[Bug]: Fix Terraform Lint Errors surfaced in superlinter v6

Open holtskinner opened this issue 1 year ago • 0 comments
2024-04-25T11:44:10.9563422Z 2024-04-25 11:44:10 [ERROR]   Errors found in CHECKOV
2024-04-25T11:44:10.9885531Z 2024-04-25 11:44:10 [ERROR]   Command output for CHECKOV:
2024-04-25T11:44:10.9886493Z ------
2024-04-25T11:44:10.9887001Z terraform scan results:
2024-04-25T11:44:10.9887494Z 
2024-04-25T11:44:10.9887857Z Passed checks: 99, Failed checks: 10, Skipped checks: 0
2024-04-25T11:44:10.9888475Z 
2024-04-25T11:44:10.9889293Z Check: CKV_GCP_81: "Ensure Big Query Datasets are encrypted with Customer Supplied Encryption Keys (CSEK)"
2024-04-25T11:44:10.9890632Z 	FAILED for resource: google_bigquery_dataset.demo_dataset
2024-04-25T11:44:10.9892432Z 	File: /gemini/use-cases/applying-llms-to-data/using-gemini-with-bigquery-remote-functions/bigquery.tf:18-23
2024-04-25T11:44:10.9896039Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/google-cloud-policies/google-cloud-general-policies/ensure-gcp-big-query-tables-are-encrypted-with-customer-supplied-encryption-keys-csek-1
2024-04-25T11:44:10.9898087Z 
2024-04-25T11:44:10.9898508Z 		18 | resource "google_bigquery_dataset" "demo_dataset" {
2024-04-25T11:44:10.9899709Z 		19 |   project    = module.project-services.project_id
2024-04-25T11:44:10.9900948Z 		20 |   dataset_id = "gemini_demo"
2024-04-25T11:44:10.9901664Z 		21 |   location   = var.region
2024-04-25T11:44:10.9902496Z 		22 |   depends_on = [time_sleep.wait_after_apis]
2024-04-25T11:44:10.9903243Z 		23 | }
2024-04-25T11:44:10.9903493Z 
2024-04-25T11:44:10.9904264Z Check: CKV_GCP_80: "Ensure Big Query Tables are encrypted with Customer Supplied Encryption Keys (CSEK)"
2024-04-25T11:44:10.9905635Z 	FAILED for resource: google_bigquery_table.object_table
2024-04-25T11:44:10.9907241Z 	File: /gemini/use-cases/applying-llms-to-data/using-gemini-with-bigquery-remote-functions/bigquery.tf:56-70
2024-04-25T11:44:10.9910465Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/google-cloud-policies/google-cloud-general-policies/ensure-gcp-big-query-tables-are-encrypted-with-customer-supplied-encryption-keys-csek
2024-04-25T11:44:10.9912636Z 
2024-04-25T11:44:10.9913023Z 		56 | resource "google_bigquery_table" "object_table" {
2024-04-25T11:44:10.9914062Z 		57 |   project             = module.project-services.project_id
2024-04-25T11:44:10.9915173Z 		58 |   dataset_id          = google_bigquery_dataset.demo_dataset.dataset_id
2024-04-25T11:44:10.9916287Z 		59 |   table_id            = "image_object_table"
2024-04-25T11:44:10.9917095Z 		60 |   deletion_protection = var.deletion_protection
2024-04-25T11:44:10.9917870Z 		61 | 
2024-04-25T11:44:10.9918487Z 		62 |   external_data_configuration {
2024-04-25T11:44:10.9919428Z 		63 |     autodetect      = false
2024-04-25T11:44:10.9920340Z 		64 |     connection_id   = google_bigquery_connection.function_connection.id
2024-04-25T11:44:10.9921588Z 		65 |     source_uris     = ["${google_storage_bucket.demo_images.url}/*"]
2024-04-25T11:44:10.9922465Z 		66 |     object_metadata = "Simple"
2024-04-25T11:44:10.9923120Z 		67 |   }
2024-04-25T11:44:10.9923695Z 		68 | 
2024-04-25T11:44:10.9924618Z 		69 |   depends_on = [google_project_iam_member.functions_invoke_roles, google_storage_bucket.demo_images]
2024-04-25T11:44:10.9925741Z 		70 | }
2024-04-25T11:44:10.9926102Z 
2024-04-25T11:44:10.9926657Z Check: CKV_GCP_121: "Ensure BigQuery tables have deletion protection enabled"
2024-04-25T11:44:10.9927800Z 	FAILED for resource: google_bigquery_table.object_table
2024-04-25T11:44:10.9929349Z 	File: /gemini/use-cases/applying-llms-to-data/using-gemini-with-bigquery-remote-functions/bigquery.tf:56-70
2024-04-25T11:44:10.9931900Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/google-cloud-policies/google-cloud-general-policies/bc-google-cloud-121
2024-04-25T11:44:10.9933269Z 
2024-04-25T11:44:10.9933660Z 		56 | resource "google_bigquery_table" "object_table" {
2024-04-25T11:44:10.9934732Z 		57 |   project             = module.project-services.project_id
2024-04-25T11:44:10.9937127Z 		58 |   dataset_id          = google_bigquery_dataset.demo_dataset.dataset_id
2024-04-25T11:44:10.9938183Z 		59 |   table_id            = "image_object_table"
2024-04-25T11:44:10.9939015Z 		60 |   deletion_protection = var.deletion_protection
2024-04-25T11:44:10.9940003Z 		61 | 
2024-04-25T11:44:10.9940548Z 		62 |   external_data_configuration {
2024-04-25T11:44:10.9941207Z 		63 |     autodetect      = false
2024-04-25T11:44:10.9942292Z 		64 |     connection_id   = google_bigquery_connection.function_connection.id
2024-04-25T11:44:10.9943437Z 		65 |     source_uris     = ["${google_storage_bucket.demo_images.url}/*"]
2024-04-25T11:44:10.9944475Z 		66 |     object_metadata = "Simple"
2024-04-25T11:44:10.9945115Z 		67 |   }
2024-04-25T11:44:10.9945589Z 		68 | 
2024-04-25T11:44:10.9946683Z 		69 |   depends_on = [google_project_iam_member.functions_invoke_roles, google_storage_bucket.demo_images]
2024-04-25T11:44:10.9947774Z 		70 | }
2024-04-25T11:44:10.9948080Z 
2024-04-25T11:44:10.9948517Z Check: CKV_TF_1: "Ensure Terraform module sources use a commit hash"
2024-04-25T11:44:10.9949721Z 	FAILED for resource: project-services
2024-04-25T11:44:10.9951135Z 	File: /gemini/use-cases/applying-llms-to-data/using-gemini-with-bigquery-remote-functions/main.tf:17-60
2024-04-25T11:44:10.9954214Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/supply-chain-policies/terraform-policies/ensure-terraform-module-sources-use-git-url-with-commit-hash-revision
2024-04-25T11:44:10.9955976Z 
2024-04-25T11:44:10.9956457Z 		17 | module "project-services" {
2024-04-25T11:44:10.9957690Z 		18 |   source                      = "terraform-google-modules/project-factory/google//modules/project_services"
2024-04-25T11:44:10.9958881Z 		19 |   version                     = "14.4"
2024-04-25T11:44:10.9959749Z 		20 |   disable_services_on_destroy = false
2024-04-25T11:44:10.9960469Z 		21 | 
2024-04-25T11:44:10.9960968Z 		22 |   project_id  = var.project_id
2024-04-25T11:44:10.9961818Z 		23 |   enable_apis = var.enable_apis
2024-04-25T11:44:10.9962495Z 		24 | 
2024-04-25T11:44:10.9962966Z 		25 |   activate_apis = [
2024-04-25T11:44:10.9963702Z 		26 |     "aiplatform.googleapis.com",
2024-04-25T11:44:10.9964471Z 		27 |     "bigquery.googleapis.com",
2024-04-25T11:44:10.9965202Z 		28 |     "bigqueryconnection.googleapis.com",
2024-04-25T11:44:10.9966138Z 		29 |     "bigquerystorage.googleapis.com",
2024-04-25T11:44:10.9966946Z 		30 |     "cloudapis.googleapis.com",
2024-04-25T11:44:10.9967656Z 		31 |     "cloudfunctions.googleapis.com",
2024-04-25T11:44:10.9968514Z 		32 |     "config.googleapis.com",
2024-04-25T11:44:10.9969247Z 		33 |     "dataflow.googleapis.com",
2024-04-25T11:44:10.9970124Z 		34 |     "dataform.googleapis.com",
2024-04-25T11:44:10.9970948Z 		35 |     "logging.googleapis.com",
2024-04-25T11:44:10.9971700Z 		36 |     "notebooks.googleapis.com",
2024-04-25T11:44:10.9972363Z 		37 |     "run.googleapis.com",
2024-04-25T11:44:10.9973183Z 		38 |     "serviceusage.googleapis.com",
2024-04-25T11:44:10.9973931Z 		39 |     "storage.googleapis.com",
2024-04-25T11:44:10.9974702Z 		40 |     "storage-api.googleapis.com",
2024-04-25T11:44:10.9975575Z 		41 |     "workflows.googleapis.com",
2024-04-25T11:44:10.9976478Z 		42 |   ]
2024-04-25T11:44:10.9976905Z 		43 | 
2024-04-25T11:44:10.9977576Z 		44 |   activate_api_identities = [
2024-04-25T11:44:10.9978294Z 		45 |     {
2024-04-25T11:44:10.9978826Z 		46 |       api = "workflows.googleapis.com"
2024-04-25T11:44:10.9979672Z 		47 |       roles = [
2024-04-25T11:44:10.9980270Z 		48 |         "roles/workflows.viewer"
2024-04-25T11:44:10.9980890Z 		49 |       ]
2024-04-25T11:44:10.9981625Z 		50 |       api = "cloudfunctions.googleapis.com"
2024-04-25T11:44:10.9982390Z 		51 |       roles = [
2024-04-25T11:44:10.9982963Z 		52 |         "roles/cloudfunctions.invoker"
2024-04-25T11:44:10.9983794Z 		53 |       ]
2024-04-25T11:44:10.9984357Z 		54 |       api = "run.googleapis.com"
2024-04-25T11:44:10.9985010Z 		55 |       roles = [
2024-04-25T11:44:10.9985686Z 		56 |         "roles/run.invoker"
2024-04-25T11:44:10.9986195Z 		57 |       ]
2024-04-25T11:44:10.9986491Z 		58 |     }
2024-04-25T11:44:10.9986875Z 		59 |   ]
2024-04-25T11:44:10.9987132Z 		60 | }
2024-04-25T11:44:10.9987338Z 
2024-04-25T11:44:10.9987513Z Check: CKV_GCP_62: "Bucket should log access"
2024-04-25T11:44:10.9988136Z 	FAILED for resource: google_storage_bucket.function_source
2024-04-25T11:44:10.9989104Z 	File: /gemini/use-cases/applying-llms-to-data/using-gemini-with-bigquery-remote-functions/storage.tf:19-26
2024-04-25T11:44:10.9990469Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/google-cloud-policies/google-cloud-storage-gcs-policies/bc-gcp-logging-2
2024-04-25T11:44:10.9991314Z 
2024-04-25T11:44:10.9991606Z 		19 | resource "google_storage_bucket" "function_source" {
2024-04-25T11:44:10.9992302Z 		20 |   name                        = "gemini-bq-demo-${random_id.id.hex}"
2024-04-25T11:44:10.9992958Z 		21 |   project                     = module.project-services.project_id
2024-04-25T11:44:10.9993597Z 		22 |   location                    = var.region
2024-04-25T11:44:10.9994102Z 		23 |   uniform_bucket_level_access = true
2024-04-25T11:44:10.9994571Z 		24 |   force_destroy               = var.force_destroy
2024-04-25T11:44:10.9995370Z 		25 |   depends_on                  = [time_sleep.wait_after_apis]
2024-04-25T11:44:10.9995908Z 		26 | }
2024-04-25T11:44:10.9996065Z 
2024-04-25T11:44:10.9996466Z Check: CKV_GCP_114: "Ensure public access prevention is enforced on Cloud Storage bucket"
2024-04-25T11:44:10.9997250Z 	FAILED for resource: google_storage_bucket.function_source
2024-04-25T11:44:10.9998231Z 	File: /gemini/use-cases/applying-llms-to-data/using-gemini-with-bigquery-remote-functions/storage.tf:19-26
2024-04-25T11:44:10.9999656Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/google-cloud-policies/google-cloud-general-policies/bc-google-cloud-114
2024-04-25T11:44:11.0000457Z 
2024-04-25T11:44:11.0000760Z 		19 | resource "google_storage_bucket" "function_source" {
2024-04-25T11:44:11.0001422Z 		20 |   name                        = "gemini-bq-demo-${random_id.id.hex}"
2024-04-25T11:44:11.0002106Z 		21 |   project                     = module.project-services.project_id
2024-04-25T11:44:11.0002771Z 		22 |   location                    = var.region
2024-04-25T11:44:11.0003219Z 		23 |   uniform_bucket_level_access = true
2024-04-25T11:44:11.0003719Z 		24 |   force_destroy               = var.force_destroy
2024-04-25T11:44:11.0004371Z 		25 |   depends_on                  = [time_sleep.wait_after_apis]
2024-04-25T11:44:11.0004834Z 		26 | }
2024-04-25T11:44:11.0005028Z 
2024-04-25T11:44:11.0005274Z Check: CKV_GCP_78: "Ensure Cloud storage has versioning enabled"
2024-04-25T11:44:11.0006157Z 	FAILED for resource: google_storage_bucket.function_source
2024-04-25T11:44:11.0007075Z 	File: /gemini/use-cases/applying-llms-to-data/using-gemini-with-bigquery-remote-functions/storage.tf:19-26
2024-04-25T11:44:11.0008676Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/google-cloud-policies/google-cloud-general-policies/ensure-gcp-cloud-storage-has-versioning-enabled
2024-04-25T11:44:11.0009857Z 
2024-04-25T11:44:11.0010079Z 		19 | resource "google_storage_bucket" "function_source" {
2024-04-25T11:44:11.0010736Z 		20 |   name                        = "gemini-bq-demo-${random_id.id.hex}"
2024-04-25T11:44:11.0011457Z 		21 |   project                     = module.project-services.project_id
2024-04-25T11:44:11.0012099Z 		22 |   location                    = var.region
2024-04-25T11:44:11.0012608Z 		23 |   uniform_bucket_level_access = true
2024-04-25T11:44:11.0013125Z 		24 |   force_destroy               = var.force_destroy
2024-04-25T11:44:11.0013762Z 		25 |   depends_on                  = [time_sleep.wait_after_apis]
2024-04-25T11:44:11.0014422Z 		26 | }
2024-04-25T11:44:11.0014617Z 
2024-04-25T11:44:11.0014790Z Check: CKV_GCP_62: "Bucket should log access"
2024-04-25T11:44:11.0015420Z 	FAILED for resource: google_storage_bucket.demo_images
