPSEC_AWS_14	LOW
AWS IAM password policy does not have an uppercase character misconfiguration detected in code	APPSEC_AWS_15	LOW
AWS Private ECR repository policy is overly permissive misconfiguration detected in code	APPSEC_AWS_32	MEDIUM
AWS KMS Key policy overly permissive misconfiguration detected in code	APPSEC_AWS_33	MEDIUM
AWS IAM policy attached to users misconfiguration detected in code	APPSEC_AWS_40	LOW
AWS IAM policy documents do not allow * (asterisk) as a statement's action misconfiguration detected in code	APPSEC_AWS_49	HIGH
AWS IAM role allows all services or principals to be assumed misconfiguration detected in code	APPSEC_AWS_60	HIGH
AWS IAM policy allows all principals used by any AWS service from target account to assume role misconfiguration detected in code	APPSEC_AWS_61	HIGH
AWS IAM policies that allow full "-" administrative privileges are created misconfiguration detected in code	APPSEC_AWS_62	HIGH
AWS IAM policy documents allow * (asterisk) as a statement's action misconfiguration detected in code	APPSEC_AWS_63	HIGH
SQS policy allows all actions misconfiguration detected in code	APPSEC_AWS_72	LOW
Credentials exposure actions return credentials in an API response misconfiguration detected in code	APPSEC_AWS_107	LOW
Data exfiltration allowed without resource constraints misconfiguration detected in code	APPSEC_AWS_108	LOW
Resource exposure allows modification of policies and exposes resources misconfiguration detected in code	APPSEC_AWS_109	LOW
IAM policies allow privilege escalation misconfiguration detected in code	APPSEC_AWS_110	MEDIUM
Write access allowed without constraint misconfiguration detected in code	APPSEC_AWS_111	LOW
Respective logs of Amazon RDS are disabled misconfiguration detected in code	APPSEC_AWS_129	LOW
RDS database does not have IAM authentication enabled misconfiguration detected in code	APPSEC_AWS_161	MEDIUM
AWS RDS cluster not configured with IAM authentication misconfiguration detected in code	APPSEC_AWS_162	LOW
Glacier Vault access policy is public and not restricted to specific services or principals misconfiguration detected in code	APPSEC_AWS_167	MEDIUM
SQS queue policy is public and access is not restricted to specific services or principals misconfiguration detected in code	APPSEC_AWS_168	HIGH
SNS topic policy is public and access is not restricted to specific services or principals misconfiguration detected in code	APPSEC_AWS_169	MEDIUM
AWS AMI launch permissions are not limited misconfiguration detected in code	APPSEC_AWS_205	LOW
AWS Key Management Service (KMS) key is disabled misconfiguration detected in code	APPSEC_AWS_227	LOW
AWS Execution Role ARN and Task Role ARN are different in ECS Task definitions misconfiguration detected in code	APPSEC_AWS_249	LOW
AWS Codecommit branch changes has less than 2 approvals misconfiguration detected in code	APPSEC_AWS_257	LOW
AWS Lambda function URL AuthType set to NONE misconfiguration detected in code	APPSEC_AWS_258	MEDIUM
Access is not controlled through Single Sign-On (SSO) misconfiguration detected in code	APPSEC_AWS_273	LOW
AWS AdministratorAccess policy is used by IAM roles, users, or groups misconfiguration detected in code	APPSEC_AWS_274	HIGH
IAM policy uses the AWS AdministratorAccess policy misconfiguration detected in code	APPSEC_AWS_275	HIGH
IAM Policy Document Allows All or Any AWS Principal Permissions to Resources misconfiguration detected in code	APPSEC_AWS_283	HIGH
AWS IAM Policy permission may cause privilege escalation misconfiguration detected in code	APPSEC_AWS_286	MEDIUM
IAM policies allow exposure of credentials misconfiguration detected in code	APPSEC_AWS_287	HIGH
IAM policies allow data exfiltration misconfiguration detected in code	APPSEC_AWS_288	HIGH
