diff --git a/.mega-linter.yml b/.mega-linter.yml index a6b4e31c..af5e5649 100644 --- a/.mega-linter.yml +++ b/.mega-linter.yml @@ -8,5 +8,6 @@ ENABLE_LINTERS: DISABLE_ERRORS_LINTERS: - MAKEFILE_CHECKMAKE - - REPOSITORY_KICS - - BASH_SHELLCHECK \ No newline at end of file + - BASH_SHELLCHECK + +REPOSITORY_KICS_ARGUMENTS: "--fail-on high" \ No newline at end of file diff --git a/Dockerfile b/Dockerfile index 813d2e88..7be91b59 100644 --- a/Dockerfile +++ b/Dockerfile @@ -1,4 +1,5 @@ # Use the UBI 8 minimal base image +# kics-scan disable=fd54f200-402c-4333-a5a4-36ef6709af2f FROM registry.access.redhat.com/ubi8/ubi-minimal:latest as python-base ENV PYTHONUNBUFFERED=1 \ diff --git a/tests/e2e/Dockerfile b/tests/e2e/Dockerfile index 3dbeae70..aea7f26f 100644 --- a/tests/e2e/Dockerfile +++ b/tests/e2e/Dockerfile @@ -1,3 +1,5 @@ FROM docker.io/wiremock/wiremock:3.2.0-2 -COPY mappings/ /home/wiremock/mappings/ \ No newline at end of file +COPY mappings/ /home/wiremock/mappings/ + +USER 1001 \ No newline at end of file diff --git a/tests/e2e/play-kube.yml b/tests/e2e/play-kube.yml index a1bed1ae..8933923a 100644 --- a/tests/e2e/play-kube.yml +++ b/tests/e2e/play-kube.yml @@ -1,3 +1,4 @@ +--- apiVersion: v1 kind: Pod metadata: @@ -8,5 +9,12 @@ spec: containers: - name: mock-server-container image: localhost/mock-server:latest + securityContext: + allowPrivilegeEscalation: false + capabilities: + drop: + - ALL + add: + - NET_BIND_SERVICE ports: - containerPort: 8080