more fixes

DeepSourceCorp · Oct 26, 2023 · a669852 · a669852
1 parent 10b5fc8
commit a669852
Show file tree

Hide file tree

Showing 36 changed files with 4 additions and 37 deletions.
diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1002.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1002.toml
@@ -2,7 +2,6 @@ title = "Unrestricted access to Secrets"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when a subject (Group/User/ServiceAccount) has access to Secrets. CIS Benchmark 5.1.2: Access to secrets should be restricted to the smallest possible group of users to reduce the risk of privilege escalation.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1003.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1003.toml
@@ -2,7 +2,6 @@ title = "`cluster admin` role should be used only where required"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 CIS Benchmark 5.1.1 Ensure that the cluster-admin role is only used where required
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1004.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1004.toml
@@ -2,7 +2,6 @@ title = "Missing `scaleTargetRef` in `HorizontalPodAutoscaler`"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when HorizontalPodAutoscalers target a missing resource.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1005.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1005.toml
@@ -2,7 +2,6 @@ title = "Ingress without associated services"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when ingress do not have any associated services.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1006.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1006.toml
@@ -2,7 +2,6 @@ title = "NetworkPolicy without associated deployments"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when networkpolicies do not have any associated deployments.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1007.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1007.toml
@@ -2,7 +2,6 @@ title = "Misconfigured NetworkPolicyPeer podSelectors"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when NetworkPolicyPeer in Egress/Ingress rules -in the Spec of NetworkPolicy- do not have any associated deployments. Applied on peer specified with podSelectors only.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1008.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1008.toml
@@ -2,7 +2,6 @@ title = "Missing deployment for service"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when services do not have any associated deployments.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1009.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1009.toml
@@ -2,7 +2,6 @@ title = "Pods using default service account"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when pods use the default service account.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1010.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1010.toml
@@ -2,7 +2,6 @@ title = "Use of deprecated `serviceAccount` field in deployments"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when deployments use the deprecated serviceAccount field.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1011.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1011.toml
@@ -2,7 +2,6 @@ title = "Missing `dnsConfig` options in deployments"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Alert on deployments that have no specified dnsConfig options
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1012.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1012.toml
@@ -2,7 +2,6 @@ title = "`docker.sock` volume mounted in containers"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Alert on deployments with docker.sock mounted in containers.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1013.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1013.toml
@@ -2,7 +2,6 @@ title = "Container with `NET_RAW` capability"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when containers do not drop NET_RAW capability
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1014.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1014.toml
@@ -2,7 +2,6 @@ title = "Duplicate env vars dedicated"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Check that duplicate named env vars aren't passed to a deployment like.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1015.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1015.toml
@@ -2,7 +2,6 @@ title = "Insecure use of secrets in environment variables"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when objects use a secret in an environment variable.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1016.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1016.toml
@@ -2,7 +2,6 @@ title = "Forbidden service types for exposed services"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Alert on services for forbidden types
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1017.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1017.toml
@@ -2,7 +2,6 @@ title = "Sharing host's IPC namespace"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Alert on pods/deployment-likes with sharing host's IPC namespace
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1019.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1019.toml
@@ -2,7 +2,6 @@ title = "Sharing host's process namespace"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Alert on pods/deployment-likes with sharing host's process namespace
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1020.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1020.toml
@@ -2,7 +2,6 @@ title = "Insufficient `minReplicas` in `HorizontalPodAutoscaler`"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when a HorizontalPodAutoscaler specifies less than three minReplicas
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1021.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1021.toml
@@ -2,7 +2,6 @@ title = "Invalid port names in deployments or services"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when deployments or services are using port names that are violating specifications.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1022.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1022.toml
@@ -2,7 +2,6 @@ title = "Invalid container image"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when a deployment-like object is running a container with an invalid container image
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1023.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1023.toml
@@ -2,7 +2,6 @@ title = "Insufficient number of replicas"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when a deployment uses less than three replicas
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1024.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1024.toml
@@ -2,7 +2,6 @@ title = "Mismatching deployment selector and pod template labels"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when deployment selectors fail to match the pod template labels.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1025.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1025.toml
@@ -2,7 +2,6 @@ title = "Missing inter-pod anti-affinity in deployments with multiple replicas"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when deployments with multiple replicas fail to specify inter-pod anti-affinity, to ensure that the orchestrator attempts to schedule replicas on different nodes.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1026.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1026.toml
@@ -2,7 +2,6 @@ title = "Deprecated API versions used under `extensions/v1beta`"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when objects use deprecated API versions under extensions/v1beta.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1027.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1027.toml
@@ -2,7 +2,6 @@ title = "Missing liveness probe in containers"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when containers fail to specify a liveness probe.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1028.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1028.toml
@@ -2,7 +2,6 @@ title = "Missing node affinity in deployments"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Alert on deployments that have no node affinity defined
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1029.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1029.toml
@@ -2,7 +2,6 @@ title = "Containers running without a read-only root filesystem"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when containers are running without a read-only root filesystem.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1030.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1030.toml
@@ -2,7 +2,6 @@ title = "Missing readiness probe"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when containers fail to specify a readiness probe.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1032.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1032.toml
@@ -2,7 +2,6 @@ title = "Invalid service account reference"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when pods reference a service account that is not found.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1033.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1033.toml
@@ -2,7 +2,6 @@ title = "Missing NetworkPolicy for deployment-like objects"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Alert on deployment-like objects that are not selected by any NetworkPolicy.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1034.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1034.toml
@@ -2,7 +2,6 @@ title = "`PodDisruptionBudget` with `maxUnavailable` value preventing disruption
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when a PodDisruptionBudget has a maxUnavailable value that will always prevent disruptions of pods created by related deployment-like objects.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1035.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1035.toml
@@ -2,7 +2,6 @@ title = "Misconfigured `minAvailable` in `PodDisruptionBudget`"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Indicates when a PodDisruptionBudget sets a minAvailable value that will always prevent disruptions of pods created by related deployment-like objects.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1036.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1036.toml
@@ -2,7 +2,6 @@ title = "Container allows privilege escalation"
 weight = 70
 severity = "major"
 category = "antipattern"
-verbose_name = ""
 description = """
 Alert on containers of allowing privilege escalation that could gain more privileges than its parent process.
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1037.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1037.toml
@@ -1,4 +1,4 @@
-title = "privileged-container"
+title = "Containers running in privileged mode"
 severity = "major"
 category = "antipattern"
 weight = 70

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1038.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1038.toml
@@ -1,9 +1,9 @@
-title = "privileged-ports"
+title = "Containers mapping privileged ports"
 severity = "major"
 category = "antipattern"
 weight = 70
 description = """
-Alert on deployments with privileged ports mapped in containers
+Alert on deployments with privileged ports mapped in containers.
 
 <!--more-->
 

diff --git a/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1039.toml b/analyzers/kube-linter/.deepsource/issues/KUBELIN-W1039.toml
@@ -1,4 +1,4 @@
-title = "read-secret-from-env-var"
+title = "Reading secrets from environment variables"
 severity = "major"
 category = "antipattern"
 weight = 70