2024-04-25T11:44:11.0016899Z 	File: /gemini/use-cases/applying-llms-to-data/using-gemini-with-bigquery-remote-functions/storage.tf:44-51
2024-04-25T11:44:11.0018483Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/google-cloud-policies/google-cloud-storage-gcs-policies/bc-gcp-logging-2
2024-04-25T11:44:11.0019439Z 
2024-04-25T11:44:11.0019785Z 		44 | resource "google_storage_bucket" "demo_images" {
2024-04-25T11:44:11.0020466Z 		45 |   name                        = "gemini-bq-demo-images-${random_id.id.hex}"
2024-04-25T11:44:11.0021194Z 		46 |   project                     = module.project-services.project_id
2024-04-25T11:44:11.0021874Z 		47 |   location                    = var.region
2024-04-25T11:44:11.0022376Z 		48 |   uniform_bucket_level_access = true
2024-04-25T11:44:11.0022862Z 		49 |   force_destroy               = var.force_destroy
2024-04-25T11:44:11.0023527Z 		50 |   depends_on                  = [time_sleep.wait_after_apis]
2024-04-25T11:44:11.0024039Z 		51 | }
2024-04-25T11:44:11.0024195Z 
2024-04-25T11:44:11.0024559Z Check: CKV_GCP_114: "Ensure public access prevention is enforced on Cloud Storage bucket"
2024-04-25T11:44:11.0025397Z 	FAILED for resource: google_storage_bucket.demo_images
2024-04-25T11:44:11.0026615Z 	File: /gemini/use-cases/applying-llms-to-data/using-gemini-with-bigquery-remote-functions/storage.tf:44-51
2024-04-25T11:44:11.0028080Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/google-cloud-policies/google-cloud-general-policies/bc-google-cloud-114
2024-04-25T11:44:11.0029044Z 
2024-04-25T11:44:11.0029246Z 		44 | resource "google_storage_bucket" "demo_images" {
2024-04-25T11:44:11.0029925Z 		45 |   name                        = "gemini-bq-demo-images-${random_id.id.hex}"
2024-04-25T11:44:11.0030739Z 		46 |   project                     = module.project-services.project_id
2024-04-25T11:44:11.0031322Z 		47 |   location                    = var.region
2024-04-25T11:44:11.0031830Z 		48 |   uniform_bucket_level_access = true
2024-04-25T11:44:11.0032449Z 		49 |   force_destroy               = var.force_destroy
2024-04-25T11:44:11.0033023Z 		50 |   depends_on                  = [time_sleep.wait_after_apis]
2024-04-25T11:44:11.0033554Z 		51 | }
2024-04-25T11:44:11.0033734Z 
2024-04-25T11:44:11.0034107Z Check: CKV_GCP_78: "Ensure Cloud storage has versioning enabled"
2024-04-25T11:44:11.0034736Z 	FAILED for resource: google_storage_bucket.demo_images
2024-04-25T11:44:11.0035749Z 	File: /gemini/use-cases/applying-llms-to-data/using-gemini-with-bigquery-remote-functions/storage.tf:44-51
2024-04-25T11:44:11.0037593Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/google-cloud-policies/google-cloud-general-policies/ensure-gcp-cloud-storage-has-versioning-enabled
2024-04-25T11:44:11.0038846Z 
2024-04-25T11:44:11.0039096Z 		44 | resource "google_storage_bucket" "demo_images" {
2024-04-25T11:44:11.0039789Z 		45 |   name                        = "gemini-bq-demo-images-${random_id.id.hex}"
2024-04-25T11:44:11.0040615Z 		46 |   project                     = module.project-services.project_id
2024-04-25T11:44:11.0041223Z 		47 |   location                    = var.region
2024-04-25T11:44:11.0041719Z 		48 |   uniform_bucket_level_access = true
2024-04-25T11:44:11.0042326Z 		49 |   force_destroy               = var.force_destroy
2024-04-25T11:44:11.0042955Z 		50 |   depends_on                  = [time_sleep.wait_after_apis]
2024-04-25T11:44:11.0043450Z 		51 | }
2024-04-25T11:44:11.0043650Z 
2024-04-25T11:44:11.0043854Z kubernetes scan results:
2024-04-25T11:44:11.0044080Z 
2024-04-25T11:44:11.0044362Z Passed checks: 289, Failed checks: 65, Skipped checks: 0
2024-04-25T11:44:11.0044734Z 
2024-04-25T11:44:11.0044991Z Check: CKV_K8S_21: "The default namespace should not be used"
2024-04-25T11:44:11.0045782Z 	FAILED for resource: Service.default.fixmycar-backend
2024-04-25T11:44:11.0046642Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-service.yaml:1-12
2024-04-25T11:44:11.0047935Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-20
2024-04-25T11:44:11.0048716Z 
2024-04-25T11:44:11.0048917Z 		1  | apiVersion: v1
2024-04-25T11:44:11.0049316Z 		2  | kind: Service
2024-04-25T11:44:11.0049678Z 		3  | metadata:
2024-04-25T11:44:11.0050118Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0050546Z 		5  | spec:
2024-04-25T11:44:11.0050874Z 		6  |   selector:
2024-04-25T11:44:11.0051307Z 		7  |     app: fixmycar-backend
2024-04-25T11:44:11.0051739Z 		8  |   ports:
2024-04-25T11:44:11.0052114Z 		9  |     - name: http
2024-04-25T11:44:11.0052536Z 		10 |       port: 8080
2024-04-25T11:44:11.0052918Z 		11 |       targetPort: 8080
2024-04-25T11:44:11.0053332Z 		12 |   type: ClusterIP
2024-04-25T11:44:11.0053560Z 
2024-04-25T11:44:11.0054017Z Check: CKV_K8S_22: "Use read-only filesystem for containers where possible"
2024-04-25T11:44:11.0054810Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0055684Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0057345Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-21
2024-04-25T11:44:11.0058188Z 
2024-04-25T11:44:11.0058765Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0059661Z Check: CKV_K8S_21: "The default namespace should not be used"
2024-04-25T11:44:11.0060480Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0061336Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0062655Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-20
2024-04-25T11:44:11.0063460Z 
2024-04-25T11:44:11.0063986Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0064900Z Check: CKV_K8S_37: "Minimize the admission of containers with capabilities assigned"
2024-04-25T11:44:11.0065761Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0066709Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0068041Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-34
2024-04-25T11:44:11.0068828Z 
2024-04-25T11:44:11.0069240Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0070231Z Check: CKV_K8S_40: "Containers should run as a high UID to avoid host conflict"
2024-04-25T11:44:11.0071217Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0072061Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0073441Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-37
2024-04-25T11:44:11.0074276Z 
2024-04-25T11:44:11.0074683Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0075568Z Check: CKV_K8S_29: "Apply security context to your pods and containers"
2024-04-25T11:44:11.0076377Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0077268Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0078936Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-securitycontext-is-applied-to-pods-and-containers
2024-04-25T11:44:11.0080083Z 
2024-04-25T11:44:11.0080513Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0081356Z Check: CKV_K8S_30: "Apply security context to your containers"
2024-04-25T11:44:11.0082061Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0082969Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0084153Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-28
2024-04-25T11:44:11.0084925Z 
2024-04-25T11:44:11.0085311Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0086118Z Check: CKV_K8S_43: "Image should use digest"
2024-04-25T11:44:11.0086698Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0087528Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0088837Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-39
2024-04-25T11:44:11.0089575Z 
2024-04-25T11:44:11.0090004Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0090930Z Check: CKV_K8S_31: "Ensure that the seccomp profile is set to docker/default or runtime/default"
2024-04-25T11:44:11.0091846Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0092799Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0094016Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-29
2024-04-25T11:44:11.0094856Z 
2024-04-25T11:44:11.0095244Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0096641Z Check: CKV_K8S_28: "Minimize the admission of containers with the NET_RAW capability"
2024-04-25T11:44:11.0097576Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0098390Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0099637Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-27
2024-04-25T11:44:11.0100363Z 
2024-04-25T11:44:11.0100869Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0101718Z Check: CKV_K8S_14: "Image Tag should be fixed - not latest or blank"
2024-04-25T11:44:11.0102456Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0103345Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0104565Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-13
2024-04-25T11:44:11.0105492Z 
2024-04-25T11:44:11.0105915Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0106757Z Check: CKV_K8S_8: "Liveness Probe Should be Configured"
2024-04-25T11:44:11.0107456Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0108245Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0109522Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-7
2024-04-25T11:44:11.0110319Z 
2024-04-25T11:44:11.0110711Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0111585Z Check: CKV_K8S_20: "Containers should not run with allowPrivilegeEscalation"
2024-04-25T11:44:11.0112382Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0113239Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0114474Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-19
2024-04-25T11:44:11.0115284Z 
2024-04-25T11:44:11.0115748Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0116578Z Check: CKV_K8S_23: "Minimize the admission of root containers"
2024-04-25T11:44:11.0117274Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0118206Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0119415Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-22
2024-04-25T11:44:11.0120178Z 
2024-04-25T11:44:11.0120561Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0121561Z Check: CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
2024-04-25T11:44:11.0122341Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0123176Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0124492Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-35
2024-04-25T11:44:11.0125228Z 
2024-04-25T11:44:11.0125655Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0126695Z Check: CKV_K8S_35: "Prefer using secrets as files over secrets as environment variables"
2024-04-25T11:44:11.0127600Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0128433Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0129640Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-33
2024-04-25T11:44:11.0130486Z 
2024-04-25T11:44:11.0130876Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0131647Z Check: CKV_K8S_9: "Readiness Probe Should be Configured"
2024-04-25T11:44:11.0132326Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0133180Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.0134415Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-8
2024-04-25T11:44:11.0135139Z 
2024-04-25T11:44:11.0135561Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.0136633Z Check: CKV_K8S_21: "The default namespace should not be used"
2024-04-25T11:44:11.0137351Z 	FAILED for resource: Service.default.fixmycar-frontend
2024-04-25T11:44:11.0138163Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-service.yaml:1-13
2024-04-25T11:44:11.0139655Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-20
2024-04-25T11:44:11.0140394Z 
2024-04-25T11:44:11.0140526Z 		1  | apiVersion: v1
2024-04-25T11:44:11.0140885Z 		2  | kind: Service
2024-04-25T11:44:11.0141313Z 		3  | metadata:
2024-04-25T11:44:11.0141666Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0142067Z 		5  | spec:
2024-04-25T11:44:11.0142476Z 		6  |   type: ClusterIP
2024-04-25T11:44:11.0142801Z 		7  |   selector:
2024-04-25T11:44:11.0143198Z 		8  |     app: fixmycar-frontend
2024-04-25T11:44:11.0143685Z 		9  |   ports:
2024-04-25T11:44:11.0144060Z 		10 |     - name: fixmycar-frontend-port
2024-04-25T11:44:11.0144515Z 		11 |       protocol: TCP
2024-04-25T11:44:11.0144968Z 		12 |       port: 80
2024-04-25T11:44:11.0145291Z 		13 |       targetPort: 8501
2024-04-25T11:44:11.0145556Z 
2024-04-25T11:44:11.0145921Z Check: CKV_K8S_22: "Use read-only filesystem for containers where possible"
