Story #16826: WIP replace mongo-express

[marob]

No description provided.

[coderabbitai]

Important

Draft PR not reviewed

Draft PRs are not automatically reviewed by default.

• Trigger a manual review

To automatically review draft PRs, update your CodeRabbit configuration:

reviews:
  auto_review:
    drafts: true

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}

[vitam-prg]

Checkmarx One – Scan Summary & Details – be4d8518-046c-4ec4-986f-f93639be29b8

---

New Issues (13)

Checkmarx found the following issues in this Pull Request

#	Severity	Issue	Source File / Package	Checkmarx Insight
1		Passwords And Secrets - Password in URL	/mongo_dev.yml: 32	details Query to find passwords and secrets in infrastructure code.
2		Passwords And Secrets - Password in URL	/mongo_dev.yml: 48	details Query to find passwords and secrets in infrastructure code.
3		Container Capabilities Unrestricted	/docker-compose.yml: 3	details Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnec...
4		Container Capabilities Unrestricted	/mongo_dev.yml: 35	details Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnec...
5		Container Traffic Not Bound To Host Interface	/mongo_dev.yml: 39	details Incoming container traffic should be bound to a specific host interface
6		Healthcheck Not Set	/mongo_dev.yml: 35	details Check containers periodically to see if they are running properly.
7		Healthcheck Not Set	/docker-compose.yml: 3	details Check containers periodically to see if they are running properly.
8		Memory Not Limited	/docker-compose.yml: 3	details Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than ...
9		Security Opt Not Set	/docker-compose.yml: 3	details Attribute 'security_opt' should be defined.
10		Security Opt Not Set	/mongo_dev.yml: 35	details Attribute 'security_opt' should be defined.
11		Shared Host Network Namespace	/docker-compose.yml: 5	details Container should not share the host network namespace
12		Use_Of_Hardcoded_Password	ui/ui-frontend/proxy.conf.js: 21	details The application uses the hard-coded password "changeme" for authentication purposes, either using it to verify users' identities, or to access ano... Attack Vector
13		Cpus Not Limited	/docker-compose.yml: 3	details CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests

---

Fixed Issues (10)

Great job! The following issues were fixed in this Pull Request

Severity	Issue	Source File / Package
	Passwords And Secrets - Generic Password	/docker-compose.yml: 37
	Passwords And Secrets - Generic Password	/mongo_dev.yml: 33
	Passwords And Secrets - Password in URL	/mongo_dev.yml: 34
	Container Capabilities Unrestricted	/docker-compose.test.yml: 2
	Container Capabilities Unrestricted	/docker-compose.yml: 2
	Healthcheck Not Set	/docker-compose.test.yml: 2
	Security Opt Not Set	/docker-compose.test.yml: 2
	Security Opt Not Set	/docker-compose.yml: 2
	Shared Host Network Namespace	/docker-compose.yml: 7
	Shared Host Network Namespace	/docker-compose.test.yml: 5

---

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR