changing ID to capital C

controls/Applicationscredentialsinconfigurationfiles.json

@@ -13,5 +13,5 @@
         "rule-credentials-in-env-var",
         "rule-credentials-configmap"
     ],
-    "id": "c_0012"
+    "id": "C-0012"
 }

controls/ListKubernetessecrets.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-can-list-get-secrets"
     ],
-    "id": "c_0015"
+    "id": "C-0015"
 }

controls/SSHserverrunninginsidecontainer.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-can-ssh-to-pod"
     ],
-    "id": "c_0042"
+    "id": "C-0042"
 }

controls/accesscontainerserviceaccount.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "access-container-service-account"
     ],
-    "id": "c_0053"
+    "id": "C-0053"
 }

controls/accessk8sdashboard.json

@@ -12,5 +12,5 @@
     "rulesNames": [
         "rule-access-dashboard"
     ],
-    "id": "c_0014"
+    "id": "C-0014"
 }

controls/accesskubeletAPI.json

@@ -9,5 +9,5 @@
     "description": "Kubelet is the Kubernetes agent that is installed on each node. Kubelet is responsible for the proper execution of pods that are assigned to the node. Kubelet exposes a read-only API service that does not require authentication (TCP port 10255). Attackers with network access to the host (for example, via running code on a compromised container) can send API requests to the Kubelet API. Specifically querying https://[NODE IP]:10255/pods/ retrieves the running pods on the node. https://[NODE IP]:10255/spec/ retrieves information about the node itself, such as CPU and memory consumption.",
     "remediation": "Define network policy (native kubernetes or using ARMO runtime protection). Use ARMO runtime protection capabilities to monitor network traffic.",
     "rulesNames": [],
-    "id": "c_0003"
+    "id": "C-0003"
 }

controls/accesstillerendpoint.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "access-tiller-endpoint"
     ],
-    "id": "c_0033"
+    "id": "C-0033"
 }

controls/allowedhostpath.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "alert-rw-hostpath"
     ],
-    "id": "c_0006"
+    "id": "C-0006"
 }

controls/allowprivilegeescalation.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "rule-allow-privilege-escalation"
     ],
-    "id": "c_0016"
+    "id": "C-0016"
 }

controls/anonymousrequests.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "anonymous-requests"
     ],
-    "id": "c_0051"
+    "id": "C-0051"
 }

controls/applicationexploitRCE.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "deny-RCE-vuln-image-pods"
     ],
-    "id": "c_0025"
+    "id": "C-0025"
 }

controls/automaticmappingserviceaccount.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "automount-service-account"
     ],
-    "id": "c_0034"
+    "id": "C-0034"
 }

controls/backdoorcontainer.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-can-create-modify-pod"
     ],
-    "id": "c_0027"
+    "id": "C-0027"
 }

controls/bash-cmdinsidecontainer.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-can-bash-cmd-inside-container"
     ],
-    "id": "c_0019"
+    "id": "C-0019"
 }

controls/clearcontainerlogs.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-can-delete-logs"
     ],
-    "id": "c_0029"
+    "id": "C-0029"
 }

controls/cluster-adminbinding.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-list-all-cluster-admins"
     ],
-    "id": "c_0035"
+    "id": "C-0035"
 }

controls/clusterInternalnetworking.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "internal-networking"
     ],
-    "id": "c_0054"
+    "id": "C-0054"
 }

controls/compromisedimagesinregistry.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-identify-blacklisted-image-registries"
     ],
-    "id": "c_0001"
+    "id": "C-0001"
 }

controls/configuredlivenessprobe.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "configured-liveness-probe"
     ],
-    "id": "c_0056"
+    "id": "C-0056"
 }

controls/configuredreadinessprobe.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "configured-readiness-probe"
     ],
-    "id": "c_0018"
+    "id": "C-0018"
 }

controls/containerhostport.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "container-hostPort"
     ],
-    "id": "c_0044"
+    "id": "C-0044"
 }

controls/controlplanehardening.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "insecure-port-flag"
     ],
-    "id": "c_0005"
+    "id": "C-0005"
 }

