update tests

Signed-off-by: Simar <simar@linux.com>
aquasecurity · Oct 30, 2024 · 5a990bc · 5a990bc
1 parent f64f00e
commit 5a990bc
Show file tree

Hide file tree

Showing 12 changed files with 16 additions and 130 deletions.
diff --git a/integration/testdata/dockerfile-custom-policies.json.golden b/integration/testdata/dockerfile-custom-policies.json.golden
@@ -21,7 +21,7 @@
       "Class": "config",
       "Type": "dockerfile",
       "MisconfSummary": {
-        "Successes": 27,
+        "Successes": 28,
         "Failures": 2,
         "Exceptions": 0
       },

diff --git a/integration/testdata/dockerfile-namespace-exception.json.golden b/integration/testdata/dockerfile-namespace-exception.json.golden
diff --git a/integration/testdata/dockerfile-rule-exception.json.golden b/integration/testdata/dockerfile-rule-exception.json.golden
diff --git a/integration/testdata/dockerfile.json.golden b/integration/testdata/dockerfile.json.golden
@@ -21,7 +21,7 @@
       "Class": "config",
       "Type": "dockerfile",
       "MisconfSummary": {
-        "Successes": 26,
+        "Successes": 27,
         "Failures": 1,
         "Exceptions": 0
       },

diff --git a/integration/testdata/dockerfile_file_pattern.json.golden b/integration/testdata/dockerfile_file_pattern.json.golden
@@ -21,7 +21,7 @@
       "Class": "config",
       "Type": "dockerfile",
       "MisconfSummary": {
-        "Successes": 26,
+        "Successes": 27,
         "Failures": 1,
         "Exceptions": 0
       },

diff --git a/integration/testdata/fixtures/repo/namespace-exception/Dockerfile b/integration/testdata/fixtures/repo/namespace-exception/Dockerfile
diff --git a/integration/testdata/fixtures/repo/namespace-exception/policy/exception.rego b/integration/testdata/fixtures/repo/namespace-exception/policy/exception.rego
diff --git a/integration/testdata/fixtures/repo/rule-exception/Dockerfile b/integration/testdata/fixtures/repo/rule-exception/Dockerfile
diff --git a/integration/testdata/fixtures/repo/rule-exception/policy/exception.rego b/integration/testdata/fixtures/repo/rule-exception/policy/exception.rego
diff --git a/integration/testdata/helm.json.golden b/integration/testdata/helm.json.golden
@@ -21,7 +21,7 @@
       "Class": "config",
       "Type": "helm",
       "MisconfSummary": {
-        "Successes": 80,
+        "Successes": 79,
         "Failures": 14,
         "Exceptions": 0
       },
@@ -890,10 +890,11 @@
           "Namespace": "builtin.kubernetes.KSV117",
           "Query": "data.builtin.kubernetes.KSV117.deny",
           "Resolution": "Do not map the container ports to privileged host ports when starting a container.",
-          "Severity": "HIGH",
+          "Severity": "MEDIUM",
           "PrimaryURL": "https://avd.aquasec.com/misconfig/ksv117",
           "References": [
             "https://kubernetes.io/docs/concepts/security/pod-security-standards/",
+            "https://www.stigviewer.com/stig/kubernetes/2022-12-02/finding/V-242414",
             "https://avd.aquasec.com/misconfig/ksv117"
           ],
           "Status": "FAIL",

diff --git a/integration/testdata/helm_testchart.json.golden b/integration/testdata/helm_testchart.json.golden
@@ -21,7 +21,7 @@
       "Class": "config",
       "Type": "helm",
       "MisconfSummary": {
-        "Successes": 90,
+        "Successes": 89,
         "Failures": 4,
         "Exceptions": 0
       },
@@ -318,10 +318,11 @@
           "Namespace": "builtin.kubernetes.KSV117",
           "Query": "data.builtin.kubernetes.KSV117.deny",
           "Resolution": "Do not map the container ports to privileged host ports when starting a container.",
-          "Severity": "HIGH",
+          "Severity": "MEDIUM",
           "PrimaryURL": "https://avd.aquasec.com/misconfig/ksv117",
           "References": [
             "https://kubernetes.io/docs/concepts/security/pod-security-standards/",
+            "https://www.stigviewer.com/stig/kubernetes/2022-12-02/finding/V-242414",
             "https://avd.aquasec.com/misconfig/ksv117"
           ],
           "Status": "FAIL",
@@ -341,7 +342,7 @@
       "Class": "config",
       "Type": "helm",
       "MisconfSummary": {
-        "Successes": 61,
+        "Successes": 60,
         "Failures": 0,
         "Exceptions": 0
       }
@@ -351,7 +352,7 @@
       "Class": "config",
       "Type": "helm",
       "MisconfSummary": {
-        "Successes": 60,
+        "Successes": 59,
         "Failures": 0,
         "Exceptions": 0
       }

diff --git a/integration/testdata/helm_testchart.overridden.json.golden b/integration/testdata/helm_testchart.overridden.json.golden
@@ -21,7 +21,7 @@
       "Class": "config",
       "Type": "helm",
       "MisconfSummary": {
-        "Successes": 88,
+        "Successes": 87,
         "Failures": 6,
         "Exceptions": 0
       },
@@ -545,10 +545,11 @@
           "Namespace": "builtin.kubernetes.KSV117",
           "Query": "data.builtin.kubernetes.KSV117.deny",
           "Resolution": "Do not map the container ports to privileged host ports when starting a container.",
-          "Severity": "HIGH",
+          "Severity": "MEDIUM",
           "PrimaryURL": "https://avd.aquasec.com/misconfig/ksv117",
           "References": [
             "https://kubernetes.io/docs/concepts/security/pod-security-standards/",
+            "https://www.stigviewer.com/stig/kubernetes/2022-12-02/finding/V-242414",
             "https://avd.aquasec.com/misconfig/ksv117"
           ],
           "Status": "FAIL",
@@ -568,7 +569,7 @@
       "Class": "config",
       "Type": "helm",
       "MisconfSummary": {
-        "Successes": 61,
+        "Successes": 60,
         "Failures": 0,
         "Exceptions": 0
       }
@@ -578,7 +579,7 @@
       "Class": "config",
       "Type": "helm",
       "MisconfSummary": {
-        "Successes": 60,
+        "Successes": 59,
         "Failures": 0,
         "Exceptions": 0
       }