search

chartmuseum / helm-push

Helm plugin to push chart package to ChartMuseum
Apache License 2.0
670 stars 170 forks source link

can't pass #171

Open ozbillwang opened 1 year ago

ozbillwang commented 1 year ago

can't pass security scanning after install helm-push in docker images.

https://github.com/alpine-docker/k8s/issues/40

/root/.local/share/helm/plugins/helm-push/testdata/tls/server.key
/root/.local/share/helm/plugins/helm-push/testdata/tls/client.key
/root/.cache/helm/plugins/https-github.com-chartmuseum-helm-push/testdata/tls/client.key
/root/.cache/helm/plugins/https-github.com-chartmuseum-helm-push/testdata/tls/server.key

after discussed we found the test data in helm-push are not cleaned, so it is not suitable for prod environment.

can I ask to clean below folders when install this plugin

/root/.local/share/helm/plugins/helm-push/testdata/* 
/root/.local/share/helm/plugins/helm-push/acceptance_tests/*

it can be installed in other place, if defined environment variable HELM_PLUGINS, refer: https://helm.sh/docs/topics/plugins/#environment-variables