Skip to content

Checkov

Checkov #218

Triggered via schedule July 31, 2023 00:52
Status Success
Total duration 1m 16s
Artifacts

checkov.yaml

on: schedule
Checkov  /  Checkov Scan
1m 8s
Checkov / Checkov Scan
Fit to window
Zoom out
Zoom in

Annotations

10 errors and 1 warning
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-agent.yaml#L23
CKV_K8S_31: "Ensure that the seccomp profile is set to docker/default or runtime/default"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-agent.yaml#L23
CKV_K8S_15: "Image Pull Policy should be Always"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-agent.yaml#L23
CKV_K8S_30: "Apply security context to your containers"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-agent.yaml#L23
CKV_K8S_11: "CPU limits should be set"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-agent.yaml#L23
CKV_K8S_22: "Use read-only filesystem for containers where possible"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-agent.yaml#L23
CKV_K8S_43: "Image should use digest"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-agent.yaml#L23
CKV_K8S_12: "Memory requests should be set"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-agent.yaml#L23
CKV_K8S_10: "CPU requests should be set"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-agent.yaml#L23
CKV_K8S_28: "Minimize the admission of containers with the NET_RAW capability"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-agent.yaml#L23
CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
Checkov / Checkov Scan
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/setup-python@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/