KICS

chore(container): update image ghcr.io/analogj/scrutiny to 8922d5a #1110

Sign in to view logs

Triggered via pull request February 2, 2026 06:57

roybatty-bot[bot]

opened #1350

renovate/ghcr.io-analogj-scrutiny-master-omnibus

Status Success

Total duration 42s

Artifacts –

kics.yaml

on: pull_request

Annotations

10 warnings

[HIGH] Passwords And Secrets - Generic Password: cluster/core/cluster-configs/cluster-secrets.sops.yaml#L20

Query to find passwords and secrets in infrastructure code.

[HIGH] Passwords And Secrets - Generic Password: cluster/apps/telegram/rajoybot/app/secrets.sops.yaml#L11

Query to find passwords and secrets in infrastructure code.

[HIGH] Passwords And Secrets - Generic Password: cluster/apps/home/firefly-iii/app/secrets.sops.yaml#L15

Query to find passwords and secrets in infrastructure code.

[HIGH] Passwords And Secrets - Generic Password: cluster/core/cluster-configs/cluster-secrets.sops.yaml#L16

Query to find passwords and secrets in infrastructure code.

[HIGH] Passwords And Secrets - Generic Password: cluster/apps/telegram/kindlebot/app/secrets.sops.yaml#L14

Query to find passwords and secrets in infrastructure code.

[HIGH] Non Kube System Pod With Host Mount: cluster/apps/home/nextcloud/app/deployment.yaml#L50

A non kube-system workload should not have hostPath mounted

[HIGH] Non Kube System Pod With Host Mount: cluster/apps/telegram/starwarssounds/app/deployment.yaml#L100

A non kube-system workload should not have hostPath mounted

[HIGH] Non Kube System Pod With Host Mount: cluster/apps/telegram/rajoybot/app/deployment.yaml#L100

A non kube-system workload should not have hostPath mounted

[HIGH] Non Kube System Pod With Host Mount: cluster/apps/home/nextcloud/app/db/deployment.yaml#L50

A non kube-system workload should not have hostPath mounted

[HIGH] Non Kube System Pod With Host Mount: cluster/apps/home/nextcloud/app/deployment.yaml#L47

A non kube-system workload should not have hostPath mounted