2024-04-25T11:44:11.0146768Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0147584Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0148834Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-21
2024-04-25T11:44:11.0149636Z 
2024-04-25T11:44:11.0149812Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0150154Z 		2  | kind: Deployment
2024-04-25T11:44:11.0150530Z 		3  | metadata:
2024-04-25T11:44:11.0150981Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0151345Z 		5  |   labels:
2024-04-25T11:44:11.0151747Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0152223Z 		7  | spec:
2024-04-25T11:44:11.0152508Z 		8  |   replicas: 1
2024-04-25T11:44:11.0152875Z 		9  |   selector:
2024-04-25T11:44:11.0153278Z 		10 |     matchLabels:
2024-04-25T11:44:11.0153657Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0154094Z 		12 |   template:
2024-04-25T11:44:11.0154496Z 		13 |     metadata:
2024-04-25T11:44:11.0154801Z 		14 |       labels:
2024-04-25T11:44:11.0155217Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0155705Z 		16 |     spec:
2024-04-25T11:44:11.0156019Z 		17 |       containers:
2024-04-25T11:44:11.0156448Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0157291Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.0157967Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0158396Z 		21 |           env:
2024-04-25T11:44:11.0159032Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0159730Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0160351Z 		24 |           ports:
2024-04-25T11:44:11.0160865Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0161270Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0161675Z 		27 |             httpGet:
2024-04-25T11:44:11.0162168Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0162572Z 		29 |               port: 8501
2024-04-25T11:44:11.0162965Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0163458Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0163852Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0164255Z 		33 |             httpGet:
2024-04-25T11:44:11.0164734Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0165137Z 		35 |               port: 8501
2024-04-25T11:44:11.0165538Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0166034Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0166415Z 		38 |           resources:
2024-04-25T11:44:11.0166800Z 		39 |             limits:
2024-04-25T11:44:11.0167244Z 		40 |               cpu: 1
2024-04-25T11:44:11.0167589Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0167999Z 		42 |             requests:
2024-04-25T11:44:11.0168440Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0168930Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0169239Z 
2024-04-25T11:44:11.0169478Z Check: CKV_K8S_21: "The default namespace should not be used"
2024-04-25T11:44:11.0170270Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0171136Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0172350Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-20
2024-04-25T11:44:11.0173190Z 
2024-04-25T11:44:11.0173324Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0173723Z 		2  | kind: Deployment
2024-04-25T11:44:11.0174043Z 		3  | metadata:
2024-04-25T11:44:11.0174495Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0174902Z 		5  |   labels:
2024-04-25T11:44:11.0175243Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0175713Z 		7  | spec:
2024-04-25T11:44:11.0176796Z 		8  |   replicas: 1
2024-04-25T11:44:11.0177121Z 		9  |   selector:
2024-04-25T11:44:11.0177549Z 		10 |     matchLabels:
2024-04-25T11:44:11.0178044Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0178426Z 		12 |   template:
2024-04-25T11:44:11.0178841Z 		13 |     metadata:
2024-04-25T11:44:11.0179179Z 		14 |       labels:
2024-04-25T11:44:11.0179544Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0180035Z 		16 |     spec:
2024-04-25T11:44:11.0180369Z 		17 |       containers:
2024-04-25T11:44:11.0180760Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0181612Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.0182307Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0182699Z 		21 |           env:
2024-04-25T11:44:11.0183184Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0183866Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0184430Z 		24 |           ports:
2024-04-25T11:44:11.0184935Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0185401Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0185757Z 		27 |             httpGet:
2024-04-25T11:44:11.0186237Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0186678Z 		29 |               port: 8501
2024-04-25T11:44:11.0187057Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0187529Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0187955Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0188333Z 		33 |             httpGet:
2024-04-25T11:44:11.0188793Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0189419Z 		35 |               port: 8501
2024-04-25T11:44:11.0189793Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0190278Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0190712Z 		38 |           resources:
2024-04-25T11:44:11.0191048Z 		39 |             limits:
2024-04-25T11:44:11.0191476Z 		40 |               cpu: 1
2024-04-25T11:44:11.0191868Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0192229Z 		42 |             requests:
2024-04-25T11:44:11.0192683Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0193094Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0193342Z 
2024-04-25T11:44:11.0193683Z Check: CKV_K8S_37: "Minimize the admission of containers with capabilities assigned"
2024-04-25T11:44:11.0194657Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0195506Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0196761Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-34
2024-04-25T11:44:11.0197541Z 
2024-04-25T11:44:11.0197693Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0198073Z 		2  | kind: Deployment
2024-04-25T11:44:11.0198494Z 		3  | metadata:
2024-04-25T11:44:11.0198866Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0199259Z 		5  |   labels:
2024-04-25T11:44:11.0199707Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0200259Z 		7  | spec:
2024-04-25T11:44:11.0200583Z 		8  |   replicas: 1
2024-04-25T11:44:11.0200981Z 		9  |   selector:
2024-04-25T11:44:11.0201324Z 		10 |     matchLabels:
2024-04-25T11:44:11.0201752Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0202205Z 		12 |   template:
2024-04-25T11:44:11.0202547Z 		13 |     metadata:
2024-04-25T11:44:11.0202884Z 		14 |       labels:
2024-04-25T11:44:11.0203322Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0203738Z 		16 |     spec:
2024-04-25T11:44:11.0204069Z 		17 |       containers:
2024-04-25T11:44:11.0204541Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0205303Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.0206014Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0206469Z 		21 |           env:
2024-04-25T11:44:11.0206876Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0207565Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0208198Z 		24 |           ports:
2024-04-25T11:44:11.0208623Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0209077Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0209503Z 		27 |             httpGet:
2024-04-25T11:44:11.0209907Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0210364Z 		29 |               port: 8501
2024-04-25T11:44:11.0210787Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0211202Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0211657Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0212123Z 		33 |             httpGet:
2024-04-25T11:44:11.0212536Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0212977Z 		35 |               port: 8501
2024-04-25T11:44:11.0213395Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0213829Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0214243Z 		38 |           resources:
2024-04-25T11:44:11.0214659Z 		39 |             limits:
2024-04-25T11:44:11.0215048Z 		40 |               cpu: 1
2024-04-25T11:44:11.0215422Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0216112Z 		42 |             requests:
2024-04-25T11:44:11.0216546Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0216939Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0217188Z 
2024-04-25T11:44:11.0217634Z Check: CKV_K8S_40: "Containers should run as a high UID to avoid host conflict"
2024-04-25T11:44:11.0218405Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0219411Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0220773Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-37
2024-04-25T11:44:11.0221526Z 
2024-04-25T11:44:11.0221669Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0222053Z 		2  | kind: Deployment
2024-04-25T11:44:11.0222496Z 		3  | metadata:
2024-04-25T11:44:11.0222854Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0223249Z 		5  |   labels:
2024-04-25T11:44:11.0223720Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0224088Z 		7  | spec:
2024-04-25T11:44:11.0224429Z 		8  |   replicas: 1
2024-04-25T11:44:11.0224837Z 		9  |   selector:
2024-04-25T11:44:11.0225140Z 		10 |     matchLabels:
2024-04-25T11:44:11.0225573Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0226055Z 		12 |   template:
2024-04-25T11:44:11.0226354Z 		13 |     metadata:
2024-04-25T11:44:11.0226710Z 		14 |       labels:
2024-04-25T11:44:11.0227182Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0227568Z 		16 |     spec:
2024-04-25T11:44:11.0227919Z 		17 |       containers:
2024-04-25T11:44:11.0228413Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0229139Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.0229851Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0230512Z 		21 |           env:
2024-04-25T11:44:11.0230907Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0231579Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0232250Z 		24 |           ports:
2024-04-25T11:44:11.0232651Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0233091Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0233564Z 		27 |             httpGet:
2024-04-25T11:44:11.0233944Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0234385Z 		29 |               port: 8501
2024-04-25T11:44:11.0234872Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0235251Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0235679Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0236153Z 		33 |             httpGet:
2024-04-25T11:44:11.0236515Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0236954Z 		35 |               port: 8501
2024-04-25T11:44:11.0237429Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0237809Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0238223Z 		38 |           resources:
2024-04-25T11:44:11.0238676Z 		39 |             limits:
2024-04-25T11:44:11.0239009Z 		40 |               cpu: 1
2024-04-25T11:44:11.0239383Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0239852Z 		42 |             requests:
2024-04-25T11:44:11.0240194Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0240581Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0240845Z 
2024-04-25T11:44:11.0241225Z Check: CKV_K8S_29: "Apply security context to your pods and containers"
2024-04-25T11:44:11.0241940Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0242809Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0244429Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-securitycontext-is-applied-to-pods-and-containers
2024-04-25T11:44:11.0245448Z 
2024-04-25T11:44:11.0245617Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0245977Z 		2  | kind: Deployment
2024-04-25T11:44:11.0246399Z 		3  | metadata:
2024-04-25T11:44:11.0246783Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0247163Z 		5  |   labels:
2024-04-25T11:44:11.0247610Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0248008Z 		7  | spec:
2024-04-25T11:44:11.0248311Z 		8  |   replicas: 1
2024-04-25T11:44:11.0248724Z 		9  |   selector:
2024-04-25T11:44:11.0249087Z 		10 |     matchLabels:
