Closed wojiushixiaobai closed 3 months ago
code | level | alerts |
---|---|---|
CIS-DI-0010 | FATAL | Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key) |
CIS-DI-0001 | WARN | Last user should not be root |
CIS-DI-0005 | INFO | export DOCKER_CONTENT_TRUST=1 before docker pull/build |
CIS-DI-0006 | INFO | not found HEALTHCHECK statement |
CIS-DI-0008 | INFO | setgid file: grwxr-xr-x usr/bin/expiry |
This PR is automatically triggered by the GitHub Actions workflow. Please review and verify the changes.