IAM policies allow permissions management or resource exposure without constraints misconfiguration detected in code	APPSEC_AWS_289	HIGH
IAM policies allow write access without constraints misconfiguration detected in code	APPSEC_AWS_290	HIGH
AWS Lambda Function resource-based policy is overly permissive misconfiguration detected in code	APPSEC_AWS_301	LOW
Authorization type for API GatewayV2 routes is not specified misconfiguration detected in code	APPSEC_AWS_309	MEDIUM
AWS Access key enabled on root account misconfiguration detected in code	APPSEC_AWS_348	HIGH
IAM policy document allows all resources with restricted actions misconfiguration detected in code	APPSEC_AWS_355	HIGH
Data source IAM policy document allows all resources with restricted actions misconfiguration detected in code	APPSEC_AWS_356	HIGH
AWS GitHub Actions OIDC authorization policies allow for unsafe claims or claim order misconfiguration detected in code	APPSEC_AWS_358	HIGH
AWS Neptune Cluster not configured with IAM authentication misconfiguration detected in code	APPSEC_AWS_359	LOW
Permissions delegated to AWS services for AWS Lambda functions are not limited by SourceArn or SourceAccount misconfiguration detected in code	APPSEC_AWS_364	HIGH
AWS Cognito identity pool allows unauthenticated guest access misconfiguration detected in code	APPSEC_AWS_366	MEDIUM
AWS Security Group allows unrestricted egress traffic misconfiguration detected in code	APPSEC_AWS_382	LOW
AWS GitHub Actions OIDC authorization policies allow for unsafe claims or claim order on IAM role misconfiguration detected in code	APPSEC_AWS_393	HIGH
Azure AKS enable role-based access control (RBAC) not enforced misconfiguration detected in code	APPSEC_AZURE_5	MEDIUM
Azure AKS cluster configured with overly permissive API server access misconfiguration detected in code	APPSEC_AZURE_6	LOW
Azure App Service Web app authentication is off misconfiguration detected in code	APPSEC_AZURE_13	LOW
App Service is not registered with an Azure Active Directory account misconfiguration detected in code	APPSEC_AZURE_16	MEDIUM
Azure subscriptions with custom roles does not have minimum permissions misconfiguration detected in code	APPSEC_AZURE_39	HIGH
Azure Function App authentication is off misconfiguration detected in code	APPSEC_AZURE_56	LOW
Azure App Service Web app doesn't have a Managed Service Identity misconfiguration detected in code	APPSEC_AZURE_71	LOW
AKS does not use Azure policies add-on misconfiguration detected in code	APPSEC_AZURE_116	LOW
Active Directory is not used for authentication for Service Fabric misconfiguration detected in code	APPSEC_AZURE_125	LOW
Azure ACR admin account is enabled misconfiguration detected in code	APPSEC_AZURE_137	LOW
Azure ACR enables anonymous image pulling misconfiguration detected in code	APPSEC_AZURE_138	LOW
Azure CosmosDB does not have Local Authentication disabled misconfiguration detected in code	APPSEC_AZURE_140	LOW
Azure Kubernetes Service (AKS) local admin account is enabled misconfiguration detected in code	APPSEC_AZURE_141	LOW
Azure SQL on Virtual Machine (Linux) with basic authentication misconfiguration detected in code	APPSEC_AZURE_149	LOW
Web PubSub Without Managed Identities misconfiguration detected in code	APPSEC_AZURE_176	MEDIUM
Linux VM Without SSH Key misconfiguration detected in code	APPSEC_AZURE_178	HIGH
Data Explorer Not Using Managed Identities misconfiguration detected in code	APPSEC_AZURE_181	MEDIUM
App Configuration Using Local Authentication misconfiguration detected in code	APPSEC_AZURE_184	HIGH
Azure Event Grid Topic Managed Identity Provider misconfiguration detected in code	APPSEC_AZURE_191	MEDIUM