2024-04-25T11:44:11.0249590Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0250084Z 		12 |   template:
2024-04-25T11:44:11.0250405Z 		13 |     metadata:
2024-04-25T11:44:11.0250748Z 		14 |       labels:
2024-04-25T11:44:11.0251214Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0251614Z 		16 |     spec:
2024-04-25T11:44:11.0251962Z 		17 |       containers:
2024-04-25T11:44:11.0252459Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0253205Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.0253902Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0254416Z 		21 |           env:
2024-04-25T11:44:11.0254822Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0255455Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0256424Z 		24 |           ports:
2024-04-25T11:44:11.0256866Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0257267Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0257765Z 		27 |             httpGet:
2024-04-25T11:44:11.0258163Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0258568Z 		29 |               port: 8501
2024-04-25T11:44:11.0259057Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0259471Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0259861Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0260339Z 		33 |             httpGet:
2024-04-25T11:44:11.0261435Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0262046Z 		35 |               port: 8501
2024-04-25T11:44:11.0262563Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0262977Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0263381Z 		38 |           resources:
2024-04-25T11:44:11.0263853Z 		39 |             limits:
2024-04-25T11:44:11.0264270Z 		40 |               cpu: 1
2024-04-25T11:44:11.0264810Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0265429Z 		42 |             requests:
2024-04-25T11:44:11.0265979Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0266425Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0266832Z 
2024-04-25T11:44:11.0267141Z Check: CKV_K8S_30: "Apply security context to your containers"
2024-04-25T11:44:11.0268008Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0268954Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0270321Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-28
2024-04-25T11:44:11.0271059Z 
2024-04-25T11:44:11.0271253Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0271605Z 		2  | kind: Deployment
2024-04-25T11:44:11.0272035Z 		3  | metadata:
2024-04-25T11:44:11.0272452Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0272812Z 		5  |   labels:
2024-04-25T11:44:11.0273268Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0273685Z 		7  | spec:
2024-04-25T11:44:11.0273976Z 		8  |   replicas: 1
2024-04-25T11:44:11.0274394Z 		9  |   selector:
2024-04-25T11:44:11.0274751Z 		10 |     matchLabels:
2024-04-25T11:44:11.0275126Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0275620Z 		12 |   template:
2024-04-25T11:44:11.0275950Z 		13 |     metadata:
2024-04-25T11:44:11.0276252Z 		14 |       labels:
2024-04-25T11:44:11.0276731Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0277148Z 		16 |     spec:
2024-04-25T11:44:11.0277450Z 		17 |       containers:
2024-04-25T11:44:11.0277969Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0278779Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.0279435Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0279960Z 		21 |           env:
2024-04-25T11:44:11.0280366Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0281005Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0281692Z 		24 |           ports:
2024-04-25T11:44:11.0282306Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0282744Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0283216Z 		27 |             httpGet:
2024-04-25T11:44:11.0283620Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0284047Z 		29 |               port: 8501
2024-04-25T11:44:11.0284512Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0284932Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0285344Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0285808Z 		33 |             httpGet:
2024-04-25T11:44:11.0286226Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0286627Z 		35 |               port: 8501
2024-04-25T11:44:11.0287094Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0287526Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0287903Z 		38 |           resources:
2024-04-25T11:44:11.0288345Z 		39 |             limits:
2024-04-25T11:44:11.0288729Z 		40 |               cpu: 1
2024-04-25T11:44:11.0289071Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0289528Z 		42 |             requests:
2024-04-25T11:44:11.0289923Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0290279Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0290631Z 
2024-04-25T11:44:11.0290800Z Check: CKV_K8S_43: "Image should use digest"
2024-04-25T11:44:11.0291464Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0292468Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0293890Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-39
2024-04-25T11:44:11.0294707Z 
2024-04-25T11:44:11.0294847Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0295245Z 		2  | kind: Deployment
2024-04-25T11:44:11.0295664Z 		3  | metadata:
2024-04-25T11:44:11.0296370Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0296788Z 		5  |   labels:
2024-04-25T11:44:11.0297261Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0297679Z 		7  | spec:
2024-04-25T11:44:11.0298032Z 		8  |   replicas: 1
2024-04-25T11:44:11.0298432Z 		9  |   selector:
2024-04-25T11:44:11.0298785Z 		10 |     matchLabels:
2024-04-25T11:44:11.0299182Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0299692Z 		12 |   template:
2024-04-25T11:44:11.0300041Z 		13 |     metadata:
2024-04-25T11:44:11.0300373Z 		14 |       labels:
2024-04-25T11:44:11.0300862Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0301305Z 		16 |     spec:
2024-04-25T11:44:11.0301635Z 		17 |       containers:
2024-04-25T11:44:11.0302155Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0302947Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.0303655Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0304170Z 		21 |           env:
2024-04-25T11:44:11.0304588Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0305313Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0305994Z 		24 |           ports:
2024-04-25T11:44:11.0306455Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0306917Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0307371Z 		27 |             httpGet:
2024-04-25T11:44:11.0307802Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0308264Z 		29 |               port: 8501
2024-04-25T11:44:11.0308729Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0309180Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0309624Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0310072Z 		33 |             httpGet:
2024-04-25T11:44:11.0310500Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0310958Z 		35 |               port: 8501
2024-04-25T11:44:11.0311401Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0311847Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0312281Z 		38 |           resources:
2024-04-25T11:44:11.0312896Z 		39 |             limits:
2024-04-25T11:44:11.0313284Z 		40 |               cpu: 1
2024-04-25T11:44:11.0313673Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0314142Z 		42 |             requests:
2024-04-25T11:44:11.0314540Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0314945Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0315319Z 
2024-04-25T11:44:11.0315738Z Check: CKV_K8S_31: "Ensure that the seccomp profile is set to docker/default or runtime/default"
2024-04-25T11:44:11.0316654Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0317562Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0318921Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-29
2024-04-25T11:44:11.0319742Z 
2024-04-25T11:44:11.0319885Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0320304Z 		2  | kind: Deployment
2024-04-25T11:44:11.0320719Z 		3  | metadata:
2024-04-25T11:44:11.0321124Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0321555Z 		5  |   labels:
2024-04-25T11:44:11.0321985Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0322396Z 		7  | spec:
2024-04-25T11:44:11.0322734Z 		8  |   replicas: 1
2024-04-25T11:44:11.0323129Z 		9  |   selector:
2024-04-25T11:44:11.0323472Z 		10 |     matchLabels:
2024-04-25T11:44:11.0323905Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0324505Z 		12 |   template:
2024-04-25T11:44:11.0324858Z 		13 |     metadata:
2024-04-25T11:44:11.0325197Z 		14 |       labels:
2024-04-25T11:44:11.0325621Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0326055Z 		16 |     spec:
2024-04-25T11:44:11.0326392Z 		17 |       containers:
2024-04-25T11:44:11.0326853Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0327627Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.0328315Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0328783Z 		21 |           env:
2024-04-25T11:44:11.0329201Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0329866Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0330493Z 		24 |           ports:
2024-04-25T11:44:11.0330927Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0331369Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0331815Z 		27 |             httpGet:
2024-04-25T11:44:11.0332216Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0332657Z 		29 |               port: 8501
2024-04-25T11:44:11.0333102Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0333582Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0334007Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0334459Z 		33 |             httpGet:
2024-04-25T11:44:11.0334856Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0335292Z 		35 |               port: 8501
2024-04-25T11:44:11.0335733Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0336458Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0336898Z 		38 |           resources:
2024-04-25T11:44:11.0337301Z 		39 |             limits:
2024-04-25T11:44:11.0337666Z 		40 |               cpu: 1
2024-04-25T11:44:11.0338059Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0338474Z 		42 |             requests:
2024-04-25T11:44:11.0338936Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0339347Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0339657Z 
2024-04-25T11:44:11.0340002Z Check: CKV_K8S_28: "Minimize the admission of containers with the NET_RAW capability"
2024-04-25T11:44:11.0340818Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0341678Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0342988Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-27
2024-04-25T11:44:11.0343895Z 
2024-04-25T11:44:11.0344057Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0344442Z 		2  | kind: Deployment
2024-04-25T11:44:11.0344869Z 		3  | metadata:
2024-04-25T11:44:11.0345241Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0345634Z 		5  |   labels:
2024-04-25T11:44:11.0346168Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0346547Z 		7  | spec:
2024-04-25T11:44:11.0346866Z 		8  |   replicas: 1
2024-04-25T11:44:11.0347284Z 		9  |   selector:
2024-04-25T11:44:11.0347600Z 		10 |     matchLabels:
2024-04-25T11:44:11.0348013Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0348503Z 		12 |   template:
2024-04-25T11:44:11.0348799Z 		13 |     metadata:
2024-04-25T11:44:11.0349139Z 		14 |       labels:
2024-04-25T11:44:11.0349613Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0349997Z 		16 |     spec:
2024-04-25T11:44:11.0350327Z 		17 |       containers:
2024-04-25T11:44:11.0350881Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0351638Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.0352330Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0352837Z 		21 |           env:
2024-04-25T11:44:11.0353207Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0353880Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0354740Z 		24 |           ports:
2024-04-25T11:44:11.0355135Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0355596Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0356059Z 		27 |             httpGet:
