Skip to content

fix: clamav volumeClaimTemplates use matchLabels#522

Merged
DrPsychick merged 16 commits intoMailu:masterfrom
DrPsychick:bitnami-templates
Dec 5, 2025
Merged

fix: clamav volumeClaimTemplates use matchLabels#522
DrPsychick merged 16 commits intoMailu:masterfrom
DrPsychick:bitnami-templates

Conversation

@DrPsychick
Copy link
Copy Markdown
Collaborator

@DrPsychick DrPsychick commented Nov 16, 2025 •
edited
Loading

fixes #513

@DrPsychick
fix: clamav volumeClaimTemplates use matchLabels
40b36eb 
replace bitnami common templates
@github-actions github-actions Bot added the area/charts Changes made in the charts directory label Nov 16, 2025
@DrPsychick DrPsychick marked this pull request as draft November 16, 2025 18:13
github-advanced-security[bot]
github-advanced-security AI found potential problems Nov 16, 2025
View reviewed changes
Comment thread charts/mailu/templates/postfix/deployment.yaml Outdated

Check failure

Code scanning / Trivy

Root file system is not read-only High

Artifact: charts/mailu/templates/postfix/deployment.yaml
Type: helm
Vulnerability KSV014
Severity: HIGH
Message: Container 'postfix' of Deployment 'mailu-postfix' should set 'securityContext.readOnlyRootFilesystem' to true
Link: KSV014
Comment thread charts/mailu/templates/postfix/deployment.yaml Outdated

Check failure

Code scanning / Trivy

Default security context configured High

Artifact: charts/mailu/templates/postfix/deployment.yaml
Type: helm
Vulnerability KSV118
Severity: HIGH
Message: container mailu-postfix in namespace is using the default security context
Link: KSV118
Comment thread charts/mailu/templates/postfix/deployment.yaml Outdated

Check warning

Code scanning / Trivy

Can elevate its own privileges Medium

Artifact: charts/mailu/templates/postfix/deployment.yaml
Type: helm
Vulnerability KSV001
Severity: MEDIUM
Message: Container 'postfix' of Deployment 'mailu-postfix' should set 'securityContext.allowPrivilegeEscalation' to false
Link: KSV001
Comment thread charts/mailu/templates/postfix/deployment.yaml Outdated

Check warning

Code scanning / Trivy

Runs as root user Medium

Artifact: charts/mailu/templates/postfix/deployment.yaml
Type: helm
Vulnerability KSV012
Severity: MEDIUM
Message: Container 'postfix' of Deployment 'mailu-postfix' should set 'securityContext.runAsNonRoot' to true
Link: KSV012
Comment thread charts/mailu/templates/postfix/deployment.yaml Outdated

Check warning

Code scanning / Trivy

Seccomp policies disabled Medium

Artifact: charts/mailu/templates/postfix/deployment.yaml
Type: helm
Vulnerability KSV104
Severity: MEDIUM
Message: container "postfix" of deployment "mailu-postfix" in "" namespace should specify a seccomp profile
Link: KSV104
Comment thread charts/mailu/templates/postfix/deployment.yaml Outdated

Check notice

Code scanning / Trivy

Runtime/Default Seccomp profile not set Low

Artifact: charts/mailu/templates/postfix/deployment.yaml
Type: helm
Vulnerability KSV030
Severity: LOW
Message: Either Pod or Container should set 'securityContext.seccompProfile.type' to 'RuntimeDefault'
Link: KSV030
Comment thread charts/mailu/templates/postfix/deployment.yaml Outdated

Check notice

Code scanning / Trivy

Runs with GID <= 10000 Low

Artifact: charts/mailu/templates/postfix/deployment.yaml
Type: helm
Vulnerability KSV021
Severity: LOW
Message: Container 'postfix' of Deployment 'mailu-postfix' should set 'securityContext.runAsGroup' > 10000
Link: KSV021
Comment thread charts/mailu/templates/postfix/deployment.yaml Outdated

Check notice

Code scanning / Trivy

Runs with UID <= 10000 Low

Artifact: charts/mailu/templates/postfix/deployment.yaml
Type: helm
Vulnerability KSV020
Severity: LOW
Message: Container 'postfix' of Deployment 'mailu-postfix' should set 'securityContext.runAsUser' > 10000
Link: KSV020
Comment thread charts/mailu/templates/postfix/deployment.yaml Outdated

Check notice

Code scanning / Trivy

Default capabilities: some containers do not drop any Low

Artifact: charts/mailu/templates/postfix/deployment.yaml
Type: helm
Vulnerability KSV004
Severity: LOW
Message: Container 'postfix' of 'deployment' 'mailu-postfix' in '' namespace should set securityContext.capabilities.drop
Link: KSV004
Comment thread charts/mailu/templates/postfix/deployment.yaml Outdated

Check notice

Code scanning / Trivy

Default capabilities: some containers do not drop all Low

Artifact: charts/mailu/templates/postfix/deployment.yaml
Type: helm
Vulnerability KSV003
Severity: LOW
Message: Container 'postfix' of Deployment 'mailu-postfix' should add 'ALL' to 'securityContext.capabilities.drop'
Link: KSV003
@DrPsychick DrPsychick marked this pull request as ready for review November 16, 2025 19:46
@DrPsychick DrPsychick merged commit fa88206 into Mailu:master Dec 5, 2025
5 of 6 checks passed
@github-actions github-actions Bot mentioned this pull request Dec 5, 2025
Merged
@DrPsychick DrPsychick deleted the bitnami-templates branch December 5, 2025 20:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer

@promasu promasu promasu approved these changes

Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

area/charts Changes made in the charts directory

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

[BUG] Statefulset volumeClaimTemplate include versioned labels

3 participants

@DrPsychick @promasu @github-advanced-security