kube-bench

kube-bench copied to clipboard

**Overview** KubeBench check fails in OCP having JSON communication method instead of YAML **How did you run kube-bench?** Kubebench ran as kubernetes job, command - 'kube-bench' **What happened?** `for node...

anupamtamrakar

### Discussed in https://github.com/aquasecurity/kube-bench/discussions/1202 Originally posted by **trallnag** June 8, 2022 A new version of the benchmark is available.  Support for this would be great. Currently the latest version...

mozillazg

An example is missed, related to eventRecordQPS

6

in `node.yaml` (e.g. [this](https://github.com/aquasecurity/kube-bench/blob/main/cfg/cis-1.6/node.yaml)), there is a missing example related to **`eventRecordQPS`**, which makes it not consistent with other remediations. ``` remediation: | If using a Kubelet config file, edit...

winkee01

kube-bench node The Kube bench node will fail, but after I modify it according to the prompt and check again, the Kube bench node will still fail. The Kube bench...

QiuToo

feat(schema): add database schema config

5

With this configuration, you can select database schema. This setting could be good when you want to share the same Postgres instance for different clusters validations.

serrovsky

Syntax errors in node targets for OCP

3

Fixing syntax error in checks 4.1.1,4.1.2 for rhel-1.0. SLK-39504

sm171190

Introduce new statuses: SKIP, MANU, ERRO

5

This changeset introduces new statuses as proposed in #916 Probably I missed something, so I would be grateful any feedback and help 🙏

hypnoglow

Add --status flag

15

Fixes #918 This change adds the `--status` flag as described on the referenced issue, so that `kube-bench` will only log tests results with a `check.State` contained in the `--status` flag....

mtpereira

Docker image build with a non-root user account

4

**Overview** Our container scanning tool trigger HIGH severity compliance alert after security scan with of the image `aquasec/kube-bench:latest`. **How did you run kube-bench?** N/A **What happened?** Description of the alert:...

sosadtsia

Add new statuses

1

Currently Kube-bench output only four statuses * [PASS] - Test passed * [FAIL] - Test scored and got unwanted output * [WARN] - Test is not scored and failed, or...

yoavrotems