2024-04-25T11:44:11.0356420Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0356959Z 		29 |               port: 8501
2024-04-25T11:44:11.0357424Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0357804Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0358248Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0358712Z 		33 |             httpGet:
2024-04-25T11:44:11.0359075Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0359531Z 		35 |               port: 8501
2024-04-25T11:44:11.0359993Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0360368Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0360809Z 		38 |           resources:
2024-04-25T11:44:11.0361252Z 		39 |             limits:
2024-04-25T11:44:11.0361594Z 		40 |               cpu: 1
2024-04-25T11:44:11.0362056Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0362511Z 		42 |             requests:
2024-04-25T11:44:11.0362865Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0363256Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0363566Z 
2024-04-25T11:44:11.0363932Z Check: CKV_K8S_14: "Image Tag should be fixed - not latest or blank"
2024-04-25T11:44:11.0364640Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0365483Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0366807Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-13
2024-04-25T11:44:11.0367565Z 
2024-04-25T11:44:11.0367698Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0368078Z 		2  | kind: Deployment
2024-04-25T11:44:11.0368530Z 		3  | metadata:
2024-04-25T11:44:11.0368880Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0369364Z 		5  |   labels:
2024-04-25T11:44:11.0369845Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0370208Z 		7  | spec:
2024-04-25T11:44:11.0370529Z 		8  |   replicas: 1
2024-04-25T11:44:11.0370969Z 		9  |   selector:
2024-04-25T11:44:11.0371274Z 		10 |     matchLabels:
2024-04-25T11:44:11.0371687Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0372182Z 		12 |   template:
2024-04-25T11:44:11.0372481Z 		13 |     metadata:
2024-04-25T11:44:11.0372820Z 		14 |       labels:
2024-04-25T11:44:11.0373299Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0373679Z 		16 |     spec:
2024-04-25T11:44:11.0374229Z 		17 |       containers:
2024-04-25T11:44:11.0374747Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0375462Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.0376433Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0376959Z 		21 |           env:
2024-04-25T11:44:11.0377339Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0378039Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0378737Z 		24 |           ports:
2024-04-25T11:44:11.0379130Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0379592Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0380054Z 		27 |             httpGet:
2024-04-25T11:44:11.0380497Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0380962Z 		29 |               port: 8501
2024-04-25T11:44:11.0381424Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0381824Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0382255Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0382720Z 		33 |             httpGet:
2024-04-25T11:44:11.0383096Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0383536Z 		35 |               port: 8501
2024-04-25T11:44:11.0383994Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0384390Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0384987Z 		38 |           resources:
2024-04-25T11:44:11.0385448Z 		39 |             limits:
2024-04-25T11:44:11.0385859Z 		40 |               cpu: 1
2024-04-25T11:44:11.0386234Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0386733Z 		42 |             requests:
2024-04-25T11:44:11.0387076Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0387469Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0387788Z 
2024-04-25T11:44:11.0388154Z Check: CKV_K8S_20: "Containers should not run with allowPrivilegeEscalation"
2024-04-25T11:44:11.0388904Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0389753Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0391074Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-19
2024-04-25T11:44:11.0391811Z 
2024-04-25T11:44:11.0391980Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0392329Z 		2  | kind: Deployment
2024-04-25T11:44:11.0392852Z 		3  | metadata:
2024-04-25T11:44:11.0393235Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0393615Z 		5  |   labels:
2024-04-25T11:44:11.0394057Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0394458Z 		7  | spec:
2024-04-25T11:44:11.0394758Z 		8  |   replicas: 1
2024-04-25T11:44:11.0395166Z 		9  |   selector:
2024-04-25T11:44:11.0395504Z 		10 |     matchLabels:
2024-04-25T11:44:11.0395896Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0396371Z 		12 |   template:
2024-04-25T11:44:11.0396707Z 		13 |     metadata:
2024-04-25T11:44:11.0397033Z 		14 |       labels:
2024-04-25T11:44:11.0397565Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0398002Z 		16 |     spec:
2024-04-25T11:44:11.0398299Z 		17 |       containers:
2024-04-25T11:44:11.0398788Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0399559Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.0400215Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0400722Z 		21 |           env:
2024-04-25T11:44:11.0401144Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0401779Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0402449Z 		24 |           ports:
2024-04-25T11:44:11.0402888Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0403291Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0403837Z 		27 |             httpGet:
2024-04-25T11:44:11.0404254Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0404808Z 		29 |               port: 8501
2024-04-25T11:44:11.0405296Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0405709Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0406147Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0406625Z 		33 |             httpGet:
2024-04-25T11:44:11.0407020Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0407426Z 		35 |               port: 8501
2024-04-25T11:44:11.0407906Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0408314Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0408781Z 		38 |           resources:
2024-04-25T11:44:11.0409242Z 		39 |             limits:
2024-04-25T11:44:11.0409607Z 		40 |               cpu: 1
2024-04-25T11:44:11.0409958Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0410416Z 		42 |             requests:
2024-04-25T11:44:11.0410793Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0411164Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0411521Z 
2024-04-25T11:44:11.0411764Z Check: CKV_K8S_23: "Minimize the admission of root containers"
2024-04-25T11:44:11.0412484Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0413312Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0414613Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-22
2024-04-25T11:44:11.0415484Z 
2024-04-25T11:44:11.0415673Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0416430Z 		2  | kind: Deployment
2024-04-25T11:44:11.0416878Z 		3  | metadata:
2024-04-25T11:44:11.0417312Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0417673Z 		5  |   labels:
2024-04-25T11:44:11.0418122Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0418537Z 		7  | spec:
2024-04-25T11:44:11.0418820Z 		8  |   replicas: 1
2024-04-25T11:44:11.0419254Z 		9  |   selector:
2024-04-25T11:44:11.0419608Z 		10 |     matchLabels:
2024-04-25T11:44:11.0419998Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0420479Z 		12 |   template:
2024-04-25T11:44:11.0420905Z 		13 |     metadata:
2024-04-25T11:44:11.0421204Z 		14 |       labels:
2024-04-25T11:44:11.0421679Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0422107Z 		16 |     spec:
2024-04-25T11:44:11.0422402Z 		17 |       containers:
2024-04-25T11:44:11.0422909Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0423662Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.0424316Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0424836Z 		21 |           env:
2024-04-25T11:44:11.0425246Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0425886Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0426570Z 		24 |           ports:
2024-04-25T11:44:11.0427084Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0427490Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0427967Z 		27 |             httpGet:
2024-04-25T11:44:11.0428368Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0428769Z 		29 |               port: 8501
2024-04-25T11:44:11.0429240Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0429650Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0430060Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0430517Z 		33 |             httpGet:
2024-04-25T11:44:11.0430918Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0431351Z 		35 |               port: 8501
2024-04-25T11:44:11.0431808Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0432287Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0432680Z 		38 |           resources:
2024-04-25T11:44:11.0433108Z 		39 |             limits:
2024-04-25T11:44:11.0433472Z 		40 |               cpu: 1
2024-04-25T11:44:11.0433827Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0434278Z 		42 |             requests:
2024-04-25T11:44:11.0434836Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0435203Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0435568Z 
2024-04-25T11:44:11.0435920Z Check: CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
2024-04-25T11:44:11.0436766Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0437675Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0438890Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-35
2024-04-25T11:44:11.0439761Z 
2024-04-25T11:44:11.0439896Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0440336Z 		2  | kind: Deployment
2024-04-25T11:44:11.0440660Z 		3  | metadata:
2024-04-25T11:44:11.0441061Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0441514Z 		5  |   labels:
2024-04-25T11:44:11.0441874Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0442280Z 		7  | spec:
2024-04-25T11:44:11.0442666Z 		8  |   replicas: 1
2024-04-25T11:44:11.0442993Z 		9  |   selector:
2024-04-25T11:44:11.0443332Z 		10 |     matchLabels:
2024-04-25T11:44:11.0443808Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0444276Z 		12 |   template:
2024-04-25T11:44:11.0444607Z 		13 |     metadata:
2024-04-25T11:44:11.0445000Z 		14 |       labels:
2024-04-25T11:44:11.0445382Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0445952Z 		16 |     spec:
2024-04-25T11:44:11.0446372Z 		17 |       containers:
2024-04-25T11:44:11.0446766Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0447520Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.0448305Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0448702Z 		21 |           env:
2024-04-25T11:44:11.0449105Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0449865Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0450516Z 		24 |           ports:
2024-04-25T11:44:11.0450938Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0451452Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0451808Z 		27 |             httpGet:
2024-04-25T11:44:11.0452229Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0452725Z 		29 |               port: 8501
2024-04-25T11:44:11.0453212Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0453608Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0454099Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0454476Z 		33 |             httpGet:
2024-04-25T11:44:11.0454867Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0455440Z 		35 |               port: 8501
2024-04-25T11:44:11.0456158Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0456579Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0457077Z 		38 |           resources:
2024-04-25T11:44:11.0457430Z 		39 |             limits:
2024-04-25T11:44:11.0457791Z 		40 |               cpu: 1
