← 输入框|github.com|刷新
Skip to content

Scanners use runAsNonRoot: false in their values.yaml securityContext #723

Open

Description

@SebieF

Once PR #714 is applied, all values.yaml files have a securityContext set. During testing this, it was noted that some scanners have to use runAsNonRoot: false and/or readOnlyRootFilesystem: false in order to function. This can be due to the behaviour of the underlying scanner or because the Dockerfile uses a non-numeric user. Fixing this may require our own Scanner Dockerfile where an already build original image is used or pull requests in other repositories in order to have them use non-numeric, kubernetes-friendly users.

See also: #285

Affected scanners:

Activity

  1. Weltraumschaf commented on Jul 27, 2023

    @Weltraumschaf
    Member

    Relates to #1330

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    maintenancescannerImplement or update a security scanner

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions