How to scan a helm chart with custom values?

[felipeng]

I have a helm-chart with default values: chart/values.yaml

resources: {}

When I run KICS (1.7): kics scan -t Kubernetes -p chart/, I got the result that CPU/Memory Request/Limit are not defined, however, I would like to scan the helm-chart with the values that my deployment will use, which is a custom values files develop.yaml with the content:

resources:
  limits:
    cpu: 600m
    memory: 100Mi
  requests:
    cpu: 300m
    memory: 50Mi

How can I add the develop.yaml file during the scan?

I also tried to render the helm-chart with the additional values like this:

helm template chart/ -f chart/values.yaml -f develop.yaml | kics scan -t Kubernetes -p -
Error: stat /Users/felipe.gonzalez/auth/deploy/-: no such file or directory

However, KICS doesn't accept -p with stdin

The only workaround I found was two steps with a temporary file, which is not ideal:

1. helm template chart/ -f chart/values.yaml -f develop.yaml > rendered.yaml
2. kics scan -t Kubernetes -p rendered.yaml

Any suggestion ?