updated kubernetes.sh #1102
HariSekhonAnnotations
1 error and 12 warnings
|
Kics / Kics Scan
KICS scan failed with exit code 50
|
|
Kics / Kics Scan
The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, github/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/
|
|
[HIGH] Container Is Privileged:
vagrant-configs/kubernetes/calico.yaml#L3512
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
|
|
[HIGH] Container Is Privileged:
vagrant-configs/kubernetes/calico.yaml#L3521
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
|
|
[HIGH] Container Is Privileged:
vagrant-configs/kubernetes/calico.yaml#L3596
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
|
|
[HIGH] Container Is Privileged:
vagrant-configs/kubernetes/calico.yaml#L3476
Privileged containers lack essential security restrictions and should be avoided by removing the 'privileged' flag or by changing its value to false
|
|
[HIGH] Non Kube System Pod With Host Mount:
kubernetes-configs/jenkins/base/agent.statefulset-DooD.yaml#L231
A non kube-system workload should not have hostPath mounted
|
|
[HIGH] Non Kube System Pod With Host Mount:
kubernetes-configs/jenkins/base/agent.cloud-pod-DooD.yaml#L123
A non kube-system workload should not have hostPath mounted
|
|
[HIGH] Passwords And Secrets - Generic Password:
docker-compose/wordpress.yml#L37
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
kubernetes-configs/jenkins/base/initial-admin-secret.patch.yaml#L34
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
docker-compose/concourse.yml#L44
Query to find passwords and secrets in infrastructure code.
|
|
[HIGH] Passwords And Secrets - Generic Password:
docker-compose/concourse.yml#L27
Query to find passwords and secrets in infrastructure code.
|
|
Kics / Kics Scan
CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/
|