search

bridgecrewio / checkov

Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
https://www.checkov.io/
Apache License 2.0
6.75k stars 1.08k forks source link

Exception thrown on MAC when running checkov pre-commit hook 3.1.60 #5945

Open ocofaigh opened 6 months ago

ocofaigh commented 6 months ago

Describe the issue On MAC (14.2.1) running checkov pre-commit hook (https://github.com/bridgecrewio/checkov.git) version 3.1.60, I get the following error:

Checkov.................................................................................Failed
- hook id: checkov
- exit code: 1

2024-01-15 17:38:05,661 [MainThread  ] [WARNI]  The framework "sca_image" is part of the "SCA" module, which is not enabled in the platform
2024-01-15 17:38:05,661 [MainThread  ] [WARNI]  The framework "sast" is part of the "SAST" module, which is not enabled in the platform
2024-01-15 17:38:05,661 [MainThread  ] [WARNI]  The framework "cdk" is part of the "SAST" module, which is not enabled in the platform
2024-01-15 17:38:05,661 [MainThread  ] [WARNI]  The framework "sca_package" is part of the "SCA" module, which is not enabled in the platform
[ arm framework ]: 100% 5/5 [00:00<00:00, 235.28it/s, Current File Scanned=../../../../../common-dev-assets/commonRenovateConfig.json]yaml]
[ kubernetes framework ]:  61% 14/23 [00:00<00:00, 384.78it/s, Current File Scanned=kubeconfig/4989fde4e089774f79e2a1830c0ebf53abb4efa3e756794f11f95a128fa3c881_cmilgi8d0uua0ldfr9ug[ kubernetes framework ]:  65% 15/23 [00:00<00:00, 404.74it/s, Current File Scanned=common-dev-assets/renovate.json]                                                                [ kubernetes framework ]: 100% 23/23 [00:00<00:00, 516.90it/s, Current File Scanned=common-dev-assets/common-go-assets/cloudinfo-region-vpc-gen2-prefs.yaml]

[ secrets framework ]: 100% 39/39 [00:00<00:00, 112.92it/s, Current File Scanned=./common-dev-assets/common-go-assets/cloudinfo-region-vpc-gen2-prefs.yaml]81_cmilgi8d0uua0ldfr9ug_k2024-01-15 17:38:06,102 [ThreadPoolEx] [WARNI]  Failed to download module terraform-ibm-modules/observability-agents/ibm:1.18.1 (for external modules, the --download-external-modules flag is required)]:  97% 38/39 [00:00<00:00,  2.95it/s, Current File Scanned=./common-dev-assets/common-go-assets/cloudinfo-region-vpc-gen2-prefs.yaml]
2024-01-15 17:38:06,102 [ThreadPoolEx] [WARNI]  Failed to download module git::https://github.com/terraform-ibm-modules/terraform-ibm-resource-group.git?ref=v1.1.4:None (for external modules, the --download-external-modules flag is required)
2024-01-15 17:38:06,102 [ThreadPoolEx] [WARNI]  Failed to download module git::https://github.ibm.com/GoldenEye/observability-instances-module?ref=6.3.3:None (for external modules, the --download-external-modules flag is required)
2024-01-15 17:38:06,102 [ThreadPoolEx] [WARNI]  Failed to download module git::https://github.com/terraform-ibm-modules/terraform-ibm-observability-instances?ref=v2.11.0:None (for external modules, the --download-external-modules flag is required)
2024-01-15 17:38:06,102 [ThreadPoolEx] [WARNI]  Failed to download module terraform-ibm-modules/resource-group/ibm:1.1.4 (for external modules, the --download-external-modules flag is required)
2024-01-15 17:38:06,103 [ThreadPoolEx] [WARNI]  Failed to download module terraform-ibm-modules/key-protect-all-inclusive/ibm:4.4.1 (for external modules, the --download-external-modules flag is required)
2024-01-15 17:38:06,103 [ThreadPoolEx] [WARNI]  Failed to download module terraform-ibm-modules/cos/ibm:7.0.5 (for external modules, the --download-external-modules flag is required)
2024-01-15 17:38:06,103 [ThreadPoolEx] [WARNI]  Failed to download module terraform-ibm-modules/observability-instances/ibm:2.10.1 (for external modules, the --download-external-modules flag is required)
2024-01-15 17:38:06,103 [ThreadPoolEx] [WARNI]  Failed to download module git::https://github.ibm.com/GoldenEye/event-streams-instance-module?ref=1.0.0:None (for external modules, the --download-external-modules flag is required)
2024-01-15 17:38:06,103 [ThreadPoolEx] [WARNI]  Failed to download module terraform-ibm-modules/observability-instances/ibm//modules/log_analysis:2.10.1 (for external modules, the --download-external-modules flag is required)
[ terraform framework ]: 100% 14/14 [00:00<00:00, 3784.74it/s, Current File Scanned=version.tf]               
2024-01-15 17:38:06,286 [MainThread  ] [ERROR]  Exception traceback:
Traceback (most recent call last):
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/main.py", line 521, in run
    self.scan_reports = runner_registry.run(
                        ^^^^^^^^^^^^^^^^^^^^
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/common/runners/runner_registry.py", line 171, in run
    for result in parallel_runner_results:
  File "/opt/homebrew/Cellar/python@3.11/3.11.7/Frameworks/Python.framework/Versions/3.11/lib/python3.11/concurrent/futures/_base.py", line 619, in result_iterator
    yield _result_or_cancel(fs.pop())
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/python@3.11/3.11.7/Frameworks/Python.framework/Versions/3.11/lib/python3.11/concurrent/futures/_base.py", line 317, in _result_or_cancel
    return fut.result(timeout)
           ^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/python@3.11/3.11.7/Frameworks/Python.framework/Versions/3.11/lib/python3.11/concurrent/futures/_base.py", line 449, in result
    return self.__get_result()
           ^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/python@3.11/3.11.7/Frameworks/Python.framework/Versions/3.11/lib/python3.11/concurrent/futures/_base.py", line 401, in __get_result
    raise self._exception
  File "/opt/homebrew/Cellar/python@3.11/3.11.7/Frameworks/Python.framework/Versions/3.11/lib/python3.11/concurrent/futures/thread.py", line 58, in run
    result = self.fn(*self.args, **self.kwargs)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/common/runners/runner_registry.py", line 818, in _parallel_run
    report = runner.run(
             ^^^^^^^^^^^
