Checkov

Merge pull request #107 from dasmeta/DMVP-5344-have-external-dns-subm… #273

Annotations

10 errors and 2 warnings

CKV_K8S_28: "Minimize the admission of containers with the NET_RAW capability"

CKV_K8S_29: "Apply security context to your pods, deployments and daemon_sets"

CKV_K8S_8: "Liveness Probe Should be Configured"

CKV_K8S_30: "Apply security context to your pods and containers"

CKV_K8S_9: "Readiness Probe Should be Configured"

CKV_K8S_43: "Image should use digest"

CKV_TF_1: "Ensure Terraform module sources use a commit hash"

CKV_TF_2: "Ensure Terraform module sources use a tag with a version number"

The following actions uses node12 which is deprecated and will be forced to run on node16: actions/setup-python@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/

The following actions use a deprecated Node.js version and will be forced to run on node20: actions/checkout@v3, hashicorp/setup-terraform@v2, actions/setup-python@v1. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/