kube-bench/cmd/common_test.go at main

mirror of https://github.com/aquasecurity/kube-bench.git synced 2026-02-14 10:00:14 +00:00

Files

Andy Pitcher f1807bb192 feat: add CIS-1.12 support (#2035 )

- Update master to 1.2.29 and purge CBC ciphers: https://workbench.cisecurity.org/tickets/24968
- Remove TLS_RSA_WITH_AES_256_GCM_SHA384 & TLS_RSA_WITH_AES_128_GCM_SHA256 (CBC support) for node 4.2.12: https://workbench.cisecurity.org/tickets/24968
- Remove node check 4.2.15: https://workbench.cisecurity.org/tickets/24915
- Remove policy 5.2.9 "Minimize the admission of containers with added capabilities" (Manual): https://workbench.cisecurity.org/benchmarks/21709/tickets/25337
- Update "Minimize the admission of containers with capabilities assigned" policies to remove PodSecurityPolicy (PSP) references

Signed-off-by: Andy Pitcher <andy.pitcher@suse.com>

2026-02-12 11:34:08 +06:00

25 KiB

Raw Permalink Blame History

View Raw

25 KiB Raw Permalink Blame History

25 KiB

Raw Permalink Blame History