file extensions #226
clauyanscan-helm-on-push.yml
on: push
scan_helm
/
Kics Helm Chart Scan
27s
Annotations
11 warnings
|
scan_helm / Kics Helm Chart Scan
ubuntu-latest pipelines will use ubuntu-24.04 soon. For more details, see https://github.com/actions/runner-images/issues/10636
|
|
[MEDIUM] CPU Limits Not Set:
charts/schulportal-load-tests/templates/cronjob.yaml#L58
CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests
|
|
[MEDIUM] CPU Limits Not Set:
charts/schulportal-load-tests/templates/cronjob.yaml#L58
CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests
|
|
[MEDIUM] CPU Limits Not Set:
charts/schulportal-load-tests/templates/cronjob.yaml#L58
CPU limits should be set because if the system has CPU time free, a container is guaranteed to be allocated as much CPU as it requests
|
|
[MEDIUM] CPU Requests Not Set:
charts/schulportal-load-tests/templates/cronjob.yaml#L58
CPU requests should be set to ensure the sum of the resource requests of the scheduled Containers is less than the capacity of the node
|
|
[MEDIUM] CPU Requests Not Set:
charts/schulportal-load-tests/templates/cronjob.yaml#L58
CPU requests should be set to ensure the sum of the resource requests of the scheduled Containers is less than the capacity of the node
|
|
[MEDIUM] CPU Requests Not Set:
charts/schulportal-load-tests/templates/cronjob.yaml#L58
CPU requests should be set to ensure the sum of the resource requests of the scheduled Containers is less than the capacity of the node
|
|
[MEDIUM] Container Running As Root:
charts/schulportal-load-tests/templates/cronjob.yaml#L58
Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise
|
|
[MEDIUM] Container Running As Root:
charts/schulportal-load-tests/templates/cronjob.yaml#L58
Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise
|
|
[MEDIUM] Container Running As Root:
charts/schulportal-load-tests/templates/cronjob.yaml#L58
Containers should only run as non-root user. This limits the exploitability of security misconfigurations and restricts an attacker's possibilities in case of compromise
|
|
[MEDIUM] Container Running With Low UID:
charts/schulportal-load-tests/templates/cronjob.yaml#L58
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|