Azure Event Grid Topic Local Authentication Enabled misconfiguration detected in code	APPSEC_AZURE_192	MEDIUM
Azure Event Grid Domain Managed Identity Provider is Disabled misconfiguration detected in code	APPSEC_AZURE_194	MEDIUM
Azure Event Grid Domain Local Authentication Enabled misconfiguration detected in code	APPSEC_AZURE_195	MEDIUM
Azure Service Bus Without Managed Identity Provider misconfiguration detected in code	APPSEC_AZURE_202	MEDIUM
Azure Service Bus with Local Authentication Enabled misconfiguration detected in code	APPSEC_AZURE_203	LOW
Azure Cognitive Search Without Managed Identities misconfiguration detected in code	APPSEC_AZURE_207	MEDIUM
Local users used for Azure Storage misconfiguration detected in code	APPSEC_AZURE_244	LOW
Azure GitHub Actions OIDC trust policy is insecurely configured misconfiguration detected in code	APPSEC_AZURE_249	HIGH
GCP Kubernetes Engine Clusters have Legacy Authorization enabled misconfiguration detected in code	APPSEC_GCP_7	LOW
GCP Kubernetes engine clusters have client certificate disabled misconfiguration detected in code	APPSEC_GCP_13	LOW
GCP Kubernetes Engine Clusters have pod security policy disabled misconfiguration detected in code	APPSEC_GCP_24	LOW
GCP VM instance configured with default service account misconfiguration detected in code	APPSEC_GCP_30	LOW
GCP VM instance using a default service account with Cloud Platform access scope misconfiguration detected in code	APPSEC_GCP_31	MEDIUM
GCP IAM user are assigned Service Account User or Service Account Token creator roles at project level misconfiguration detected in code	APPSEC_GCP_41	HIGH
GCP IAM Service account does have admin privileges misconfiguration detected in code	APPSEC_GCP_42	HIGH
Roles impersonate or manage Service Accounts used at folder level misconfiguration detected in code	APPSEC_GCP_44	HIGH
Roles impersonate or manage Service Accounts used at organizational level misconfiguration detected in code	APPSEC_GCP_45	HIGH
Default Service Account is used at project level misconfiguration detected in code	APPSEC_GCP_46	HIGH
Default Service Account is used at organization level misconfiguration detected in code	APPSEC_GCP_47	HIGH
Default Service Account is used at folder level misconfiguration detected in code	APPSEC_GCP_48	HIGH
GCP IAM primitive roles are in use misconfiguration detected in code	APPSEC_GCP_49	LOW
Kubernetes RBAC users are not managed with Google Groups for GKE misconfiguration detected in code	APPSEC_GCP_65	LOW
GCP Kubernetes Engine Clusters have binary authorization disabled misconfiguration detected in code	APPSEC_GCP_66	LOW
GCP Memorystore for Redis has AUTH disabled misconfiguration detected in code	APPSEC_GCP_95	MEDIUM
KMS policy allows public access misconfiguration detected in code	APPSEC_GCP_112	HIGH
IAM policy defines public access misconfiguration detected in code	APPSEC_GCP_113	HIGH
Basic roles utilized at the organization level misconfiguration detected in code	APPSEC_GCP_115	HIGH
Basic roles used at the folder level misconfiguration detected in code	APPSEC_GCP_116	MEDIUM
Project level utilization of basic roles misconfiguration detected in code	APPSEC_GCP_117	HIGH
IAM workload identity pool provider is not restricted misconfiguration detected in code	APPSEC_GCP_118	HIGH
GCP GitHub Actions OIDC trust policy is insecurely configured misconfiguration detected in code	APPSEC_GCP_125	HIGH
GitHub pull request configurations defined in Terraform have less than 2 approvals misconfiguration detected in code	APPSEC_GIT_5	MEDIUM
GitHub repository defined in Terraform does not have GPG signatures for all commits misconfiguration detected in code	APPSEC_GIT_6	LOW
Gitlab project defined in Terraform requires fewer than 2 approvals misconfiguration detected in code	APPSEC_GLB_1	MEDIUM
