feat: All containers should use read-only file system #140
ppawlowskihelm-chart.yml
on: pull_request
Lint and install chart
7m 38s
Validate chart against kubernetes API
52s
Matrix: Scan chart
Annotations
10 errors and 3 warnings
|
Scan chart (checkov)
CKV_K8S_43: "Image should use digest"
|
|
Scan chart (checkov)
CKV_K8S_35: "Prefer using secrets as files over secrets as environment variables"
|
|
Scan chart (checkov)
CKV_K8S_40: "Containers should run as a high UID to avoid host conflict"
|
|
Scan chart (checkov)
CKV_K8S_21: "The default namespace should not be used"
|
|
Scan chart (checkov)
CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
|
|
Scan chart (checkov)
CKV_K8S_20: "Containers should not run with allowPrivilegeEscalation"
|
|
Scan chart (checkov)
CKV_K8S_11: "CPU limits should be set"
|
|
Scan chart (checkov)
CKV_K8S_12: "Memory requests should be set"
|
|
Scan chart (checkov)
CKV_K8S_15: "Image Pull Policy should be Always"
|
|
Scan chart (checkov)
CKV_K8S_10: "CPU requests should be set"
|
|
Scan chart (checkov)
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: azure/[email protected]. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
Validate chart against kubernetes API
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: azure/[email protected], helm/[email protected]. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|
|
Lint and install chart
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: azure/[email protected], actions/[email protected], helm/[email protected]. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|