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/common/runners/object_runner.py", line 143, in run
    local_graph = self.graph_manager.build_graph_from_definitions(
                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/common/runners/graph_manager.py", line 39, in build_graph_from_definitions
    local_graph.build_graph(render_variables)
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/common/runners/graph_builder/local_graph.py", line 21, in build_graph
    self._create_vertices()
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/ansible/graph_builder/local_graph.py", line 37, in _create_vertices
    self._process_blocks(file_path=file_path, task=code_block)
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/ansible/graph_builder/local_graph.py", line 52, in _process_blocks
    self._create_tasks_vertices(file_path=file_path, task=task, prefix=prefix)
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/ansible/graph_builder/local_graph.py", line 87, in _create_tasks_vertices
    attributes[CustomAttributes.RESOURCE_TYPE] = resource_type
    ~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
TypeError: 'bool' object does not support item assignment
Traceback (most recent call last):
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/bin/checkov", line 9, in <module>
    sys.exit(Checkov().run())
             ^^^^^^^^^^^^^^^
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/main.py", line 521, in run
    self.scan_reports = runner_registry.run(
                        ^^^^^^^^^^^^^^^^^^^^
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/common/runners/runner_registry.py", line 171, in run
    for result in parallel_runner_results:
  File "/opt/homebrew/Cellar/python@3.11/3.11.7/Frameworks/Python.framework/Versions/3.11/lib/python3.11/concurrent/futures/_base.py", line 619, in result_iterator
    yield _result_or_cancel(fs.pop())
          ^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/python@3.11/3.11.7/Frameworks/Python.framework/Versions/3.11/lib/python3.11/concurrent/futures/_base.py", line 317, in _result_or_cancel
    return fut.result(timeout)
           ^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/python@3.11/3.11.7/Frameworks/Python.framework/Versions/3.11/lib/python3.11/concurrent/futures/_base.py", line 449, in result
    return self.__get_result()
           ^^^^^^^^^^^^^^^^^^^
  File "/opt/homebrew/Cellar/python@3.11/3.11.7/Frameworks/Python.framework/Versions/3.11/lib/python3.11/concurrent/futures/_base.py", line 401, in __get_result
    raise self._exception
  File "/opt/homebrew/Cellar/python@3.11/3.11.7/Frameworks/Python.framework/Versions/3.11/lib/python3.11/concurrent/futures/thread.py", line 58, in run
    result = self.fn(*self.args, **self.kwargs)
             ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/common/runners/runner_registry.py", line 818, in _parallel_run
    report = runner.run(
             ^^^^^^^^^^^
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/common/runners/object_runner.py", line 143, in run
    local_graph = self.graph_manager.build_graph_from_definitions(
                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/common/runners/graph_manager.py", line 39, in build_graph_from_definitions
    local_graph.build_graph(render_variables)
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/common/runners/graph_builder/local_graph.py", line 21, in build_graph
    self._create_vertices()
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/ansible/graph_builder/local_graph.py", line 37, in _create_vertices
    self._process_blocks(file_path=file_path, task=code_block)
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/ansible/graph_builder/local_graph.py", line 52, in _process_blocks
    self._create_tasks_vertices(file_path=file_path, task=task, prefix=prefix)
  File "/Users/conall/.cache/pre-commit/repolb3kytzf/py_env-python3.11/lib/python3.11/site-packages/checkov/ansible/graph_builder/local_graph.py", line 87, in _create_tasks_vertices
    attributes[CustomAttributes.RESOURCE_TYPE] = resource_type
    ~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
TypeError: 'bool' object does not support item assignment

