kube-bench

kube-bench copied to clipboard

Error in run: file node.yaml not found for version cis-1.23

2

**Overview** I have config file in `/etc/kubernetes-kubelet/kubelet_config.yaml` path. I added `/etc/kubernetes-kubelet/kubelet_config.yaml` to config.yaml and mounted them via configmap to pod in the path `/opt/kube-bench/cfg`. While starting kube-bench pod in k8s...

Algoss

Replace custom k3s etcd script checks with vanilla grep checks

3

Background: When https://github.com/aquasecurity/kube-bench/pull/1523 was merged, it pulled the cfg checks directly from https://github.com/rancher/security-scan/tree/master/package/cfg. Problem: - These checks utilizes a custom sonobuoy plugin to deploy kube-bench + [additional helper scripts](https://github.com/rancher/security-scan/tree/master/package/helper_scripts). These...

dereknola

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.19.0 to 0.23.0. Commits c48da13 http2: fix TestServerContinuationFlood flakes 762b58d http2: fix tipos in comment ba87210 http2: close connections when receiving too many headers ebc8168 all: fix...

dependabot[bot]

Bumps golang from 1.22.1 to 1.22.2. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]

Bumps [github.com/aws/aws-sdk-go-v2/service/securityhub](https://github.com/aws/aws-sdk-go-v2) from 1.29.1 to 1.47.2. Commits ce842a7 Release 2023-12-01 d40f923 Regenerated Clients 3a00ef5 Update API model 1f61a06 fix: correct recognition and zeroing of cache-wrapped AnonymousCredentials (#... 623d430 fix: correct...

dependabot[bot]

**Overview** With latest release of kube-bench we have found that the assessment for file permissions for kubelet configuration file is cnsidered as failure. Whereas in earlier version it was getting...

pranavcracker

failed to output to ASFF: finding publish failed: not found, ResolveEndpointV2

6

**Overview** I am trying to integrate AWS security Hub and EKS , and I've come across the following issue. Would you happen to have any suggestions on how to resolve...

eravindar12

Bug: exec /usr/local/bin/kube-bench: exec format error

5

**Overview** I am trying to integrate AWS security Hub, and I've encountered the following issue, do you have any suggestions on how to resolve it, please ? ``` ❯ kubectl...

eravindar12

Missing GLIBC dependency in binary version 0.7.1+

1

**Overview** On RHEL 7.9, running the kube-bench binary with the command gives a GLIBC error. It works fine on version 0.7.0 and 0.6.19 but breaks in version 0.7.1 and 0.7.2....

pelletier2017

Statically link binaries and remove debug information

1

Statically link the generated binaries as to avoid issues when the application is linked to a different GLIBC version than the one available when `kube-bench` is used. This also removes...

pjbgf