2024-04-25T11:44:11.0458237Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0458614Z 		42 |             requests:
2024-04-25T11:44:11.0458994Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0459462Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0459711Z 
2024-04-25T11:44:11.0459950Z Check: CKV_K8S_21: "The default namespace should not be used"
2024-04-25T11:44:11.0460641Z 	FAILED for resource: Service.default.fixmycar-backend
2024-04-25T11:44:11.0461653Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-service.yaml:1-12
2024-04-25T11:44:11.0462879Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-20
2024-04-25T11:44:11.0463648Z 
2024-04-25T11:44:11.0463775Z 		1  | apiVersion: v1
2024-04-25T11:44:11.0464214Z 		2  | kind: Service
2024-04-25T11:44:11.0464522Z 		3  | metadata:
2024-04-25T11:44:11.0464905Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0465374Z 		5  | spec:
2024-04-25T11:44:11.0465809Z 		6  |   selector:
2024-04-25T11:44:11.0466227Z 		7  |     app: fixmycar-backend
2024-04-25T11:44:11.0466700Z 		8  |   ports:
2024-04-25T11:44:11.0467024Z 		9  |     - name: http
2024-04-25T11:44:11.0467471Z 		10 |       port: 8080
2024-04-25T11:44:11.0467909Z 		11 |       targetPort: 8080
2024-04-25T11:44:11.0468262Z 		12 |   type: ClusterIP
2024-04-25T11:44:11.0468528Z 
2024-04-25T11:44:11.0468892Z Check: CKV_K8S_22: "Use read-only filesystem for containers where possible"
2024-04-25T11:44:11.0469713Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0470591Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0471836Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-21
2024-04-25T11:44:11.0472664Z 
2024-04-25T11:44:11.0472798Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0473192Z 		2  | kind: Deployment
2024-04-25T11:44:11.0473518Z 		3  | metadata:
2024-04-25T11:44:11.0473966Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0474378Z 		5  |   labels:
2024-04-25T11:44:11.0474803Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0475266Z 		7  | spec:
2024-04-25T11:44:11.0475602Z 		8  |   replicas: 1
2024-04-25T11:44:11.0475910Z 		9  |   selector:
2024-04-25T11:44:11.0476311Z 		10 |     matchLabels:
2024-04-25T11:44:11.0476736Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0477262Z 		12 |   template:
2024-04-25T11:44:11.0477688Z 		13 |     metadata:
2024-04-25T11:44:11.0478026Z 		14 |       labels:
2024-04-25T11:44:11.0478438Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0478936Z 		16 |     spec:
2024-04-25T11:44:11.0479353Z 		17 |       containers:
2024-04-25T11:44:11.0479736Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0480604Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0481335Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0481733Z 		21 |           ports:
2024-04-25T11:44:11.0482229Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0482659Z 		23 |           resources:
2024-04-25T11:44:11.0482991Z 		24 |             limits:
2024-04-25T11:44:11.0483438Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0483831Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0484190Z 		27 |           env:
2024-04-25T11:44:11.0484673Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0485171Z 		29 |               value: "debug"
2024-04-25T11:44:11.0485622Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0486177Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0486693Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0487215Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0487774Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0488061Z 
2024-04-25T11:44:11.0488339Z Check: CKV_K8S_21: "The default namespace should not be used"
2024-04-25T11:44:11.0489016Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0489975Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0491238Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-20
2024-04-25T11:44:11.0491989Z 
2024-04-25T11:44:11.0492129Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0492596Z 		2  | kind: Deployment
2024-04-25T11:44:11.0493045Z 		3  | metadata:
2024-04-25T11:44:11.0493390Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0493861Z 		5  |   labels:
2024-04-25T11:44:11.0494259Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0494616Z 		7  | spec:
2024-04-25T11:44:11.0495010Z 		8  |   replicas: 1
2024-04-25T11:44:11.0495369Z 		9  |   selector:
2024-04-25T11:44:11.0495672Z 		10 |     matchLabels:
2024-04-25T11:44:11.0496439Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0497031Z 		12 |   template:
2024-04-25T11:44:11.0497341Z 		13 |     metadata:
2024-04-25T11:44:11.0497869Z 		14 |       labels:
2024-04-25T11:44:11.0498271Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0498651Z 		16 |     spec:
2024-04-25T11:44:11.0499221Z 		17 |       containers:
2024-04-25T11:44:11.0499719Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0500482Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0501330Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0501767Z 		21 |           ports:
2024-04-25T11:44:11.0502159Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0502698Z 		23 |           resources:
2024-04-25T11:44:11.0503077Z 		24 |             limits:
2024-04-25T11:44:11.0503412Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0503951Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0504351Z 		27 |           env:
2024-04-25T11:44:11.0504714Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0505214Z 		29 |               value: "debug"
2024-04-25T11:44:11.0505683Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0506158Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0506760Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0507304Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0507773Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0508352Z 
2024-04-25T11:44:11.0508693Z Check: CKV_K8S_37: "Minimize the admission of containers with capabilities assigned"
2024-04-25T11:44:11.0509518Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0510547Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0511779Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-34
2024-04-25T11:44:11.0512543Z 
2024-04-25T11:44:11.0512701Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0513145Z 		2  | kind: Deployment
2024-04-25T11:44:11.0513466Z 		3  | metadata:
2024-04-25T11:44:11.0513868Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0514318Z 		5  |   labels:
2024-04-25T11:44:11.0514658Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0515068Z 		7  | spec:
2024-04-25T11:44:11.0515449Z 		8  |   replicas: 1
2024-04-25T11:44:11.0515759Z 		9  |   selector:
2024-04-25T11:44:11.0516119Z 		10 |     matchLabels:
2024-04-25T11:44:11.0516668Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0517039Z 		12 |   template:
2024-04-25T11:44:11.0517387Z 		13 |     metadata:
2024-04-25T11:44:11.0517783Z 		14 |       labels:
2024-04-25T11:44:11.0518159Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0518570Z 		16 |     spec:
2024-04-25T11:44:11.0518970Z 		17 |       containers:
2024-04-25T11:44:11.0519153Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0519659Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0519847Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0519968Z 		21 |           ports:
2024-04-25T11:44:11.0520153Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0520383Z 		23 |           resources:
2024-04-25T11:44:11.0520522Z 		24 |             limits:
2024-04-25T11:44:11.0520646Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0520814Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0520940Z 		27 |           env:
2024-04-25T11:44:11.0521110Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0521428Z 		29 |               value: "debug"
2024-04-25T11:44:11.0521632Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0521812Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0522060Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0522265Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0522455Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0522601Z 
2024-04-25T11:44:11.0523001Z Check: CKV_K8S_40: "Containers should run as a high UID to avoid host conflict"
2024-04-25T11:44:11.0523296Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0523805Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0524500Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-37
2024-04-25T11:44:11.0524510Z 
2024-04-25T11:44:11.0524644Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0524823Z 		2  | kind: Deployment
2024-04-25T11:44:11.0525009Z 		3  | metadata:
2024-04-25T11:44:11.0525184Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0525343Z 		5  |   labels:
2024-04-25T11:44:11.0525511Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0525682Z 		7  | spec:
2024-04-25T11:44:11.0525805Z 		8  |   replicas: 1
2024-04-25T11:44:11.0525986Z 		9  |   selector:
2024-04-25T11:44:11.0526149Z 		10 |     matchLabels:
2024-04-25T11:44:11.0526321Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0526443Z 		12 |   template:
2024-04-25T11:44:11.0526692Z 		13 |     metadata:
2024-04-25T11:44:11.0526810Z 		14 |       labels:
2024-04-25T11:44:11.0527054Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0527206Z 		16 |     spec:
2024-04-25T11:44:11.0527331Z 		17 |       containers:
2024-04-25T11:44:11.0527509Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0528172Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0528322Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0528519Z 		21 |           ports:
2024-04-25T11:44:11.0528744Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0528871Z 		23 |           resources:
2024-04-25T11:44:11.0529012Z 		24 |             limits:
2024-04-25T11:44:11.0529173Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0529303Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0529487Z 		27 |           env:
2024-04-25T11:44:11.0529692Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0529838Z 		29 |               value: "debug"
2024-04-25T11:44:11.0530022Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0530241Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0530449Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0530754Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0530907Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0530913Z 
2024-04-25T11:44:11.0531215Z Check: CKV_K8S_29: "Apply security context to your pods and containers"
2024-04-25T11:44:11.0531610Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0532082Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0533090Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-securitycontext-is-applied-to-pods-and-containers
2024-04-25T11:44:11.0533197Z 
2024-04-25T11:44:11.0533331Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0533475Z 		2  | kind: Deployment
2024-04-25T11:44:11.0533629Z 		3  | metadata:
2024-04-25T11:44:11.0533803Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0533920Z 		5  |   labels:
2024-04-25T11:44:11.0534187Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0534309Z 		7  | spec:
2024-04-25T11:44:11.0534449Z 		8  |   replicas: 1
2024-04-25T11:44:11.0534604Z 		9  |   selector:
2024-04-25T11:44:11.0534727Z 		10 |     matchLabels:
2024-04-25T11:44:11.0534900Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0535124Z 		12 |   template:
2024-04-25T11:44:11.0535258Z 		13 |     metadata:
2024-04-25T11:44:11.0535377Z 		14 |       labels:
2024-04-25T11:44:11.0535588Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0535706Z 		16 |     spec:
2024-04-25T11:44:11.0536120Z 		17 |       containers:
2024-04-25T11:44:11.0536633Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0537136Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0537370Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0537530Z 		21 |           ports:
2024-04-25T11:44:11.0537714Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0537838Z 		23 |           resources:
2024-04-25T11:44:11.0538095Z 		24 |             limits:
2024-04-25T11:44:11.0538221Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0538353Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0538515Z 		27 |           env:
2024-04-25T11:44:11.0538684Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0538867Z 		29 |               value: "debug"
