-
Notifications
You must be signed in to change notification settings - Fork 2.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): Bump trivy-checks #8310
Conversation
52a8f1a
to
48944f7
Compare
Signed-off-by: nikpivkin <[email protected]>
54fde36
to
e9a5d20
Compare
@@ -21,7 +21,7 @@ | |||
"Class": "config", | |||
"Type": "helm", | |||
"MisconfSummary": { | |||
"Successes": 89, | |||
"Successes": 90, |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
A new check has been added aquasecurity/trivy-checks#327. Same for other similar changes.
"Code": { | ||
"Lines": null | ||
"Lines": [ |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
The returned object containing the location has been fixed for some checks.
{ | ||
"Type": "Helm Security Check", | ||
"ID": "KSV118", | ||
"AVDID": "AVD-KSV-0118", |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This check was not entirely correct because it triggered only when securityContext was explicitly specified and empty. However, if securityContext was missing entirely, the rule did not trigger.. Fixed in aquasecurity/trivy-checks#315
Description
chore(deps): Bump trivy-checks to v1.6.0
Related PRs:
Checklist