-
Notifications
You must be signed in to change notification settings - Fork 6
Expand file tree
/
Copy path.trivyignore
More file actions
23 lines (19 loc) · 812 Bytes
/
Copy path.trivyignore
File metadata and controls
23 lines (19 loc) · 812 Bytes
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
# https://avd.aquasec.com/misconfig/kubernetes/general/avd-ksv-0014/
# Use Readonly Filesystem
# Inline-ignore doesn't work, but this only affects the nginx-based OHDSI Atlas container and minio
AVD-KSV-0014
# https://avd.aquasec.com/misconfig/kubernetes/general/avd-ksv-0056/
# No Manage Networking Resources
AVD-KSV-0056
# See https://avd.aquasec.com/misconfig/ksv0125
# Can't change much about the source of images...
AVD-KSV-0125
# Checks whether a workload is running in the default namespace.
# https://avd.aquasec.com/misconfig/ksv110
# Fine for the locally templated charts.
AVD-KSV-0110
# Force the container to run with group ID > 10000 to avoid conflicts with the host’s user table.
# https://avd.aquasec.com/misconfig/ksv021
# https://avd.aquasec.com/misconfig/ksv020
AVD-KSV-0021
AVD-KSV-0020