2024-04-25T11:44:11.0539108Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0539287Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0539532Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0539740Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0539892Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0539899Z 
2024-04-25T11:44:11.0540308Z Check: CKV_K8S_30: "Apply security context to your containers"
2024-04-25T11:44:11.0540670Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0541149Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0542075Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-28
2024-04-25T11:44:11.0542082Z 
2024-04-25T11:44:11.0542214Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0542394Z 		2  | kind: Deployment
2024-04-25T11:44:11.0542512Z 		3  | metadata:
2024-04-25T11:44:11.0542754Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0542984Z 		5  |   labels:
2024-04-25T11:44:11.0543153Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0543286Z 		7  | spec:
2024-04-25T11:44:11.0543447Z 		8  |   replicas: 1
2024-04-25T11:44:11.0543564Z 		9  |   selector:
2024-04-25T11:44:11.0543750Z 		10 |     matchLabels:
2024-04-25T11:44:11.0543953Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0544069Z 		12 |   template:
2024-04-25T11:44:11.0544201Z 		13 |     metadata:
2024-04-25T11:44:11.0544352Z 		14 |       labels:
2024-04-25T11:44:11.0544523Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0544707Z 		16 |     spec:
2024-04-25T11:44:11.0544866Z 		17 |       containers:
2024-04-25T11:44:11.0545060Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0545521Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0545705Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0545824Z 		21 |           ports:
2024-04-25T11:44:11.0546070Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0546232Z 		23 |           resources:
2024-04-25T11:44:11.0546368Z 		24 |             limits:
2024-04-25T11:44:11.0546532Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0546775Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0546895Z 		27 |           env:
2024-04-25T11:44:11.0547566Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0547757Z 		29 |               value: "debug"
2024-04-25T11:44:11.0547968Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0548181Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0548395Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0548597Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0548966Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0548974Z 
2024-04-25T11:44:11.0549163Z Check: CKV_K8S_43: "Image should use digest"
2024-04-25T11:44:11.0549471Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0549982Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0550790Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-39
2024-04-25T11:44:11.0550798Z 
2024-04-25T11:44:11.0552031Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0552192Z 		2  | kind: Deployment
2024-04-25T11:44:11.0552317Z 		3  | metadata:
2024-04-25T11:44:11.0552542Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0552658Z 		5  |   labels:
2024-04-25T11:44:11.0552834Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0553095Z 		7  | spec:
2024-04-25T11:44:11.0553220Z 		8  |   replicas: 1
2024-04-25T11:44:11.0553338Z 		9  |   selector:
2024-04-25T11:44:11.0553498Z 		10 |     matchLabels:
2024-04-25T11:44:11.0553671Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0553790Z 		12 |   template:
2024-04-25T11:44:11.0554119Z 		13 |     metadata:
2024-04-25T11:44:11.0554234Z 		14 |       labels:
2024-04-25T11:44:11.0554408Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0554560Z 		16 |     spec:
2024-04-25T11:44:11.0554689Z 		17 |       containers:
2024-04-25T11:44:11.0554869Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0555449Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0555602Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0555721Z 		21 |           ports:
2024-04-25T11:44:11.0555940Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0556228Z 		23 |           resources:
2024-04-25T11:44:11.0556386Z 		24 |             limits:
2024-04-25T11:44:11.0556579Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0556713Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0556865Z 		27 |           env:
2024-04-25T11:44:11.0557038Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0557185Z 		29 |               value: "debug"
2024-04-25T11:44:11.0557406Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0557648Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0557863Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0558102Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0558272Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0558278Z 
2024-04-25T11:44:11.0558747Z Check: CKV_K8S_31: "Ensure that the seccomp profile is set to docker/default or runtime/default"
2024-04-25T11:44:11.0559061Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0559582Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0560283Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-29
2024-04-25T11:44:11.0560289Z 
2024-04-25T11:44:11.0560422Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0560568Z 		2  | kind: Deployment
2024-04-25T11:44:11.0560723Z 		3  | metadata:
2024-04-25T11:44:11.0560891Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0561073Z 		5  |   labels:
2024-04-25T11:44:11.0561285Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0561416Z 		7  | spec:
2024-04-25T11:44:11.0561538Z 		8  |   replicas: 1
2024-04-25T11:44:11.0561692Z 		9  |   selector:
2024-04-25T11:44:11.0561815Z 		10 |     matchLabels:
2024-04-25T11:44:11.0562055Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0562211Z 		12 |   template:
2024-04-25T11:44:11.0562349Z 		13 |     metadata:
2024-04-25T11:44:11.0562473Z 		14 |       labels:
2024-04-25T11:44:11.0562694Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0562813Z 		16 |     spec:
2024-04-25T11:44:11.0563002Z 		17 |       containers:
2024-04-25T11:44:11.0563239Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0563724Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0564007Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0564128Z 		21 |           ports:
2024-04-25T11:44:11.0564311Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0564687Z 		23 |           resources:
2024-04-25T11:44:11.0564818Z 		24 |             limits:
2024-04-25T11:44:11.0564944Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0565110Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0565227Z 		27 |           env:
2024-04-25T11:44:11.0565401Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0565655Z 		29 |               value: "debug"
2024-04-25T11:44:11.0565844Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0566031Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0566275Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0566483Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0566636Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0566642Z 
2024-04-25T11:44:11.0567104Z Check: CKV_K8S_28: "Minimize the admission of containers with the NET_RAW capability"
2024-04-25T11:44:11.0567399Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0567909Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0568601Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-27
2024-04-25T11:44:11.0568607Z 
2024-04-25T11:44:11.0568740Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0568986Z 		2  | kind: Deployment
2024-04-25T11:44:11.0569108Z 		3  | metadata:
2024-04-25T11:44:11.0569533Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0569687Z 		5  |   labels:
2024-04-25T11:44:11.0569860Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0569994Z 		7  | spec:
2024-04-25T11:44:11.0570222Z 		8  |   replicas: 1
2024-04-25T11:44:11.0570344Z 		9  |   selector:
2024-04-25T11:44:11.0570468Z 		10 |     matchLabels:
2024-04-25T11:44:11.0570676Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0570813Z 		12 |   template:
2024-04-25T11:44:11.0570932Z 		13 |     metadata:
2024-04-25T11:44:11.0571156Z 		14 |       labels:
2024-04-25T11:44:11.0571335Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0571454Z 		16 |     spec:
2024-04-25T11:44:11.0571613Z 		17 |       containers:
2024-04-25T11:44:11.0571810Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0572322Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0572547Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0572673Z 		21 |           ports:
2024-04-25T11:44:11.0572897Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0573039Z 		23 |           resources:
2024-04-25T11:44:11.0573160Z 		24 |             limits:
2024-04-25T11:44:11.0573322Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0573511Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0573630Z 		27 |           env:
2024-04-25T11:44:11.0573917Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0574065Z 		29 |               value: "debug"
2024-04-25T11:44:11.0574251Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0574469Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0574737Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0574943Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0575150Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0575156Z 
2024-04-25T11:44:11.0575477Z Check: CKV_K8S_14: "Image Tag should be fixed - not latest or blank"
2024-04-25T11:44:11.0577165Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0577695Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0578530Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-13
2024-04-25T11:44:11.0578538Z 
2024-04-25T11:44:11.0578713Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0578861Z 		2  | kind: Deployment
2024-04-25T11:44:11.0578981Z 		3  | metadata:
2024-04-25T11:44:11.0579361Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0579486Z 		5  |   labels:
2024-04-25T11:44:11.0579731Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0579903Z 		7  | spec:
2024-04-25T11:44:11.0580027Z 		8  |   replicas: 1
2024-04-25T11:44:11.0580147Z 		9  |   selector:
2024-04-25T11:44:11.0580309Z 		10 |     matchLabels:
2024-04-25T11:44:11.0580485Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0580746Z 		12 |   template:
2024-04-25T11:44:11.0580921Z 		13 |     metadata:
2024-04-25T11:44:11.0581038Z 		14 |       labels:
2024-04-25T11:44:11.0581213Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0581372Z 		16 |     spec:
2024-04-25T11:44:11.0581497Z 		17 |       containers:
2024-04-25T11:44:11.0581795Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0582285Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0582440Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0582596Z 		21 |           ports:
2024-04-25T11:44:11.0582784Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0582912Z 		23 |           resources:
2024-04-25T11:44:11.0583150Z 		24 |             limits:
2024-04-25T11:44:11.0583275Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0583406Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0583560Z 		27 |           env:
2024-04-25T11:44:11.0583732Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0584367Z 		29 |               value: "debug"
2024-04-25T11:44:11.0584669Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0584853Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0585066Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0585313Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0585485Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0585491Z 
2024-04-25T11:44:11.0585880Z Check: CKV_K8S_8: "Liveness Probe Should be Configured"
2024-04-25T11:44:11.0586172Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0586647Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0587370Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-7
2024-04-25T11:44:11.0587376Z 
2024-04-25T11:44:11.0587530Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0587661Z 		2  | kind: Deployment
2024-04-25T11:44:11.0587883Z 		3  | metadata:
2024-04-25T11:44:11.0588055Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0588170Z 		5  |   labels:
