fix: kubescape
This commit is contained in:
parent
e447675de4
commit
ff9f2705d7
2 changed files with 23 additions and 1 deletions
22
.github/kubescape-exceptions.json
vendored
Normal file
22
.github/kubescape-exceptions.json
vendored
Normal file
|
@ -0,0 +1,22 @@
|
|||
[
|
||||
{
|
||||
"name": "exclude-default-namespace-control",
|
||||
"policyType": "postureExceptionPolicy",
|
||||
"actions": [
|
||||
"alertOnly"
|
||||
],
|
||||
"resources": [
|
||||
{
|
||||
"designatorType": "Attributes",
|
||||
"attributes": {
|
||||
"kind": ".*"
|
||||
}
|
||||
}
|
||||
],
|
||||
"posturePolicies": [
|
||||
{
|
||||
"controlID": "CIS-5.7.4"
|
||||
}
|
||||
]
|
||||
}
|
||||
]
|
2
.github/workflows/chart.yaml
vendored
2
.github/workflows/chart.yaml
vendored
|
@ -78,7 +78,7 @@ jobs:
|
|||
version: v3.7.1
|
||||
|
||||
- name: Scan helm
|
||||
run: helm template ./charts/well-known --generate-name --dry-run | kubescape scan --controls-config .github/kubescape-controls-inputs.json -v --fail-threshold 5 -
|
||||
run: helm template ./charts/well-known --generate-name --dry-run | kubescape scan --controls-config .github/kubescape-controls-inputs.json --exceptions .github/kubescape-exceptions.json -v --fail-threshold 5 -
|
||||
|
||||
pluto-scan:
|
||||
runs-on: ubuntu-latest
|
||||
|
|
Loading…
Reference in a new issue