Skip to content
KICS

refactor: add deployment script for local deployment #2170

Sign in to view logs

refactor: add deployment script for local deployment

refactor: add deployment script for local deployment #2170

Triggered via pull request February 21, 2025 14:05
@tom-rm-meyer-ISSTtom-rm-meyer-ISST
synchronize #469
FraunhoferISST:refactor/local-deployment
Status Success
Total duration 1m 5s
Artifacts –

kics.yml

on: pull_request
Analyze KICS
55s
Analyze KICS
Fit to window
Zoom out
Zoom in

Annotations

10 warnings
[MEDIUM] Container Running With Low UID: charts/puris/templates/backend-deployment.yaml#L51
Check if containers are running with low UID, which might cause conflicts with the host's user table.
[MEDIUM] Container Running With Low UID: charts/puris/templates/frontend-deployment.yaml#L53
Check if containers are running with low UID, which might cause conflicts with the host's user table.
[MEDIUM] NET_RAW Capabilities Not Being Dropped: charts/puris/templates/backend-deployment.yaml#L51
Containers should drop 'ALL' or at least 'NET_RAW' capabilities
[MEDIUM] NET_RAW Capabilities Not Being Dropped: charts/puris/templates/frontend-deployment.yaml#L51
Containers should drop 'ALL' or at least 'NET_RAW' capabilities
[MEDIUM] Seccomp Profile Is Not Configured: charts/puris/templates/backend-deployment.yaml#L51
Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls
[MEDIUM] Seccomp Profile Is Not Configured: charts/puris/templates/frontend-deployment.yaml#L53
Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls
[MEDIUM] Service Account Token Automount Not Disabled: charts/puris/templates/frontend-deployment.yaml#L43
Service Account Tokens are automatically mounted even if not necessary
[MEDIUM] Service Account Token Automount Not Disabled: charts/puris/templates/backend-deployment.yaml#L43
Service Account Tokens are automatically mounted even if not necessary
[MEDIUM] Using Unrecommended Namespace: charts/puris/templates/frontend-serviceaccount.yaml#L26
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used
[MEDIUM] Using Unrecommended Namespace: charts/puris/templates/backend-serviceaccount.yaml#L26
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used