build(minio): bump minio/minio to latest

wojiushixiaobai commented 3 months ago

This PR is automatically triggered by the GitHub Actions workflow. Please review and verify the changes.

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/mount

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/chage

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/expiry

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/chage

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/sbin/unix_chkpwd

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/gpasswd

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/chsh

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/expiry

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/newgrp

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/umount

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/su

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/gpasswd

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/expiry

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/umount

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/sbin/unix_chkpwd

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/su

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/mount

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-10T01-41-38Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/gpasswd

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-28T17-19-04Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/wall

qiangxuhui commented 3 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-28T17-19-04Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/passwd

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-28T17-19-04Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/chfn

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-28T17-19-04Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/expiry

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-28T17-19-04Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/chsh

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-28T17-19-04Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/expiry

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-28T17-19-04Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/expiry

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-05-28T17-19-04Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/gpasswd

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-04T19-20-08Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/umount

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-06T09-36-42Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/expiry

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-06T09-36-42Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/gpasswd

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-06T09-36-42Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/sbin/unix_chkpwd

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-11T03-13-30Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/gpasswd

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-11T03-13-30Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/mount

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-11T03-13-30Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/passwd

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-13T22-53-53Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/umount

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-13T22-53-53Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/expiry

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-13T22-53-53Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/su

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-13T22-53-53Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/gpasswd

qiangxuhui commented 2 months ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-13T22-53-53Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/passwd

qiangxuhui commented 1 month ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-29T01-20-47Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/chfn

qiangxuhui commented 1 month ago

cr.loongnix.cn/minio/minio:RELEASE.2024-06-29T01-20-47Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/wall

qiangxuhui commented 1 month ago

cr.loongnix.cn/minio/minio:RELEASE.2024-07-04T14-25-45Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/expiry

qiangxuhui commented 1 month ago

cr.loongnix.cn/minio/minio:RELEASE.2024-07-04T14-25-45Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/chage

qiangxuhui commented 1 month ago

cr.loongnix.cn/minio/minio:RELEASE.2024-07-04T14-25-45Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setgid file: grwxr-xr-x usr/bin/wall

qiangxuhui commented 1 month ago

cr.loongnix.cn/minio/minio:RELEASE.2024-07-04T14-25-45Z

code	level	alerts
CIS-DI-0010	FATAL	Suspicious ENV key found : MINIO_ACCESS_KEY_FILE on /bin/sh -c #(nop) ENV MINIO_ACCESS_KEY_FILE=access_key MINIO_SECRET_KEY_FILE=secret_key MINIO_ROOT_USER_FILE=access_key MINIO_ROOT_PASSWORD_FILE=secret_key MINIO_KMS_SECRET_KEY_FILE=kms_master_key MINIO_UPDATE_MINISIGN_PUBKEY=RWTx5Zr1tiHQLwG9keckT0c45M3AGeHD6IvimQHpyRywVWGbP1aVSGav MINIO_CONFIG_ENV_FILE=config.env MC_CONFIG_DIR=/tmp/.mc (You can suppress it with --accept-key)
CIS-DI-0001	WARN	Last user should not be root
CIS-DI-0005	INFO	export DOCKER_CONTENT_TRUST=1 before docker pull/build
CIS-DI-0006	INFO	not found HEALTHCHECK statement
CIS-DI-0008	INFO	setuid file: urwxr-xr-x usr/bin/gpasswd

Loongson-Cloud-Community / dockerfiles

build(minio): bump minio/minio to latest #232