You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
{{ message }}
Repository navigation
Add securityContext for PodSecurity Configuration to all scanTypes #1330
In the scanType HelmCharts it is currently not possible to configure PodSecurityContext like fsGroup but only container specific securityContext.
All scanType Chart must be extended for that. Example:
scanner:
# scanner.podSecurityContext -- Optional securityContext set on scanner pod (see:
https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)
podSecurityContext:
fsGroup: 2000
# scanner.securityContext -- Optional securityContext set on scanner container (see:
https://kubernetes.io/docs/tasks/configure-pod-container/security-context/)
securityContext:
# scanner.securityContext.runAsNonRoot -- Enforces that the scanner image is run as a non root user
runAsNonRoot: false
# scanner.securityContext.readOnlyRootFilesystem -- Prevents write access to the containers file system
readOnlyRootFilesystem: false
# scanner.securityContext.allowPrivilegeEscalation -- Ensure that users privileges cannot be escalated
allowPrivilegeEscalation: false
# scanner.securityContext.privileged -- Ensures that the scanner container is not run in privileged mode
privileged: false
capabilities:
drop:
# scanner.securityContext.capabilities.drop[0] -- This drops all linux privileges from the container.
- all
Activity
Added podSecurityContext to all scanTypes
Merge pull request #1339 from secureCodeBox/feature/add-podsecurityco…
#1330 Added missing podSecurityContext