Image Without Digest @ /deploy/k8s/base/community/deployment.yaml

[AaronZhouYu]

Checkmarx (IaC-Security): Image Without Digest
Checkmarx Project: AaronZhouYu/TotallySecureApp
Repository URL: https://github.com/AaronZhouYu/TotallySecureApp
Branch: main
Scan ID: d9fa6dd5-d23b-4436-b75a-41a016305f39

---

Images should be specified together with their digests to ensure integrity

Locations:

Result #1:
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[29,0]
    Expected value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-java}}.image should specify the image with a digest
    Actual value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-java}}.image does not include an image digest
    Review result in Checkmarx One: Image Without Digest

Result #2:
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[17,0]
    Expected value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-postgres}}.image should specify the image with a digest
    Actual value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-postgres}}.image does not include an image digest
    Review result in Checkmarx One: Image Without Digest

Result #3:
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[23,0]
    Expected value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-mongo}}.image should specify the image with a digest
    Actual value: metadata.name={{crapi-community}}.spec.template.spec.initContainers.name={{wait-for-mongo}}.image does not include an image digest
    Review result in Checkmarx One: Image Without Digest

Result #4:
Severity: LOW
State: TO_VERIFY
Status: RECURRENT
    File: /deploy/k8s/base/community/deployment.yaml[36,0]
    Expected value: metadata.name={{crapi-community}}.spec.template.spec.containers.name={{crapi-community}}.image should specify the image with a digest
    Actual value: metadata.name={{crapi-community}}.spec.template.spec.containers.name={{crapi-community}}.image does not include an image digest
    Review result in Checkmarx One: Image Without Digest