Open TheKangaroo opened 2 months ago
I'm not sure volume is the right key to put the caCertificate key under, since technically caCertificate is not a volume, but a ConfigMap. WDYT?
Thank you for your contribution! We've added this to our internal Community PR board for review. ID: PM-11973
Checkmarx One – Scan Summary & Details – d1dca1e4-db16-4403-a2d4-aaac5a45d06c
Severity | Issue | Source File / Package | Checkmarx Insight |
---|---|---|---|
Passwords And Secrets - Generic Password | /tests.yml: 103 | Query to find passwords and secrets in infrastructure code. | |
Unpinned Actions Full Length Commit SHA | /version-bump.yml: 96 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Unpinned Actions Full Length Commit SHA | /version-bump.yml: 103 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Unpinned Actions Full Length Commit SHA | /update-versions.yml: 52 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Unpinned Actions Full Length Commit SHA | /version-bump.yml: 39 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Unpinned Actions Full Length Commit SHA | /update-versions.yml: 27 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Unpinned Actions Full Length Commit SHA | /version-bump.yml: 111 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Unpinned Actions Full Length Commit SHA | /version-bump.yml: 23 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... | |
Unpinned Actions Full Length Commit SHA | /update-versions.yml: 131 | Pinning an action to a full length commit SHA is currently the only way to use an action as an immutable release. Pinning to a particular SHA helps... |
Severity | Issue | Source File / Package |
---|---|---|
Passwords And Secrets - Generic Password | /tests.yml: 117 | |
Unpinned Actions Full Length Commit SHA | /version-bump-self-host.yml: 39 | |
Unpinned Actions Full Length Commit SHA | /update-versions-self-host.yml: 131 | |
Unpinned Actions Full Length Commit SHA | /version-bump-self-host.yml: 96 | |
Unpinned Actions Full Length Commit SHA | /version-bump-self-host.yml: 111 | |
Unpinned Actions Full Length Commit SHA | /version-bump-self-host.yml: 23 | |
Unpinned Actions Full Length Commit SHA | /version-bump-sm-operator.yml: 47 | |
Unpinned Actions Full Length Commit SHA | /version-bump-self-host.yml: 103 | |
Unpinned Actions Full Length Commit SHA | /update-versions-self-host.yml: 52 | |
Unpinned Actions Full Length Commit SHA | /update-versions-self-host.yml: 27 | |
Unpinned Actions Full Length Commit SHA | /version-bump-sm-operator.yml: 30 | |
Unpinned Actions Full Length Commit SHA | /tests.yml: 38 |
Add optional custom certificate from configmap.
I also added an example on how to add the ca certificate via preInstall array.