Gitlab branch protection rules defined in Terraform allow force push misconfiguration detected in code	APPSEC_GLB_2	MEDIUM
Gitlab project defined in Terraform does not require signed commits misconfiguration detected in code	APPSEC_GLB_4	LOW
Containers run with AllowPrivilegeEscalation based on Pod Security Policy setting misconfiguration detected in code	APPSEC_K8S_5	MEDIUM
Secrets used as environment variables misconfiguration detected in code	APPSEC_K8S_35	LOW
Service account tokens are not mounted where necessary misconfiguration detected in code	APPSEC_K8S_38	LOW
Default service accounts are actively used misconfiguration detected in code	APPSEC_K8S_41	LOW
Default Kubernetes service accounts are actively used by bounding to a role or cluster role misconfiguration detected in code	APPSEC_K8S_42	LOW
Wildcard use is not minimized in Roles and ClusterRoles misconfiguration detected in code	APPSEC_K8S_49	MEDIUM
The --anonymous-auth argument is not set to False for API server misconfiguration detected in code	APPSEC_K8S_68	LOW
The --basic-auth-file argument is Set misconfiguration detected in code	APPSEC_K8S_69	LOW
The --token-auth-file argument is Set misconfiguration detected in code	APPSEC_K8S_70	LOW
The --kubelet-client-certificate and --kubelet-client-key arguments are not set appropriately misconfiguration detected in code	APPSEC_K8S_72	HIGH
The --kubelet-certificate-authority argument is not set appropriately misconfiguration detected in code	APPSEC_K8S_73	HIGH
The --authorization-mode argument is set to AlwaysAllow for Kubelet misconfiguration detected in code	APPSEC_K8S_74	MEDIUM
The --authorization-mode argument does not include node misconfiguration detected in code	APPSEC_K8S_75	MEDIUM
The --authorization-mode argument does not include RBAC misconfiguration detected in code	APPSEC_K8S_77	LOW
The admission control plugin SecurityContextDeny is set if PodSecurityPolicy is used misconfiguration detected in code	APPSEC_K8S_81	LOW
The admission control plugin ServiceAccount is not set misconfiguration detected in code	APPSEC_K8S_82	LOW
The admission control plugin PodSecurityPolicy is not set misconfiguration detected in code	APPSEC_K8S_84	LOW
The admission control plugin NodeRestriction is not set misconfiguration detected in code	APPSEC_K8S_85	MEDIUM
The --service-account-lookup argument is not set to true misconfiguration detected in code	APPSEC_K8S_96	HIGH
The --service-account-key-file argument is not set appropriately misconfiguration detected in code	APPSEC_K8S_97	MEDIUM
The --etcd-cafile argument is not set appropriately misconfiguration detected in code	APPSEC_K8S_102	HIGH
The --use-service-account-credentials argument for controller managers is not set to True misconfiguration detected in code	APPSEC_K8S_108	HIGH
The --service-account-private-key-file argument for controller managers is not set appropriately misconfiguration detected in code	APPSEC_K8S_110	HIGH
The --root-ca-file argument for controller managers is not set appropriately misconfiguration detected in code	APPSEC_K8S_111	HIGH
The RotateKubeletServerCertificate argument for controller managers is not set to True misconfiguration detected in code	APPSEC_K8S_112	MEDIUM
The --client-cert-auth argument is not set to True misconfiguration detected in code	APPSEC_K8S_117	MEDIUM
The --peer-client-cert-auth argument is not set to True misconfiguration detected in code	APPSEC_K8S_121	HIGH
The --anonymous-auth argument is not set to False for Kubelet misconfiguration detected in code	APPSEC_K8S_138	MEDIUM
The --authorization-mode argument is set to AlwaysAllow for API server misconfiguration detected in code	APPSEC_K8S_139	LOW
