6 Commits

Include renames

Author	SHA1	Message	Date
3 people	8bfed75498	Minor fixes for NSA checks (#952) ... * fix rbac checks * fix sensitive env var check * add test case * fix service account check * fix comment --------- Co-authored-by: Andrew Suderman <andy@fairwinds.com>	2023-06-09 12:35:36 -06:00
4 people	4d96993a18	[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821) ... * added fix command implementation * use node api * fix tests * added hostport mutate rule * update mutating server * fix array reference and add back leading slash * added test and refactor findNodes * more tests * added more test and fix issue with arrays * rename findNode function and ensure we capture exceptions * rename findNode function * append array value at the end and for single item remove brackets * append array value at the end and for single item remove brackets * create array if it does not exists * fix tests * handle some exceptions * fix tests * fix string format * guard for PodResult * fix flag name * fix privilegeEscalation check * fix up mutations for local files * fix pod parsing * fix object values * remove logspam * fix import * update some comments for health probes * add an option to not apply any mutations\, and just adjust yaml formatting * add preliminary support for helm * logspam * change up comment strategy * fix object comments * format * fix tests * add comments * fix key updates * fix mutation tests * tidy * refactor test * add test * add test * add test for object comments Co-authored-by: Robert Brennan <accounts@rbren.io> Co-authored-by: Robert Brennan <contact@rbren.io>	2022-09-15 12:38:22 -04:00
Robert BrennanandGitHub	08682075c6	Enable pullPolicyNotAlways (#795) ... * add more mutations * fix tests * add more test cases * Update insecureCapabilities.yaml * Update dangerousCapabilities.yaml * fix tests * fix tests * add pullPolicyNotAlways as default mutation	2022-07-11 13:20:17 -04:00
Robert BrennanandGitHub	c0d8eb6318	handle case-insensitivity for capabilities (#619) ... * handle lowercase letters in ALL for capabilities * change all caps to regexp * revert file	2021-08-31 11:40:47 -04:00
Cydnee OwensandGitHub	cbc15ad069	Pod level testing (#546) ... * update runAsPrivileged to test at pod level * update runAsPrivileged to test at pod level * add pod level success/failure tests * add insuecure capabilities pod level testing * update checks to include good/bad security * update checks for good/bad security * remove good security from runAsPrivileged	2021-05-25 12:59:28 -04:00
Robert BrennanandGitHub	c16aac808f	fix checks for k8s defaults (#496) ... * fix insecure caps check * add more tests * fix privilege escalation allowed	2021-02-11 17:11:16 -05:00