core.html

<!DOCTYPE html>
<html lang="en-US">
  <head>
    <meta charset="UTF-8">
    <title>Kubescape Scan Report</title>
  </head>
  <style>
  :root {
    --cell-padding-vertical: 0.25em;
    --cell-padding-horizontal: 0.25em;
    --font-family-sans: system-ui, -apple-system, sans-serif;
  }
  body {
    max-width: 60em;
    margin: auto;
    font-family: var(--font-family-sans);
  }
  table {
    width: 100%;
    border-top: 0.1em solid black;
    border-bottom: 0.1em solid black;
    border-collapse: collapse;
    table-layout: fixed;
  }
  th {
    text-align: left;
  }
  td, th {
    padding-top: var(--cell-padding-vertical);
    padding-bottom: var(--cell-padding-vertical);
    padding-right: var(--cell-padding-horizontal);
    vertical-align: top;
  }
  td > p {
    margin: 0;
    word-break: break-all;
    hyphens: auto;
  }
  thead {
    border-bottom: 0.01em solid black;
  }
  .numericCell {
    text-align: right;
  }
  .controlSeverityCell {
    width: 10%;
  }
  .controlNameCell {
    width: 50%;
  }
  .controlRiskCell {
    width: 10%;
  }
  .resourceSeverityCell {
    width: 10%;
  }
  .resourceNameCell {
    width: 30%;
  }
  .resourceURLCell {
    width: 10%;
  }
  .resourceRemediationCell {
    width: 50%;
  }
  .logo {
    width: 25%;
    float: right;
  }
  </style>
  <body>
    <img class="logo" src="https://raw.githubusercontent.com/5GSEC/kubescape/refs/heads/seran/core/pkg/resultshandling/printer/v2/pdf/logo.png">
    <h1>5G Blueprint Scan Report</h1>
    
    </br>
    <h2>Summary:</h2>
    <table>
      <thead>
        <tr>
          <th>All</th>
          <th>Failed</th>
          <th>Skipped</th>
        </tr>
      </thead>
      <tbody>
        <tr>
          <td>7</td>
          <td>1</td>
          <td>0</td>
        </tr>
      </tbody>
    </table>
    </br>
    <h2>Details</h2>
    <table>
      <thead>
      <tr>
        <th class="controlSeverityCell">Severity</th>
        <th class="controlNameCell">Control Name</th>
        <th class="controlRiskCell">Failed Resources</th>
        <th class="controlRiskCell">All Resources</th>
        <th class="controlRiskCell">Risk Score, %</th>
      </tr>
      </thead>
      <tbody>
      
      
        <tr>
          <td class="controlSeverityCell">High</td>
          <td class="controlNameCell">Admission Control Policies</td>
          <td class="controlRiskCell numericCell">0</td>
          <td class="controlRiskCell numericCell">36</td>
          <td class="controlRiskCell numericCell">0</td>
        </tr>
      </tr>
      
        <tr>
          <td class="controlSeverityCell">High</td>
          <td class="controlNameCell">Ingress/Egress from the necessary workloads</td>
          <td class="controlRiskCell numericCell">0</td>
          <td class="controlRiskCell numericCell">37</td>
          <td class="controlRiskCell numericCell">0</td>
        </tr>
      </tr>
      
        <tr>
          <td class="controlSeverityCell">High</td>
          <td class="controlNameCell">Insecure capabilities</td>
          <td class="controlRiskCell numericCell">0</td>
          <td class="controlRiskCell numericCell">41</td>
          <td class="controlRiskCell numericCell">0</td>
        </tr>
      </tr>
      
        <tr>
          <td class="controlSeverityCell">High</td>
          <td class="controlNameCell">Least Permissive Policies for Sensitive Assets</td>
          <td class="controlRiskCell numericCell">0</td>
          <td class="controlRiskCell numericCell">41</td>
          <td class="controlRiskCell numericCell">0</td>
        </tr>
      </tr>
      
