search

Shopify / kubeaudit

kubeaudit helps you audit your Kubernetes clusters against common security controls
MIT License
1.89k stars 183 forks source link

Kubeaudit does not detect issues in cronjobs #520

Open bluebrown opened 1 year ago

bluebrown commented 1 year ago
ISSUE TYPE

BUG REPORT

SUMMARY

Kubeaudit does not detect issues in cronjobs

ENVIRONMENT
STEPS TO REPRODUCE
$ curl -fsSL https://github.com/Shopify/kubeaudit/releases/download/v0.21.0/kubeaudit_0.21.0_linux_amd64.tar.gz \
  | tar -xzf - kubeaudit

$ curl -fsSL https://raw.githubusercontent.com/kubernetes/website/snapshot-initial-v1.26/content/en/examples/application/job/cronjob.yaml \
  | ./kubeaudit all -f -

All checks completed. 0 high-risk vulnerabilities found
EXPECTED RESULTS

Kubeaudit should report a bunch of issues.

ACTUAL RESULTS

No issues detected

github-actions[bot] commented 1 year ago

Thanks for opening your first issue here! Be sure to follow the issue template!

genevieveluyt commented 1 year ago

Hi @bluebrowb, thanks for opening this issue. My guess is we just need to bump some dependency versions. Kubeaudit only knows about the batch/v1beta1 CronJob currently

bluebrown commented 1 year ago

Hi, I just saw that. I forked the repo looking into it, if thats ok.