build: rework CI #3
TimSchoenleAnnotations
10 errors
|
checkov
CKV_K8S_43: "Image should use digest"
|
|
checkov
CKV_K8S_28: "Minimize the admission of containers with the NET_RAW capability"
|
|
checkov
CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
|
|
checkov
CKV_K8S_30: "Apply security context to your containers"
|
|
checkov
CKV_K8S_22: "Use read-only filesystem for containers where possible"
|
|
checkov
CKV_K8S_35: "Prefer using secrets as files over secrets as environment variables"
|
|
checkov
CKV_K8S_37: "Minimize the admission of containers with capabilities assigned"
|
|
checkov
CKV_K8S_21: "The default namespace should not be used"
|
|
checkov
CKV_K8S_11: "CPU limits should be set"
|
|
checkov
CKV_K8S_10: "CPU requests should be set"
|