diff --git a/docker-compose.local.yml b/docker-compose.local.yml index 83cdf56..6426494 100644 --- a/docker-compose.local.yml +++ b/docker-compose.local.yml @@ -6,7 +6,7 @@ services: context: . dockerfile: Dockerfile.local ports: - - "127.0.0.1:8080:8080" + - "0.0.0.0:8080:8080" environment: - ORCHARD_SERVER_HOST=0.0.0.0 - ORCHARD_SERVER_PORT=8080 diff --git a/kics.config b/kics.config index 432bfa4..31e8a6f 100644 --- a/kics.config +++ b/kics.config @@ -43,3 +43,9 @@ exclude-queries: # Reason: LOCAL DEVELOPMENT ONLY. Related to above - security_opt is not set # on database services because no-new-privileges breaks them. - 610e266e-6c12-4bca-9925-1ed0cd29742b + + # Container Traffic Not Bound To Host Interface (MEDIUM) + # Reason: LOCAL DEVELOPMENT ONLY. The orchard-server port is bound to 0.0.0.0 + # to allow testing from other machines on the local network. This is only in + # docker-compose.local.yml, not production deployments. + - 451d79dc-0588-476a-ad03-3c7f0320abb3