update: Update k8s image registry in default policy #4661
This run and associated checks have been archived and are scheduled for deletion.
Learn more about checks retention
cicd.yaml
on: push
conditionals
0s
build
/
context
7s
compliance
/
ossf-scorecard
0s
compliance
/
dependency review
0s
compliance
/
check-commit-message
0s
sast
/
codeql
3m 26s
sast
/
black
11s
sast
/
pylint
30s
sast
/
bandit
24s
sast
/
hadolint
17s
sast
/
kubelinter
14s
sast
/
trivy config
42s
sast
/
checkov
30s
sast
/
semgrep
38s
unit-test
/
pytest
45s
docs
/
deploy
19s
sca
/
grype
sca
/
safety
sca
/
...
/
dependency review
sca
/
trivy image
Matrix: integration-test / functional
Waiting for pending jobs
Matrix: integration-test / k8s versions
Waiting for pending jobs
Matrix: integration-test / optional
Waiting for pending jobs
Matrix: integration-test / self-hosted-notary
Waiting for pending jobs
Annotations
11 errors
sast / checkov:
deployment/deployment.yaml#L3
CKV_K8S_21: "The default namespace should not be used"
|
sast / checkov:
deployment/deployment.yaml#L27
CKV_K8S_21: "The default namespace should not be used"
|
sast / checkov:
deployment/deployment.yaml#L44
CKV_K8S_21: "The default namespace should not be used"
|
sast / checkov:
deployment/deployment.yaml#L59
CKV_K8S_21: "The default namespace should not be used"
|
sast / checkov:
deployment/deployment.yaml#L121
CKV_K8S_21: "The default namespace should not be used"
|
sast / checkov:
deployment/deployment.yaml#L143
CKV_K8S_49: "Minimize wildcard use in Roles and ClusterRoles"
|
sast / checkov:
deployment/deployment.yaml#L181
CKV_K8S_21: "The default namespace should not be used"
|
sast / checkov:
deployment/deployment.yaml#L203
CKV_K8S_15: "Image Pull Policy should be Always"
|
sast / checkov:
deployment/deployment.yaml#L203
CKV_K8S_29: "Apply security context to your pods and containers"
|
sast / checkov:
deployment/deployment.yaml#L203
CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
|
build / build
Process completed with exit code 1.
|
Artifacts
Produced during runtime
Name | Size | |
---|---|---|
sbom.cdx
Expired
|
709 KB |
|