checkov

Ingress class #184

Annotations

10 errors and 2 warnings

CKV_K8S_28: "Minimize the admission of containers with the NET_RAW capability"

CKV_K8S_22: "Use read-only filesystem for containers where possible"

CKV_K8S_35: "Prefer using secrets as files over secrets as environment variables"

CKV_K8S_15: "Image Pull Policy should be Always"

CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"

CKV_K8S_40: "Containers should run as a high UID to avoid host conflict"

CKV_K8S_12: "Memory requests should be set"

CKV_K8S_30: "Apply security context to your containers"

CKV_K8S_37: "Minimize the admission of containers with capabilities assigned"

CKV_K8S_13: "Memory limits should be set"

The following actions use a deprecated Node.js version and will be forced to run on node20: github/codeql-action/upload-sarif@v2. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

CodeQL Action v2 will be deprecated on December 5th, 2024. Please update all occurrences of the CodeQL Action in your workflow files to v3. For more information, see https://github.blog/changelog/2024-01-12-code-scanning-deprecation-of-codeql-action-v2/