polaris

automountServiceAccountToken.yaml

Minor fixes for NSA checks (#952 )

2023-06-09 12:35:36 -06:00

clusterrolebindingClusterAdmin.yaml

fix: conditional expressions should be at very top of additionalSchemaStrings (#1025 )

2024-01-03 14:17:04 -06:00

clusterrolebindingPodExecAttach.yaml

Minor fixes for NSA checks (#952 )

2023-06-09 12:35:36 -06:00

clusterrolePodExecAttach.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

cpuLimitsMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

cpuRequestsMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

dangerousCapabilities.yaml

Update dangerousCapabilities.yaml (#866 )

2023-01-05 10:24:21 -07:00

deploymentMissingReplicas.yaml

Added more mutations and refactor test to test each mutation separately (#734 )

2022-04-08 17:19:14 +03:00

hostIPCSet.yaml

Change target: Pod to target: PodSpec (#726 )

2022-06-07 07:37:25 -06:00

hostNetworkSet.yaml

Change target: Pod to target: PodSpec (#726 )

2022-06-07 07:37:25 -06:00

hostPIDSet.yaml

Change target: Pod to target: PodSpec (#726 )

2022-06-07 07:37:25 -06:00

hostPortSet.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

insecureCapabilities.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

linuxHardening.yaml

FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816 )

2022-08-05 09:44:18 -06:00

livenessProbeMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

memoryLimitsMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

memoryRequestsMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

metadataAndInstanceMismatched.yaml

change kubernetes.io/ label from name to instance (#973 )

2023-07-13 11:33:15 -06:00

missingNetworkPolicy.yaml

FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816 )

2022-08-05 09:44:18 -06:00

missingPodDisruptionBudget.yaml

fix missing PDB check (#1027 )

2024-02-13 13:13:11 -05:00

notReadOnlyRootFilesystem.yaml

Enable pullPolicyNotAlways (#795 )

2022-07-11 13:20:17 -04:00

pdbDisruptionsIsZero.yaml

change test for PDB disruptions (#620 )

2021-08-31 11:40:36 -04:00

priorityClassNotSet.yaml

FWI-4307 - fix checks category (#964 )

2023-06-21 12:08:49 -04:00

privilegeEscalationAllowed.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

pullPolicyNotAlways.yaml

Add mutation field to imagePolicyNotAlways (#712 )

2022-03-25 16:38:58 +03:00

readinessProbeMissing.yaml

[FWI-2357] Let Polaris modify YAML without losing comments/formatting (#821 )

2022-09-15 12:38:22 -04:00

rolebindingClusterAdminClusterRole.yaml

fix: conditional expressions should be at very top of additionalSchemaStrings (#1025 )

2024-01-03 14:17:04 -06:00

rolebindingClusterAdminRole.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

rolebindingClusterRolePodExecAttach.yaml

fix: conditional expressions should be at very top of additionalSchemaStrings (#1025 )

2024-01-03 14:17:04 -06:00

rolebindingRolePodExecAttach.yaml

fix: conditional expressions should be at very top of additionalSchemaStrings (#1025 )

2024-01-03 14:17:04 -06:00

rolePodExecAttach.yaml

FWI-2719: Enable new RBAC / sensitive content / Pod exec checks, add hasPrefix and hasSuffix functions to the GO template, exempt system: name prefixes for RBAC checks, sensitive content checks ignore valueFrom, (#832 )

2022-11-14 15:05:02 -07:00

runAsPrivileged.yaml

Change target: Pod to target: PodSpec (#726 )

2022-06-07 07:37:25 -06:00

runAsRootAllowed.yaml

ensure path exists when adding mutations (#789 )

2022-07-07 10:00:36 -04:00

sensitiveConfigmapContent.yaml

FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817 )

2022-08-05 11:58:57 -04:00

sensitiveContainerEnvVar.yaml

Minor fixes for NSA checks (#952 )

2023-06-09 12:35:36 -06:00

tagNotSpecified.yaml

Recategorize the results into standard categories. (#434 )

2020-11-04 10:17:37 -05:00

tlsSettingsMissing.yaml

Add support for arbitrary Kinds (#505 )

2021-03-26 08:29:59 -04:00

topologySpreadConstraint.yaml

Update topologySpreadConstraint.yaml (#971 )

2023-08-28 08:49:08 -06:00