The --client-ca-file argument for API Servers is not set appropriately misconfiguration detected in code	APPSEC_K8S_140	LOW
The --rotate-certificates argument is set to false misconfiguration detected in code	APPSEC_K8S_149	HIGH
Kubernetes ClusterRoles that grant control over validating or mutating admission webhook configurations are not minimized misconfiguration detected in code	APPSEC_K8S_155	HIGH
Kubernetes ClusterRoles that grant permissions to approve CertificateSigningRequests are not minimized misconfiguration detected in code	APPSEC_K8S_156	HIGH
Kubernetes Roles and ClusterRoles that grant permissions to bind RoleBindings or ClusterRoleBindings are not minimized misconfiguration detected in code	APPSEC_K8S_157	MEDIUM
Kubernetes Roles and ClusterRoles that grant permissions to escalate Roles or ClusterRole are not minimized misconfiguration detected in code	APPSEC_K8S_158	MEDIUM
OCI private keys are hard coded in the provider misconfiguration detected in code	APPSEC_OCI_1	LOW
OCI IAM password policy for local (non-federated) users does not have a lowercase character misconfiguration detected in code	APPSEC_OCI_11	MEDIUM
OCI IAM password policy for local (non-federated) users does not have a number misconfiguration detected in code	APPSEC_OCI_12	MEDIUM
OCI IAM password policy for local (non-federated) users does not have a symbol misconfiguration detected in code	APPSEC_OCI_13	MEDIUM
OCI IAM password policy for local (non-federated) users does not have an uppercase character misconfiguration detected in code	APPSEC_OCI_14	MEDIUM
OCI IAM password policy for local (non-federated) users does not have minimum 14 characters misconfiguration detected in code	APPSEC_OCI_18	MEDIUM
OpenAPI Security object needs to have defined rules in its array and rules should be defined in the securityScheme misconfiguration detected in code	APPSEC_OPENAPI_4	HIGH
OpenAPI Security object for operations, if defined, must define a security scheme, otherwise it should be considered an error misconfiguration detected in code	APPSEC_OPENAPI_5	HIGH
OpenAPI Security requirement not defined in the security definitions misconfiguration detected in code	APPSEC_OPENAPI_6	HIGH
API spec includes a 'password' flow in OAuth2 authentication misconfiguration detected in code	APPSEC_OPENAPI_8	HIGH
Security scopes of operations are not defined in securityDefinition misconfiguration detected in code	APPSEC_OPENAPI_9	MEDIUM
OAuth2 security definitions includes password flow in OpenAPI 2.0 file misconfiguration detected in code	APPSEC_OPENAPI_10	HIGH
OAuth2 password flow in security definitions for OpenAPI 2.0 file misconfiguration detected in code	APPSEC_OPENAPI_11	HIGH
Security definition uses the deprecated implicit flow on OAuth2 misconfiguration detected in code	APPSEC_OPENAPI_12	MEDIUM
Security definitions uses basic auth misconfiguration detected in code	APPSEC_OPENAPI_13	HIGH
Operation Objects Uses 'Implicit' Flow misconfiguration detected in code	APPSEC_OPENAPI_14	MEDIUM
Operation Objects Uses Basic Auth misconfiguration detected in code	APPSEC_OPENAPI_15	HIGH
The global security scope is not defined in the securityDefinitions misconfiguration detected in code	APPSEC_OPENAPI_19	MEDIUM
OpenStack hard coded password, token, or application_credential_secret exists in provider misconfiguration detected in code	APPSEC_OPENSTACK_1	LOW
OpenStack instance use basic credentials misconfiguration detected in code	APPSEC_OPENSTACK_4	LOW
AWS IAM group not in use misconfiguration detected in code	APPSEC2_AWS_14	LOW
Not all IAM users are members of at least one IAM group misconfiguration detected in code	APPSEC2_AWS_21	LOW
IAM User has access to the console misconfiguration detected in code	APPSEC2_AWS_22	MEDIUM
