Push Charts to helm-charts-registry manually with specified version #1
aimee-889chart-release-manual.yml
on: workflow_dispatch
scan
/
Kics Helm Chart Scan
27s
release
/
release
11s
Annotations
1 error and 11 warnings
|
release / release
Process completed with exit code 1.
|
|
[MEDIUM] Container Running With Low UID:
charts/dbildungscloud-iam-keycloak/templates/deployment.yaml#L20
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Using Unrecommended Namespace:
charts/dbildungscloud-iam-keycloak/templates/configmap.yaml#L4
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used
|
|
[MEDIUM] Using Unrecommended Namespace:
charts/dbildungscloud-iam-keycloak/templates/ingress.yaml#L3
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used
|
|
[MEDIUM] Using Unrecommended Namespace:
charts/dbildungscloud-iam-keycloak/templates/service.yaml#L4
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used
|
|
[MEDIUM] Using Unrecommended Namespace:
charts/dbildungscloud-iam-keycloak/templates/realm-secret.yaml#L4
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used
|
|
[MEDIUM] Using Unrecommended Namespace:
charts/dbildungscloud-iam-keycloak/templates/deployment.yaml#L2
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used
|
|
[MEDIUM] Using Unrecommended Namespace:
charts/dbildungscloud-iam-keycloak/templates/secret.yaml#L4
Namespaces like 'default', 'kube-system' or 'kube-public' should not be used
|
|
[LOW] Image Without Digest:
charts/dbildungscloud-iam-keycloak/templates/deployment.yaml#L20
Images should be specified together with their digests to ensure integrity
|
|
[LOW] Missing AppArmor Profile:
charts/dbildungscloud-iam-keycloak/templates/deployment.yaml#L14
Containers should be configured with an AppArmor profile to enforce fine-grained access control over low-level system resources
|
|
[LOW] Pod or Container Without LimitRange:
charts/dbildungscloud-iam-keycloak/templates/deployment.yaml#L1
Each namespace should have a LimitRange policy associated to ensure that resource allocations of Pods, Containers and PersistentVolumeClaims do not exceed the defined boundaries
|
|
release / release
Node.js 16 actions are deprecated. Please update the following actions to use Node.js 20: azure/setup-helm@5119fcb9089d432beecbf79bb2c7915207344b78. For more information see: https://github.blog/changelog/2023-09-22-github-actions-transitioning-from-node-16-to-node-20/.
|