chore(trivy): add options according to TRG 8.04 (#216) #742
evegufyAnnotations
10 warnings
|
[MEDIUM] Container Running With Low UID:
charts/centralidp/templates/job-seeding.yaml#L259
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Container Running With Low UID:
charts/centralidp/templates/job-seeding.yaml#L229
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Container Running With Low UID:
charts/centralidp/templates/job-seeding.yaml#L32
Check if containers are running with low UID, which might cause conflicts with the host's user table.
|
|
[MEDIUM] Memory Limits Not Defined:
charts/centralidp/templates/job-seeding.yaml#L229
Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than the designated amount of memory
|
|
[MEDIUM] Memory Limits Not Defined:
charts/centralidp/templates/job-seeding.yaml#L229
Memory limits should be defined for each container. This prevents potential resource exhaustion by ensuring that containers consume not more than the designated amount of memory
|
|
[MEDIUM] Memory Requests Not Defined:
charts/centralidp/templates/job-seeding.yaml#L229
Memory requests should be defined for each container. This allows the kubelet to reserve the requested amount of system resources and prevents over-provisioning on individual nodes
|
|
[MEDIUM] Memory Requests Not Defined:
charts/centralidp/templates/job-seeding.yaml#L229
Memory requests should be defined for each container. This allows the kubelet to reserve the requested amount of system resources and prevents over-provisioning on individual nodes
|
|
[MEDIUM] Seccomp Profile Is Not Configured:
charts/centralidp/templates/job-seeding.yaml#L229
Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls
|
|
[MEDIUM] Seccomp Profile Is Not Configured:
charts/centralidp/templates/job-seeding.yaml#L32
Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls
|
|
[MEDIUM] Seccomp Profile Is Not Configured:
charts/centralidp/templates/job-seeding.yaml#L229
Containers should be configured with a secure Seccomp profile to restrict potentially dangerous syscalls
|