        <tr>
          <td class="controlSeverityCell">High</td>
          <td class="controlNameCell">Workloads with Critical vulnerabilities exposed to external traffic</td>
          <td class="controlRiskCell numericCell">0</td>
          <td class="controlRiskCell numericCell">0</td>
          <td class="controlRiskCell numericCell">0</td>
        </tr>
      </tr>
      
        <tr>
          <td class="controlSeverityCell">Medium</td>
          <td class="controlNameCell">Allow privilege escalation</td>
          <td class="controlRiskCell numericCell">6</td>
          <td class="controlRiskCell numericCell">41</td>
          <td class="controlRiskCell numericCell">14</td>
        </tr>
      </tr>
      
        <tr>
          <td class="controlSeverityCell">Medium</td>
          <td class="controlNameCell">Workload with cluster takeover roles</td>
          <td class="controlRiskCell numericCell">0</td>
          <td class="controlRiskCell numericCell">41</td>
          <td class="controlRiskCell numericCell">0</td>
        </tr>
      </tr>
      
      <tbody>
    </table>
    
    </br>
    <h2>Failed Resources:</h2>
    </br>
    
    
    <h3>Name: ausf-core</h3>
      <p>ApiVersion: apps/v1</p>
      <p>Kind: Deployment</p>
      <p>Name: ausf-core</p>
      <p>Namespace: oai-core</p>
      <table>
        <thead>
        <tr>
          <th class="resourceSeverityCell">Severity</th>
          <th class="resourceNameCell">Name</th>
          <th class="resourceURLCell">Docs</th>
          <th class="resourceRemediationCell">Assisted Remediation</th>
        </tr>
        </thead>
        <tbody>
        
        <tr>
          <td class="resourceSeverityCell">Medium</td>
          <td class="resourceNameCell">Allow privilege escalation</td>
          <td class="resourceURLCell"><a href="https://github.com/5gsec/5g-blueprint-controls/blob/main/controls/c-0016.md">C-0016</a></td>
          <td class="resourceRemediationCell"> <p>spec.template.spec.containers[0].securityContext.allowPrivilegeEscalation=false</p>  <p>spec.template.spec.containers[0].securityContext.privileged=false</p> </td>
        </tr>
        
        </tbody>
      </table>
    </div>
    
    <h3>Name: nrf-core</h3>
      <p>ApiVersion: apps/v1</p>
      <p>Kind: Deployment</p>
      <p>Name: nrf-core</p>
      <p>Namespace: oai-core</p>
      <table>
        <thead>
        <tr>
          <th class="resourceSeverityCell">Severity</th>
          <th class="resourceNameCell">Name</th>
          <th class="resourceURLCell">Docs</th>
          <th class="resourceRemediationCell">Assisted Remediation</th>
        </tr>
        </thead>
        <tbody>
        
        <tr>
          <td class="resourceSeverityCell">Medium</td>
          <td class="resourceNameCell">Allow privilege escalation</td>
          <td class="resourceURLCell"><a href="https://github.com/5gsec/5g-blueprint-controls/blob/main/controls/c-0016.md">C-0016</a></td>
          <td class="resourceRemediationCell"> <p>spec.template.spec.containers[0].securityContext.allowPrivilegeEscalation=false</p>  <p>spec.template.spec.containers[0].securityContext.privileged=false</p> </td>
        </tr>
        
        </tbody>
      </table>
    </div>
    
    <h3>Name: udr-core</h3>
      <p>ApiVersion: apps/v1</p>
      <p>Kind: Deployment</p>
      <p>Name: udr-core</p>
      <p>Namespace: oai-core</p>
      <table>
        <thead>
        <tr>
          <th class="resourceSeverityCell">Severity</th>
          <th class="resourceNameCell">Name</th>
          <th class="resourceURLCell">Docs</th>
          <th class="resourceRemediationCell">Assisted Remediation</th>
        </tr>
        </thead>
        <tbody>
        
