Skip to content

Checkov

Checkov #222

Triggered via schedule August 28, 2023 00:41
Status Success
Total duration 1m 10s
Artifacts

checkov.yaml

on: schedule
Checkov  /  Checkov Scan
1m 2s
Checkov / Checkov Scan
Fit to window
Zoom out
Zoom in

Annotations

10 errors and 1 warning
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-server.yaml#L23
CKV_K8S_23: "Minimize the admission of root containers"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-server.yaml#L23
CKV_K8S_30: "Apply security context to your containers"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-server.yaml#L23
CKV_K8S_31: "Ensure that the seccomp profile is set to docker/default or runtime/default"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-server.yaml#L23
CKV_K8S_10: "CPU requests should be set"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-server.yaml#L23
CKV_K8S_11: "CPU limits should be set"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-server.yaml#L23
CKV_K8S_28: "Minimize the admission of containers with the NET_RAW capability"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-server.yaml#L23
CKV_K8S_22: "Use read-only filesystem for containers where possible"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-server.yaml#L23
CKV_K8S_12: "Memory requests should be set"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-server.yaml#L23
CKV_K8S_20: "Containers should not run with allowPrivilegeEscalation"
Checkov / Checkov Scan: teamcity/kubernetes-teamcity-server.yaml#L23
CKV_K8S_40: "Containers should run as a high UID to avoid host conflict"
Checkov / Checkov Scan
The following actions uses node12 which is deprecated and will be forced to run on node16: actions/setup-python@v1. For more info: https://github.blog/changelog/2023-06-13-github-actions-all-actions-will-run-on-node16-instead-of-node12-by-default/