controls/coreDNSpoisoning.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-can-update-configmap"
     ],
-    "id": "c_0037"
+    "id": "C-0037"
 }

controls/dangerouscapabilities.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "dangerous-capabilities"
     ],
-    "id": "c_0028"
+    "id": "C-0028"
 }

controls/datadestruction.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-excessive-delete-rights"
     ],
-    "id": "c_0007"
+    "id": "C-0007"
 }

controls/deleteKubernetesevents.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-can-delete-k8s-events"
     ],
-    "id": "c_0031"
+    "id": "C-0031"
 }

controls/execintocontainer.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "exec-into-container"
     ],
-    "id": "c_0002"
+    "id": "C-0002"
 }

controls/exposeddashboard.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-exposed-dashboard"
     ],
-    "id": "c_0047"
+    "id": "C-0047"
 }

controls/exposedsensitiveinterfaces.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "exposed-sensitive-interfaces"
     ],
-    "id": "c_0021"
+    "id": "C-0021"
 }

controls/hostPathmount.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "alert-any-hostpath"
     ],
-    "id": "c_0048"
+    "id": "C-0048"
 }

controls/hostnetworkaccess.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "host-network-access"
     ],
-    "id": "c_0041"
+    "id": "C-0041"
 }

controls/hostpidipcprivileges.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "host-pid-ipc-privileges"
     ],
-    "id": "c_0038"
+    "id": "C-0038"
 }

controls/immutablecontainerfilesystem.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "immutable-container-filesystem"
     ],
-    "id": "c_0017"
+    "id": "C-0017"
 }

controls/ingressandegressblocked.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "ingress-and-egress-blocked"
     ],
-    "id": "c_0030"
+    "id": "C-0030"
 }

controls/insecurecapabilities.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "insecure-capabilities"
     ],
-    "id": "c_0046"
+    "id": "C-0046"
 }

controls/instancemetadataAPI..json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "instance-metadata-api-access"
     ],
-    "id": "c_0052"
+    "id": "C-0052"
 }

controls/kubernetescronJob.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-deny-cronjobs"
     ],
-    "id": "c_0026"
+    "id": "C-0026"
 }

controls/linuxhardening.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "linux-hardening"
     ],
-    "id": "c_0055"
+    "id": "C-0055"
 }

controls/maliciousadmissioncontroller-mutating.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "list-all-mutating-webhooks"
     ],
-    "id": "c_0039"
+    "id": "C-0039"
 }

controls/maliciousadmissioncontroller-validating.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "list-all-validating-webhooks"
     ],
-    "id": "c_0036"
+    "id": "C-0036"
 }

controls/morethanonereplicas.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "more-than-one-replicas"
     ],
-    "id": "c_0032"
+    "id": "C-0032"
 }

controls/mountserviceprincipal.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "alert-any-hostpath"
     ],
-    "id": "c_0020"
+    "id": "C-0020"
 }

controls/namesimilarity.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-name-similarity"
     ],
-    "id": "c_0043"
+    "id": "C-0043"
 }

controls/networkmapping.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "internal-networking"
     ],
-    "id": "c_0049"
+    "id": "C-0049"
 }

controls/networkpolicies.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "internal-networking"
     ],
-    "id": "c_0011"
+    "id": "C-0011"
 }

controls/newcontainer.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-can-create-modify-pod"
     ],
-    "id": "c_0010"
+    "id": "C-0010"
 }

controls/nonrootcontainers.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "non-root-containers"
     ],
-    "id": "c_0013"
+    "id": "C-0013"
 }

controls/podspecificversiontag.json

@@ -8,5 +8,5 @@
     "rulesNames": [
         "pod-specific-version-tag"
     ],
-    "id": "c_0040"
+    "id": "C-0040"
 }

controls/privilegedcontainer.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-privilege-escalation"
     ],
-    "id": "c_0057"
+    "id": "C-0057"
 }

controls/resourcehijacking.json

@@ -11,5 +11,5 @@
     "rulesNames": [
         "rule-can-create-modify-pod"
     ],
-    "id": "c_0023"
+    "id": "C-0023"
 }