Sicherheitsempfehlungen

it-at-m / helm-charts

it@M Helm Charts

https://artifacthub.io/packages/search?repo=it-at-m

MIT License

6 stars 3 forks source link

Sicherheitsempfehlungen #21

Closed hupling closed 6 months ago

hupling commented 7 months ago

Ich habe einmal Checkmarx Kics über das Helm-Chart AppSwitch-Server laufen gelassen. https://docs.gitlab.com/ee/user/application_security/iac_scanning/

Es gibt ein paar Verbesserungsvorschläge für das Helm Chart.

gl-sast-report.json

@eidottermihi

eidottermihi commented 7 months ago

on a first look, I think every issue of the report can be configured by the user of the chart, e.g. container/pod securityContext and container resources are freely configurable via values.yaml.

IMHO thats enough and follows helm standards, as those defaults are configured when creating a new chart via helm create. Also changing those defaults in the Chart would be a breaking change for users.