feat: Drop all forge container capabilities (#334) #137
Annotations
10 errors and 1 warning
|
Scan chart with checkov
CKV_K8S_43: "Image should use digest"
|
|
Scan chart with checkov
CKV_K8S_22: "Use read-only filesystem for containers where possible"
|
|
Scan chart with checkov
CKV_K8S_35: "Prefer using secrets as files over secrets as environment variables"
|
|
Scan chart with checkov
CKV_K8S_40: "Containers should run as a high UID to avoid host conflict"
|
|
Scan chart with checkov
CKV_K8S_21: "The default namespace should not be used"
|
|
Scan chart with checkov
CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
|
|
Scan chart with checkov
CKV_K8S_20: "Containers should not run with allowPrivilegeEscalation"
|
|
Scan chart with checkov
CKV_K8S_11: "CPU limits should be set"
|
|
Scan chart with checkov
CKV_K8S_12: "Memory requests should be set"
|
|
Scan chart with checkov
CKV_K8S_15: "Image Pull Policy should be Always"
|
|
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: azure/[email protected]. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
Loading