ivanfetch-fw 206322271c FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817) ...

* Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks

* Update full example configfile

2022-08-05 11:58:57 -04:00

..

automountServiceAccountToken

FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)

2022-08-05 09:44:18 -06:00

cpuLimitsMissing

Enable pullPolicyNotAlways (#795)

2022-07-11 13:20:17 -04:00

cpuRequestsMissing

Add fix command to mutate and update IaC (#746)

2022-04-28 18:28:33 +03:00

dangerousCapabilities

Enable pullPolicyNotAlways (#795)

2022-07-11 13:20:17 -04:00

deploymentMissingReplicas

Add fix command to mutate and update IaC (#746)

2022-04-28 18:28:33 +03:00

hostIPCSet

Add fix command to mutate and update IaC (#746)

2022-04-28 18:28:33 +03:00

hostNetworkSet

Add fix command to mutate and update IaC (#746)

2022-04-28 18:28:33 +03:00

hostPIDSet

Add fix command to mutate and update IaC (#746)

2022-04-28 18:28:33 +03:00

hostPortSet

Liveness probe (#529)

2021-05-06 09:11:10 -07:00

insecureCapabilities

Enable pullPolicyNotAlways (#795)

2022-07-11 13:20:17 -04:00

linuxHardening

FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)

2022-08-05 09:44:18 -06:00

livenessProbeMissing

Add fix command to mutate and update IaC (#746)

2022-04-28 18:28:33 +03:00

memoryLimitsMissing

Enable pullPolicyNotAlways (#795)

2022-07-11 13:20:17 -04:00

memoryRequestsMissing

Add fix command to mutate and update IaC (#746)

2022-04-28 18:28:33 +03:00

metadataAndNameMismatched

Add support for check templates (#520)

2021-04-09 09:08:31 -04:00

missingNetworkPolicy

FWI-2476: Add missingNetworkPolicy, automountServiceAccountToken, and linuxHardening checks (#816)

2022-08-05 09:44:18 -06:00

missingPodDisruptionBudget

better support for namespaces in additional schemas (#593)

2021-07-27 10:31:34 -04:00

nakedPod

Change target: Pod to target: PodSpec (#726)

2022-06-07 07:37:25 -06:00

notReadOnlyRootFilesystem

update notReadOnlyRootFilesystem check (#543)

2021-05-24 15:21:04 -07:00

oneController

Change target: Pod to target: PodSpec (#726)

2022-06-07 07:37:25 -06:00

pdbDisruptionsIsZero

change test for PDB disruptions (#620)

2021-08-31 11:40:36 -04:00

priorityClassNotSet

Add priority class check, some test infra (#342)

2020-06-22 16:34:48 -04:00

privilegeEscalationAllowed

Pod level testing (#546)

2021-05-25 12:59:28 -04:00

pullPolicyNotAlways

Add fix command to mutate and update IaC (#746)

2022-04-28 18:28:33 +03:00

readinessProbeMissing

Add fix command to mutate and update IaC (#746)

2022-04-28 18:28:33 +03:00

runAsPrivileged

Pod level testing (#546)

2021-05-25 12:59:28 -04:00

runAsRootAllowed

Add fix command to mutate and update IaC (#746)

2022-04-28 18:28:33 +03:00

sensitiveConfigmapContent

FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817)

2022-08-05 11:58:57 -04:00

sensitiveContainerEnvVar

FWI-2509: Add sensitiveContainerEnvVar and sensitiveConfigMapContent checks (#817)

2022-08-05 11:58:57 -04:00

tagNotSpecified

add failure, failure.latest and success.yaml file (#541)

2021-05-18 12:40:55 -07:00

tlsSettingsMissing

Add support for arbitrary Kinds (#505)

2021-03-26 08:29:59 -04:00