polaris

FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816 )

2022-08-05 09:44:18 -06:00

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

clusterrolebindingPodExecAttach.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

clusterrolePodExecAttach.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

cpuLimitsMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

cpuRequestsMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

dangerousCapabilities.yaml

Update dangerousCapabilities.yaml (#866 )

2023-01-05 10:24:21 -07:00

deploymentMissingReplicas.yaml

Added more mutations and refactor test to test each mutation separately (#734 )

2022-04-08 17:19:14 +03:00

hostIPCSet.yaml

Change target: Pod to target: PodSpec (#726 )

2022-06-07 07:37:25 -06:00

hostNetworkSet.yaml

Change target: Pod to target: PodSpec (#726 )

2022-06-07 07:37:25 -06:00

hostPIDSet.yaml

Change target: Pod to target: PodSpec (#726 )

2022-06-07 07:37:25 -06:00

hostPortSet.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

insecureCapabilities.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

linuxHardening.yaml

FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816 )

2022-08-05 09:44:18 -06:00

livenessProbeMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

memoryLimitsMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

memoryRequestsMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

metadataAndNameMismatched.yaml

Add support for check templates (#520 )

2021-04-09 09:08:31 -04:00

missingNetworkPolicy.yaml

FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816 )

2022-08-05 09:44:18 -06:00

missingPodDisruptionBudget.yaml

Support multi-resource templates (#524 )

2021-05-06 14:01:20 -04:00

notReadOnlyRootFilesystem.yaml

Enable pullPolicyNotAlways (#795 )

2022-07-11 13:20:17 -04:00

pdbDisruptionsIsZero.yaml

change test for PDB disruptions (#620 )

2021-08-31 11:40:36 -04:00

priorityClassNotSet.yaml

Change target: Pod to target: PodSpec (#726 )

2022-06-07 07:37:25 -06:00

privilegeEscalationAllowed.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

pullPolicyNotAlways.yaml

Add mutation field to imagePolicyNotAlways (#712 )

2022-03-25 16:38:58 +03:00

readinessProbeMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

rolebindingClusterAdminClusterRole.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

rolebindingClusterAdminRole.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

rolebindingClusterRolePodExecAttach.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

rolebindingRolePodExecAttach.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

rolePodExecAttach.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

runAsPrivileged.yaml

Change target: Pod to target: PodSpec (#726 )

2022-06-07 07:37:25 -06:00

runAsRootAllowed.yaml

ensure path exists when adding mutations (#789 )

2022-07-07 10:00:36 -04:00

sensitiveConfigmapContent.yaml

FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817 )

2022-08-05 11:58:57 -04:00

sensitiveContainerEnvVar.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

tagNotSpecified.yaml

Recategorize the results into standard categories. (#434 )

2020-11-04 10:17:37 -05:00

tlsSettingsMissing.yaml

Add support for arbitrary Kinds (#505 )

2021-03-26 08:29:59 -04:00

topologySpreadConstraint.yaml

Fix #547 - add a check for topologySpreadConstraint (#879 )

2023-01-04 14:05:23 -07:00