KICS

chore(container): update image ghcr.io/analogj/scrutiny to d643dee #793

Sign in to view logs

Summary
Jobs
- KICS
Run details
- Usage
- Workflow file

Triggered via pull request December 1, 2024 13:19

roybatty-bot[bot]

opened #1054

renovate/ghcr.io-analogj-scrutiny-master-omnibus

Status Success

Total duration 47s

Artifacts –

kics.yaml

on: pull_request

Annotations

10 warnings

[HIGH] Non Kube System Pod With Host Mount: cluster/apps/telegram/rajoybot/app/deployment.yaml#L100

A non kube-system workload should not have hostPath mounted

[HIGH] Non Kube System Pod With Host Mount: cluster/apps/home/nextcloud/app/deployment.yaml#L47

A non kube-system workload should not have hostPath mounted

[HIGH] Non Kube System Pod With Host Mount: cluster/apps/home/nextcloud/app/db/deployment.yaml#L55

A non kube-system workload should not have hostPath mounted

[HIGH] Non Kube System Pod With Host Mount: cluster/apps/home/nextcloud/app/deployment.yaml#L50

A non kube-system workload should not have hostPath mounted

[HIGH] Non Kube System Pod With Host Mount: cluster/apps/telegram/starwarssounds/app/deployment.yaml#L100

A non kube-system workload should not have hostPath mounted

[HIGH] Passwords And Secrets - Generic Password: cluster/config/cluster-secrets.sops.yaml#L20

Query to find passwords and secrets in infrastructure code.

[HIGH] Passwords And Secrets - Generic Password: cluster/apps/telegram/rajoybot/app/secrets.sops.yaml#L8

Query to find passwords and secrets in infrastructure code.

[HIGH] Passwords And Secrets - Generic Password: cluster/apps/telegram/rajoybot/app/secrets.sops.yaml#L11

Query to find passwords and secrets in infrastructure code.

[HIGH] Passwords And Secrets - Generic Password: cluster/config/cluster-secrets.sops.yaml#L21

Query to find passwords and secrets in infrastructure code.

[HIGH] Passwords And Secrets - Generic Password: cluster/apps/telegram/starwarssounds/app/secrets.sops.yaml#L8

Query to find passwords and secrets in infrastructure code.