Container Capabilities Unrestricted @ /packages/e2e/docker-compose.yml

[electricmonk]

Checkmarx (IaC-Security): Container Capabilities Unrestricted
Checkmarx Project: electricmonk/ts-react-tdd
Repository URL: https://github.com/electricmonk/ts-react-tdd
Branch: main
Scan ID: e0708f2c-1083-45f2-a7cb-929f9b6a0c6c

---

Some capabilities are not needed in certain (or any) containers. Make sure that you only add capabilities that your container needs. Drop unnecessary capabilities as well.

Locations:

Result #1:
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
    File: /packages/e2e/docker-compose.yml[3,0]
    Expected value: Docker compose file to have 'cap_drop' attribute
    Actual value: Docker compose file doesn't have 'cap_drop' attribute. Make sure your container only has necessary capabilities.
    Review result in Checkmarx One: Container Capabilities Unrestricted