The same pre-commit hook against the same code base on an ubuntu machine gives the below ouput. It also has warnings, but at least I can see the failed checks in the output:

Checkov.................................................................................Failed
- hook id: checkov
- exit code: 1

2024-01-15 16:27:56,629 [MainThread  ] [WARNI]  Failed to get the checkov mappings and guidelines from https://www.bridgecrew.cloud/api/v2/guidelines. Skips using BC_* IDs will not work.
Traceback (most recent call last):
  File "/root/.cache/pre-commit/repoa7ezhou5/py_env-python3/lib/python3.11/site-packages/checkov/common/bridgecrew/platform_integration.py", line 1145, in get_public_run_config
    self.public_metadata_response = json.loads(request.data.decode("utf8"))
                                    ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/json/__init__.py", line 346, in loads
    return _default_decoder.decode(s)
           ^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/json/decoder.py", line 337, in decode
    obj, end = self.raw_decode(s, idx=_w(s, 0).end())
               ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/usr/lib/python3.11/json/decoder.py", line 355, in raw_decode
    raise JSONDecodeError("Expecting value", s, err.value) from None
json.decoder.JSONDecodeError: Expecting value: line 1 column 1 (char 0)
2024-01-15 16:27:56,636 [MainThread  ] [WARNI]  The framework "sca_image" is part of the "SCA" module, which is not enabled in the platform
2024-01-15 16:27:56,636 [MainThread  ] [WARNI]  The framework "sast" is part of the "SAST" module, which is not enabled in the platform
2024-01-15 16:27:56,636 [MainThread  ] [WARNI]  The framework "cdk" is part of the "SAST" module, which is not enabled in the platform
2024-01-15 16:27:56,636 [MainThread  ] [WARNI]  The framework "sca_package" is part of the "SCA" module, which is not enabled in the platform
2024-01-15 16:27:57,427 [MainThread  ] [WARNI]  Failed to download module terraform-ibm-modules/observability-agents/ibm:1.18.1 (for external modules, the --download-external-modules flag is required)
2024-01-15 16:27:57,427 [MainThread  ] [WARNI]  Failed to download module git::https://github.com/terraform-ibm-modules/terraform-ibm-resource-group.git?ref=v1.1.4:None (for external modules, the --download-external-modules flag is required)
2024-01-15 16:27:57,427 [MainThread  ] [WARNI]  Failed to download module git::https://github.ibm.com/GoldenEye/observability-instances-module?ref=6.3.3:None (for external modules, the --download-external-modules flag is required)
2024-01-15 16:27:57,428 [MainThread  ] [WARNI]  Failed to download module git::https://github.com/terraform-ibm-modules/terraform-ibm-observability-instances?ref=v2.11.0:None (for external modules, the --download-external-modules flag is required)
2024-01-15 16:27:57,428 [MainThread  ] [WARNI]  Failed to download module terraform-ibm-modules/resource-group/ibm:1.1.4 (for external modules, the --download-external-modules flag is required)
2024-01-15 16:27:57,429 [MainThread  ] [WARNI]  Failed to download module terraform-ibm-modules/key-protect-all-inclusive/ibm:4.4.1 (for external modules, the --download-external-modules flag is required)
2024-01-15 16:27:57,429 [MainThread  ] [WARNI]  Failed to download module terraform-ibm-modules/cos/ibm:7.0.5 (for external modules, the --download-external-modules flag is required)
2024-01-15 16:27:57,429 [MainThread  ] [WARNI]  Failed to download module terraform-ibm-modules/observability-instances/ibm:2.10.1 (for external modules, the --download-external-modules flag is required)
2024-01-15 16:27:57,432 [MainThread  ] [WARNI]  Failed to download module git::https://github.ibm.com/GoldenEye/event-streams-instance-module?ref=1.0.0:None (for external modules, the --download-external-modules flag is required)
2024-01-15 16:27:57,432 [MainThread  ] [WARNI]  Failed to download module terraform-ibm-modules/observability-instances/ibm//modules/log_analysis:2.10.1 (for external modules, the --download-external-modules flag is required)
2024-01-15 16:27:58,648 [MainThread  ] [ERROR]  Failed to invoke function /root/.cache/pre-commit/repoa7ezhou5/py_env-python3/lib/python3.11/site-packages/checkov/common/runners/runner_registry._parallel_run with (<checkov.ansible.runner.Runner object at 0x7f4e89d248d0>, '.', None, None, <checkov.runner_filter.RunnerFilter object at 0x7f4e89d47110>, True, None)
Traceback (most recent call last):
  File "/root/.cache/pre-commit/repoa7ezhou5/py_env-python3/lib/python3.11/site-packages/checkov/common/parallelizer/parallel_runner.py", line 69, in func_wrapper
    result = original_func(*item)
             ^^^^^^^^^^^^^^^^^^^^
  File "/root/.cache/pre-commit/repoa7ezhou5/py_env-python3/lib/python3.11/site-packages/checkov/common/runners/runner_registry.py", line 818, in _parallel_run
    report = [runner.run](http://runner.run/)(
             ^^^^^^^^^^^
  File "/root/.cache/pre-commit/repoa7ezhou5/py_env-python3/lib/python3.11/site-packages/checkov/common/runners/object_runner.py", line 143, in run
    local_graph = self.graph_manager.build_graph_from_definitions(
                  ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
  File "/root/.cache/pre-commit/repoa7ezhou5/py_env-python3/lib/python3.11/site-packages/checkov/common/runners/graph_manager.py", line 39, in build_graph_from_definitions
    local_graph.build_graph(render_variables)
  File "/root/.cache/pre-commit/repoa7ezhou5/py_env-python3/lib/python3.11/site-packages/checkov/common/runners/graph_builder/local_graph.py", line 21, in build_graph
    self._create_vertices()
  File "/root/.cache/pre-commit/repoa7ezhou5/py_env-python3/lib/python3.11/site-packages/checkov/ansible/graph_builder/local_graph.py", line 37, in _create_vertices
    self._process_blocks(file_path=file_path, task=code_block)
  File "/root/.cache/pre-commit/repoa7ezhou5/py_env-python3/lib/python3.11/site-packages/checkov/ansible/graph_builder/local_graph.py", line 52, in _process_blocks
    self._create_tasks_vertices(file_path=file_path, task=task, prefix=prefix)
  File "/root/.cache/pre-commit/repoa7ezhou5/py_env-python3/lib/python3.11/site-packages/checkov/ansible/graph_builder/local_graph.py", line 87, in _create_tasks_vertices
    attributes[CustomAttributes.RESOURCE_TYPE] = resource_type
    ~~~~~~~~~~^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
TypeError: 'bool' object does not support item assignment

       _               _              
   ___| |__   ___  ___| | _______   __
  / __| '_ \ / _ \/ __| |/ / _ \ \ / /
 | (__| | | |  __/ (__|   < (_) \ V / 
  \___|_| |_|\___|\___|_|\_\___/ \_/  

By Prisma Cloud | version: 3.1.57 
Update available 3.1.57 -> 3.1.61
Run pip3 install -U checkov to update 

terraform scan results:

Passed checks: 2, Failed checks: 0, Skipped checks: 0

Check: CKV2_IBM_2: "Ensure VPC classic access is disabled"
    PASSED for resource: ibm_is_vpc.example_vpc
    File: /examples/basic/main.tf:40-44
Check: CKV2_IBM_2: "Ensure VPC classic access is disabled"
    PASSED for resource: ibm_is_vpc.example_vpc
    File: /examples/sts/main.tf:50-55
helm scan results:

Passed checks: 83, Failed checks: 19, Skipped checks: 0

Check: CKV_K8S_21: "The default namespace should not be used"
    PASSED for resource: Secret.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/secret.yaml:3-14
Check: CKV_K8S_42: "Ensure that default service accounts are not actively used"
    PASSED for resource: RoleBinding.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/rolebinding.yaml:3-19
Check: CKV_K8S_21: "The default namespace should not be used"
    PASSED for resource: RoleBinding.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/rolebinding.yaml:3-19
Check: CKV_K8S_49: "Minimize wildcard use in Roles and ClusterRoles"
    PASSED for resource: Role.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/role.yaml:3-15
Check: CKV_K8S_158: "Minimize Roles and ClusterRoles that grant permissions to escalate Roles or ClusterRoles"
    PASSED for resource: Role.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/role.yaml:3-15
Check: CKV_K8S_21: "The default namespace should not be used"
    PASSED for resource: Role.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/role.yaml:3-15
Check: CKV_K8S_157: "Minimize Roles and ClusterRoles that grant permissions to bind RoleBindings or ClusterRoleBindings"
    PASSED for resource: Role.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/role.yaml:3-15
Check: CKV_K8S_42: "Ensure that default service accounts are not actively used"
    PASSED for resource: ClusterRoleBinding.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/clusterrolebinding.yaml:3-19
Check: CKV_K8S_90: "Ensure that the --profiling argument is set to false"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_100: "Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_68: "Ensure that the --anonymous-auth argument is set to false"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_85: "Ensure that the admission control plugin NodeRestriction is set"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_114: "Ensure that the --profiling argument is set to false"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_91: "Ensure that the --audit-log-path argument is set"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_69: "Ensure that the --basic-auth-file argument is not set"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_99: "Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_26: "Do not specify hostPort unless absolutely necessary"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_79: "Ensure that the admission control plugin AlwaysAdmit is not set"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_74: "Ensure that the --authorization-mode argument is not set to AlwaysAllow"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_118: "Ensure that the --auto-tls argument is not set to true"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_146: "Ensure that the --hostname-override argument is not set"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_81: "Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_104: "Ensure that encryption providers are appropriately configured"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_94: "Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_95: "Ensure that the --request-timeout argument is set as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_30: "Apply security context to your containers"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_84: "Ensure that the admission control plugin PodSecurityPolicy is set"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_34: "Ensure that Tiller (Helm v2) is not deployed"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_115: "Ensure that the --bind-address argument is set to 127.0.0.1"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_147: "Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_117: "Ensure that the --client-cert-auth argument is set to true"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_139: "Ensure that the --authorization-mode argument is not set to AlwaysAllow"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_73: "Ensure that the --kubelet-certificate-authority argument is set as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_27: "Do not expose the docker daemon socket to containers"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_83: "Ensure that the admission control plugin NamespaceLifecycle is set"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_141: "Ensure that the --read-only-port argument is set to 0"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_113: "Ensure that the --bind-address argument is set to 127.0.0.1"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_111: "Ensure that the --root-ca-file argument is set as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_21: "The default namespace should not be used"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_143: "Ensure that the --streaming-connection-idle-timeout argument is not set to 0"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_89: "Ensure that the --secure-port argument is not set to 0"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_97: "Ensure that the --service-account-key-file argument is set as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_110: "Ensure that the --service-account-private-key-file argument is set as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_92: "Ensure that the --audit-log-maxage argument is set to 30 or as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_80: "Ensure that the admission control plugin AlwaysPullImages is set"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_96: "Ensure that the --service-account-lookup argument is set to true"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_116: "Ensure that the --cert-file and --key-file arguments are set as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_88: "Ensure that the --insecure-port argument is set to 0"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_70: "Ensure that the --token-auth-file argument is not set"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_75: "Ensure that the --authorization-mode argument includes Node"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_151: "Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_77: "Ensure that the --authorization-mode argument includes RBAC"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_33: "Ensure the Kubernetes dashboard is not deployed"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_138: "Ensure that the --anonymous-auth argument is set to false"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_112: "Ensure that the RotateKubeletServerCertificate argument is set to true"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_72: "Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_148: "Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_102: "Ensure that the --etcd-cafile argument is set as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_106: "Ensure that the --terminated-pod-gc-threshold argument is set as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_149: "Ensure that the --rotate-certificates argument is not set to false"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_14: "Image Tag should be fixed - not latest or blank"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_17: "Containers should not share the host process ID namespace"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_39: "Do not use the CAP_SYS_ADMIN linux capability"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_105: "Ensure that the API Server only makes use of Strong Cryptographic Ciphers"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_108: "Ensure that the --use-service-account-credentials argument is set to true"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_18: "Containers should not share the host IPC namespace"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_107: "Ensure that the --profiling argument is set to false"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_145: "Ensure that the --make-iptables-util-chains argument is set to true"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_119: "Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_23: "Minimize the admission of root containers"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_86: "Ensure that the --insecure-bind-address argument is not set"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_19: "Containers should not share the host network namespace"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_82: "Ensure that the admission control plugin ServiceAccount is set"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_93: "Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_71: "Ensure that the --kubelet-https argument is set to true"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_144: "Ensure that the --protect-kernel-defaults argument is set to true"
    PASSED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134
Check: CKV_K8S_41: "Ensure that default service accounts are not actively used"
    PASSED for resource: ServiceAccount.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/serviceaccount.yaml:3-11
Check: CKV_K8S_21: "The default namespace should not be used"
    PASSED for resource: ServiceAccount.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/serviceaccount.yaml:3-11
Check: CKV_K8S_49: "Minimize wildcard use in Roles and ClusterRoles"
    PASSED for resource: ClusterRole.default.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/clusterrole.yaml:3-17
Check: CKV_K8S_158: "Minimize Roles and ClusterRoles that grant permissions to escalate Roles or ClusterRoles"
    PASSED for resource: ClusterRole.default.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/clusterrole.yaml:3-17
Check: CKV_K8S_157: "Minimize Roles and ClusterRoles that grant permissions to bind RoleBindings or ClusterRoleBindings"
    PASSED for resource: ClusterRole.default.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/clusterrole.yaml:3-17
Check: CKV_K8S_156: "Minimize ClusterRoles that grant permissions to approve CertificateSigningRequests"
    PASSED for resource: ClusterRole.default.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/clusterrole.yaml:3-17
Check: CKV_K8S_155: "Minimize ClusterRoles that grant control over validating or mutating admission webhook configurations"
    PASSED for resource: ClusterRole.default.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/clusterrole.yaml:3-17
Check: CKV_K8S_40: "Containers should run as a high UID to avoid host conflict"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_25: "Minimize the admission of containers with added capability"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_13: "Memory limits should be set"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_9: "Readiness Probe Should be Configured"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_28: "Minimize the admission of containers with the NET_RAW capability"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_16: "Container should not be privileged"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_31: "Ensure that the seccomp profile is set to docker/default or runtime/default"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_43: "Image should use digest"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_35: "Prefer using secrets as files over secrets as environment variables"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_20: "Containers should not run with allowPrivilegeEscalation"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_29: "Apply security context to your pods and containers"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_22: "Use read-only filesystem for containers where possible"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_8: "Liveness Probe Should be Configured"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_10: "CPU requests should be set"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_15: "Image Pull Policy should be Always"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_37: "Minimize the admission of containers with capabilities assigned"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_11: "CPU limits should be set"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
Check: CKV_K8S_12: "Memory requests should be set"
    FAILED for resource: DaemonSet.pw-c27836bb-c840-4da2-9a5c-9205b5814afd.logdna-agent-sts
    File: /chart/supertenant-logdna-agent/logdna-agent-supertenant/templates/daemonset.yaml:3-134

        Code lines for this resource are too many. Please use IDE of your choice to review the file.
**Examples**
Please share an example code sample (in the IaC of your choice) + the expected outcomes.

**Exception Trace**
Please share the trace for the exception and all relevant output by checkov.
To maximize the understanding, please run checkov with LOG_LEVEL set to debug
as follows:
```sh
LOG_LEVEL=DEBUG checkov ...

Desktop (please complete the following information):

Additional context Add any other context about the problem here (e.g. code snippets).

Saarett commented 6 months ago

Hi @ocofaigh , thanks for reaching out. Did this happen only with this version of Checkov, or with any earlier versions as well?

ocofaigh commented 6 months ago

@Saarett It seems the last working version for me is 3.1.55. All versions after this run into this error.

Saarett commented 6 months ago

@ocofaigh Thank you, this is very helpful. My hunch is that this PR caused it. We will have to investigate further and get back to you. CC @AdamDev for visibility

ocofaigh commented 4 months ago

@Saarett @AdamDev Any update on this issue - seems its still reproducible in 3.2.35