KICS #245
Annotations
11 warnings
|
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
KICS scan:
charts/dim/templates/cronjob-processes.yaml#L38
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
KICS scan:
charts/dim/templates/deployment.yaml#L40
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
KICS scan:
charts/dim/templates/cronjob-processes.yaml#L38
Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls
|
|
KICS scan:
charts/dim/templates/deployment.yaml#L40
Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls
|
|
KICS scan:
charts/dim/templates/cronjob-processes.yaml#L36
Service Account Tokens are automatically mounted even if not necessary
|
|
KICS scan:
charts/dim/templates/deployment.yaml#L39
Service Account Tokens are automatically mounted even if not necessary
|
|
KICS scan:
charts/dim/templates/cronjob-processes.yaml#L21
Cronjobs must have a configured deadline, which means the attribute 'startingDeadlineSeconds' must be defined
|
|
KICS scan:
charts/dim/templates/deployment.yaml#L33
Deployments should be assigned with a PodDisruptionBudget to ensure high availability
|
|
KICS scan:
charts/dim/templates/deployment.yaml#L40
Image Pull Policy of the container must be defined and set to Always
|
|
KICS scan:
charts/dim/templates/cronjob-processes.yaml#L38
Image Pull Policy of the container must be defined and set to Always
|
Loading