-
The test script currently does not really check whether any patch-level update that **targets** any critical CVEs is deployed in time.
Furthermore, the standard is a bit vague about whether this pa…
-
## Overview
When scanning the helm charts, it is desired to skip the scan of any manifest yaml/chart file from the directory. Also it is preferred to skip any particular control from a particular man…
-
e.g., https://github.com/CycloneDX/bom-examples/tree/master/VEX/Use-Cases/Case-4
For false positives like:
- https://github.com/kubernetes/kubernetes/pull/121338#issuecomment-1771341403
-
## Describe the bug
`service_account_mapping` should fail if the CNF includes an auto-mounted service account.
![CleanShot 2024-04-25 at 03 01 49@2x](https://github.com/cnti-testcatalog/testsuit…
-
## **Overview**
Kubernetes offers a feature called [PriorityClass](https://kubernetes.io/docs/concepts/scheduling-eviction/pod-priority-preemption/) which empowers cluster operators to determine th…
-
**Describe the bug**
I'm trying to enter deployment details of one of my cluster, this always result in a crash. No changes if I restart the app or force refresh. This is a AKS cluster v1.26.3.
…
-
`helm` has `helm fetch`, that obtains a chart from a URL or repo, and saves it as tar.gz.
For all operations like `helm install`, `helm upgrade`, helm accepts a local folder or a tar.gz as a chart.
…
-
Hello,
I was interested to understand the total number of intended misconfigurations and vulnerabilities in Kubernetes-goat environment. It will be great to have this information in order to unde…
-
I've been going through security review of our Kubernetes infrastructure, using kubescape specifically, and there are couple of valid findings that I think can be fixed. It's clear why we need `hostPI…
-
Title: Kubescape project update
Speakers: @slashben @matthyx
Description: It has been nearly 2 years since Kubescape was introduced to TAG-Security and around a year ago when we last presented.…