        <tr>
          <td class="resourceSeverityCell">Medium</td>
          <td class="resourceNameCell">Allow privilege escalation</td>
          <td class="resourceURLCell"><a href="https://github.com/5gsec/5g-blueprint-controls/blob/main/controls/c-0016.md">C-0016</a></td>
          <td class="resourceRemediationCell"> <p>spec.template.spec.containers[0].securityContext.allowPrivilegeEscalation=false</p>  <p>spec.template.spec.containers[0].securityContext.privileged=false</p> </td>
        </tr>
        
        </tbody>
      </table>
    </div>
    
    <h3>Name: smf-core</h3>
      <p>ApiVersion: apps/v1</p>
      <p>Kind: Deployment</p>
      <p>Name: smf-core</p>
      <p>Namespace: oai-core</p>
      <table>
        <thead>
        <tr>
          <th class="resourceSeverityCell">Severity</th>
          <th class="resourceNameCell">Name</th>
          <th class="resourceURLCell">Docs</th>
          <th class="resourceRemediationCell">Assisted Remediation</th>
        </tr>
        </thead>
        <tbody>
        
        <tr>
          <td class="resourceSeverityCell">Medium</td>
          <td class="resourceNameCell">Allow privilege escalation</td>
          <td class="resourceURLCell"><a href="https://github.com/5gsec/5g-blueprint-controls/blob/main/controls/c-0016.md">C-0016</a></td>
          <td class="resourceRemediationCell"> <p>spec.template.spec.containers[0].securityContext.allowPrivilegeEscalation=false</p>  <p>spec.template.spec.containers[0].securityContext.privileged=false</p> </td>
        </tr>
        
        </tbody>
      </table>
    </div>
    
    <h3>Name: amf-core</h3>
      <p>ApiVersion: apps/v1</p>
      <p>Kind: Deployment</p>
      <p>Name: amf-core</p>
      <p>Namespace: oai-core</p>
      <table>
        <thead>
        <tr>
          <th class="resourceSeverityCell">Severity</th>
          <th class="resourceNameCell">Name</th>
          <th class="resourceURLCell">Docs</th>
          <th class="resourceRemediationCell">Assisted Remediation</th>
        </tr>
        </thead>
        <tbody>
        
        <tr>
          <td class="resourceSeverityCell">Medium</td>
          <td class="resourceNameCell">Allow privilege escalation</td>
          <td class="resourceURLCell"><a href="https://github.com/5gsec/5g-blueprint-controls/blob/main/controls/c-0016.md">C-0016</a></td>
          <td class="resourceRemediationCell"> <p>spec.template.spec.containers[0].securityContext.allowPrivilegeEscalation=false</p>  <p>spec.template.spec.containers[0].securityContext.privileged=false</p> </td>
        </tr>
        
        </tbody>
      </table>
    </div>
    
    <h3>Name: udm-core</h3>
      <p>ApiVersion: apps/v1</p>
      <p>Kind: Deployment</p>
      <p>Name: udm-core</p>
      <p>Namespace: oai-core</p>
      <table>
        <thead>
        <tr>
          <th class="resourceSeverityCell">Severity</th>
          <th class="resourceNameCell">Name</th>
          <th class="resourceURLCell">Docs</th>
          <th class="resourceRemediationCell">Assisted Remediation</th>
        </tr>
        </thead>
        <tbody>
        
        <tr>
          <td class="resourceSeverityCell">Medium</td>
          <td class="resourceNameCell">Allow privilege escalation</td>
          <td class="resourceURLCell"><a href="https://github.com/5gsec/5g-blueprint-controls/blob/main/controls/c-0016.md">C-0016</a></td>
          <td class="resourceRemediationCell"> <p>spec.template.spec.containers[0].securityContext.allowPrivilegeEscalation=false</p>  <p>spec.template.spec.containers[0].securityContext.privileged=false</p> </td>
        </tr>
        
        </tbody>
      </table>
    </div>
    
  </body>
</html>