AWS IAM policy allows full administrative privileges misconfiguration detected in code	APPSEC2_AWS_40	MEDIUM
AWS EC2 Instance IAM Role not enabled misconfiguration detected in code	APPSEC2_AWS_41	LOW
AWS S3 buckets are accessible to any authenticated user misconfiguration detected in code	APPSEC2_AWS_43	MEDIUM
AWS Cloudfront Distribution with S3 have Origin Access set to disabled misconfiguration detected in code	APPSEC2_AWS_46	LOW
AWS OpenSearch Fine-grained access control is disabled misconfiguration detected in code	APPSEC2_AWS_52	LOW
The AWS Managed IAMFullAccess IAM policy should not be used misconfiguration detected in code	APPSEC2_AWS_56	HIGH
A Policy is not Defined for KMS Key misconfiguration detected in code	APPSEC2_AWS_64	MEDIUM
AWS API Gateway method lacking authorization or API keys misconfiguration detected in code	APPSEC2_AWS_70	MEDIUM
Azure SQL servers which doesn't have Azure Active Directory admin configured misconfiguration detected in code	APPSEC2_AZURE_7	LOW
Azure SQL server not configured with Active Directory admin authentication misconfiguration detected in code	APPSEC2_AZURE_27	LOW
Azure Container Instance not configured with the managed identity misconfiguration detected in code	APPSEC2_AZURE_30	LOW
Azure Recovery Services vault is not configured with managed identity misconfiguration detected in code	APPSEC2_AZURE_35	LOW
Azure Automation account is not configured with managed identity misconfiguration detected in code	APPSEC2_AZURE_36	LOW
Azure Storage account configured with Shared Key authorization misconfiguration detected in code	APPSEC2_AZURE_40	LOW
Azure Storage account not configured with SAS expiration policy misconfiguration detected in code	APPSEC2_AZURE_41	LOW
Anonymous blob access configured in Azure storage account misconfiguration detected in code	APPSEC2_AZURE_47	MEDIUM
'chpasswd' is used to set or remove passwords misconfiguration detected in code	APPSEC2_DOCKER_17	MEDIUM
GCP Kubernetes Engine Cluster Nodes have default Service account for Project access misconfiguration detected in code	APPSEC2_GCP_1	LOW
There are not only GCP-managed service account keys for each service account misconfiguration detected in code	APPSEC2_GCP_3	LOW
A MySQL database instance allows anyone to connect with administrative privileges misconfiguration detected in code	APPSEC2_GCP_7	LOW
IBM Cloud API key creation is not restricted in account settings in Terraform misconfiguration detected in code	APPSEC2_IBM_3	MEDIUM
IBM Cloud Multi-Factor Authentication (MFA) not enabled at the account level in Terraform misconfiguration detected in code	APPSEC2_IBM_4	MEDIUM
IBM Cloud Service ID creation is not restricted in account settings in Terraform misconfiguration detected in code	APPSEC2_IBM_5	MEDIUM
RoleBinding should not allow privilege escalation to a ServiceAccount or Node on other RoleBinding misconfiguration detected in code	APPSEC2_K8S_1	HIGH
Granting create permissions to nodes/proxy or pods/exec sub resources allows potential privilege escalation misconfiguration detected in code	APPSEC2_K8S_2	HIGH
No ServiceAccount/Node should have impersonate permissions for groups/users/service-accounts misconfiguration detected in code	APPSEC2_K8S_3	HIGH
ServiceAccounts and nodes that can modify services/status may set the status.loadBalancer.ingress.ip field to exploit the unfixed CVE-2020-8554 and launch MiTM attacks against the cluster misconfiguration detected in code	APPSEC2_K8S_4	MEDIUM
No ServiceAccount/Node should be able to read all secrets misconfiguration detected in code	APPSEC2_K8S_5	HIGH
OCI tenancy administrator users are associated with API keys misconfiguration detected in code	APPSEC2_OCI_1	MEDIUM