KICS

KICS #105

Sign in to view logs

Summary
Jobs
- Analyze
Run details
- Usage
- Workflow file

Triggered via schedule July 22, 2024 01:04

main

Status Success

Total duration 47s

Artifacts –

kics.yml

on: schedule

Annotations

10 warnings

[MEDIUM] Container Running With Low UID: charts/ssi-credential-issuer/templates/cronjob-expiry-app.yaml#L37

Check if containers are running with low UID, which might cause conflicts with the host's user table.

[MEDIUM] Container Running With Low UID: charts/ssi-credential-issuer/templates/deployment-issuer-service.yaml#L39

Check if containers are running with low UID, which might cause conflicts with the host's user table.

[MEDIUM] Container Running With Low UID: charts/ssi-credential-issuer/templates/cronjob-issuer-processes.yaml#L37

Check if containers are running with low UID, which might cause conflicts with the host's user table.

[MEDIUM] Seccomp Profile Is Not Configured: charts/ssi-credential-issuer/templates/cronjob-expiry-app.yaml#L37

Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls

[MEDIUM] Seccomp Profile Is Not Configured: charts/ssi-credential-issuer/templates/cronjob-issuer-processes.yaml#L37

Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls

[MEDIUM] Seccomp Profile Is Not Configured: charts/ssi-credential-issuer/templates/deployment-issuer-service.yaml#L39

Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls

[MEDIUM] Service Account Token Automount Not Disabled: charts/ssi-credential-issuer/templates/cronjob-issuer-processes.yaml#L35

Service Account Tokens are automatically mounted even if not necessary

[MEDIUM] Service Account Token Automount Not Disabled: charts/ssi-credential-issuer/templates/deployment-issuer-service.yaml#L38

Service Account Tokens are automatically mounted even if not necessary

[MEDIUM] Service Account Token Automount Not Disabled: charts/ssi-credential-issuer/templates/cronjob-expiry-app.yaml#L35

Service Account Tokens are automatically mounted even if not necessary

[LOW] CronJob Deadline Not Configured: charts/ssi-credential-issuer/templates/cronjob-expiry-app.yaml#L20

Cronjobs must have a configured deadline, which means the attribute 'startingDeadlineSeconds' must be defined