2024-04-25T11:44:11.0588378Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0588512Z 		7  | spec:
2024-04-25T11:44:11.0588636Z 		8  |   replicas: 1
2024-04-25T11:44:11.0588854Z 		9  |   selector:
2024-04-25T11:44:11.0588980Z 		10 |     matchLabels:
2024-04-25T11:44:11.0589152Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0589324Z 		12 |   template:
2024-04-25T11:44:11.0589444Z 		13 |     metadata:
2024-04-25T11:44:11.0589602Z 		14 |       labels:
2024-04-25T11:44:11.0589839Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0589958Z 		16 |     spec:
2024-04-25T11:44:11.0590117Z 		17 |       containers:
2024-04-25T11:44:11.0590315Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0590804Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0591077Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0591263Z 		21 |           ports:
2024-04-25T11:44:11.0591448Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0591625Z 		23 |           resources:
2024-04-25T11:44:11.0591745Z 		24 |             limits:
2024-04-25T11:44:11.0591872Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0592039Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0592220Z 		27 |           env:
2024-04-25T11:44:11.0592390Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0592576Z 		29 |               value: "debug"
2024-04-25T11:44:11.0592886Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0593075Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0593413Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0593701Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0593914Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0593920Z 
2024-04-25T11:44:11.0594240Z Check: CKV_K8S_20: "Containers should not run with allowPrivilegeEscalation"
2024-04-25T11:44:11.0594525Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0595031Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0595726Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-19
2024-04-25T11:44:11.0595732Z 
2024-04-25T11:44:11.0595951Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0596117Z 		2  | kind: Deployment
2024-04-25T11:44:11.0596239Z 		3  | metadata:
2024-04-25T11:44:11.0596482Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0596637Z 		5  |   labels:
2024-04-25T11:44:11.0596808Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0597018Z 		7  | spec:
2024-04-25T11:44:11.0597181Z 		8  |   replicas: 1
2024-04-25T11:44:11.0597305Z 		9  |   selector:
2024-04-25T11:44:11.0597464Z 		10 |     matchLabels:
2024-04-25T11:44:11.0597639Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0597905Z 		12 |   template:
2024-04-25T11:44:11.0598132Z 		13 |     metadata:
2024-04-25T11:44:11.0598251Z 		14 |       labels:
2024-04-25T11:44:11.0598431Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0598582Z 		16 |     spec:
2024-04-25T11:44:11.0598723Z 		17 |       containers:
2024-04-25T11:44:11.0598902Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0599480Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0599634Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0599757Z 		21 |           ports:
2024-04-25T11:44:11.0599992Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0600116Z 		23 |           resources:
2024-04-25T11:44:11.0600239Z 		24 |             limits:
2024-04-25T11:44:11.0600464Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0600593Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0600788Z 		27 |           env:
2024-04-25T11:44:11.0601016Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0601147Z 		29 |               value: "debug"
2024-04-25T11:44:11.0601331Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0601621Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0601834Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0602095Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0602248Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0602254Z 
2024-04-25T11:44:11.0602499Z Check: CKV_K8S_23: "Minimize the admission of root containers"
2024-04-25T11:44:11.0602887Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0603363Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0604059Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-22
2024-04-25T11:44:11.0604064Z 
2024-04-25T11:44:11.0604253Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0604380Z 		2  | kind: Deployment
2024-04-25T11:44:11.0604497Z 		3  | metadata:
2024-04-25T11:44:11.0604770Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0604886Z 		5  |   labels:
2024-04-25T11:44:11.0605110Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0605225Z 		7  | spec:
2024-04-25T11:44:11.0605348Z 		8  |   replicas: 1
2024-04-25T11:44:11.0605503Z 		9  |   selector:
2024-04-25T11:44:11.0605692Z 		10 |     matchLabels:
2024-04-25T11:44:11.0605867Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0606242Z 		12 |   template:
2024-04-25T11:44:11.0606365Z 		13 |     metadata:
2024-04-25T11:44:11.0606481Z 		14 |       labels:
2024-04-25T11:44:11.0606691Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0606876Z 		16 |     spec:
2024-04-25T11:44:11.0607021Z 		17 |       containers:
2024-04-25T11:44:11.0607237Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0607711Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0607864Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0608018Z 		21 |           ports:
2024-04-25T11:44:11.0608268Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0608410Z 		23 |           resources:
2024-04-25T11:44:11.0608567Z 		24 |             limits:
2024-04-25T11:44:11.0608693Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0608823Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0608979Z 		27 |           env:
2024-04-25T11:44:11.0609230Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0609360Z 		29 |               value: "debug"
2024-04-25T11:44:11.0609582Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0609763Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0610008Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0610212Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0610450Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0610649Z 
2024-04-25T11:44:11.0611048Z Check: CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
2024-04-25T11:44:11.0611334Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0611800Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0612549Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-35
2024-04-25T11:44:11.0612554Z 
2024-04-25T11:44:11.0612690Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0612926Z 		2  | kind: Deployment
2024-04-25T11:44:11.0613048Z 		3  | metadata:
2024-04-25T11:44:11.0613215Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0613367Z 		5  |   labels:
2024-04-25T11:44:11.0613553Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0613669Z 		7  | spec:
2024-04-25T11:44:11.0613900Z 		8  |   replicas: 1
2024-04-25T11:44:11.0614018Z 		9  |   selector:
2024-04-25T11:44:11.0614147Z 		10 |     matchLabels:
2024-04-25T11:44:11.0614373Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0614492Z 		12 |   template:
2024-04-25T11:44:11.0614609Z 		13 |     metadata:
2024-04-25T11:44:11.0614825Z 		14 |       labels:
2024-04-25T11:44:11.0614998Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0615116Z 		16 |     spec:
2024-04-25T11:44:11.0615291Z 		17 |       containers:
2024-04-25T11:44:11.0615471Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0616156Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0616421Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0616540Z 		21 |           ports:
2024-04-25T11:44:11.0616729Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0616909Z 		23 |           resources:
2024-04-25T11:44:11.0617032Z 		24 |             limits:
2024-04-25T11:44:11.0617160Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0617397Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0617516Z 		27 |           env:
2024-04-25T11:44:11.0617737Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0617868Z 		29 |               value: "debug"
2024-04-25T11:44:11.0618052Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0618334Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0618545Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0618750Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0618954Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0619112Z 
2024-04-25T11:44:11.0619341Z Check: CKV_K8S_9: "Readiness Probe Should be Configured"
2024-04-25T11:44:11.0619628Z 	FAILED for resource: Deployment.default.fixmycar-backend
2024-04-25T11:44:11.0620206Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.0620892Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-8
2024-04-25T11:44:11.0620904Z 
2024-04-25T11:44:11.0621093Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0621218Z 		2  | kind: Deployment
2024-04-25T11:44:11.0621337Z 		3  | metadata:
2024-04-25T11:44:11.0621626Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.0621812Z 		5  |   labels:
2024-04-25T11:44:11.0622001Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.0622153Z 		7  | spec:
2024-04-25T11:44:11.0622275Z 		8  |   replicas: 1
2024-04-25T11:44:11.0622395Z 		9  |   selector:
2024-04-25T11:44:11.0622562Z 		10 |     matchLabels:
2024-04-25T11:44:11.0622802Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.0622939Z 		12 |   template:
2024-04-25T11:44:11.0623093Z 		13 |     metadata:
2024-04-25T11:44:11.0623213Z 		14 |       labels:
2024-04-25T11:44:11.0623392Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.0623543Z 		16 |     spec:
2024-04-25T11:44:11.0623747Z 		17 |       containers:
2024-04-25T11:44:11.0623928Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.0624598Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.0624747Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0624867Z 		21 |           ports:
2024-04-25T11:44:11.0625105Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.0625299Z 		23 |           resources:
2024-04-25T11:44:11.0625420Z 		24 |             limits:
2024-04-25T11:44:11.0625582Z 		25 |               cpu: "1"
2024-04-25T11:44:11.0625787Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.0625963Z 		27 |           env:
2024-04-25T11:44:11.0626134Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.0626335Z 		29 |               value: "debug"
2024-04-25T11:44:11.0626559Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.0626736Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.0626946Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.0627201Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.0627359Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.0627364Z 
2024-04-25T11:44:11.0627669Z Check: CKV_K8S_21: "The default namespace should not be used"
2024-04-25T11:44:11.0627980Z 	FAILED for resource: Service.default.fixmycar-frontend
2024-04-25T11:44:11.0628442Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-service.yaml:1-13
2024-04-25T11:44:11.0629183Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-20
2024-04-25T11:44:11.0629193Z 
2024-04-25T11:44:11.0629320Z 		1  | apiVersion: v1
2024-04-25T11:44:11.0629443Z 		2  | kind: Service
2024-04-25T11:44:11.0629661Z 		3  | metadata:
2024-04-25T11:44:11.0629834Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0629952Z 		5  | spec:
2024-04-25T11:44:11.0630130Z 		6  |   type: ClusterIP
2024-04-25T11:44:11.0630250Z 		7  |   selector:
2024-04-25T11:44:11.0630423Z 		8  |     app: fixmycar-frontend
2024-04-25T11:44:11.0630645Z 		9  |   ports:
2024-04-25T11:44:11.0630844Z 		10 |     - name: fixmycar-frontend-port
2024-04-25T11:44:11.0630973Z 		11 |       protocol: TCP
2024-04-25T11:44:11.0631225Z 		12 |       port: 80
2024-04-25T11:44:11.0631356Z 		13 |       targetPort: 8501
2024-04-25T11:44:11.0631362Z 
2024-04-25T11:44:11.0631717Z Check: CKV_K8S_22: "Use read-only filesystem for containers where possible"
2024-04-25T11:44:11.0632107Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0632708Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0633456Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-21
2024-04-25T11:44:11.0633462Z 
2024-04-25T11:44:11.0633593Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0633721Z 		2  | kind: Deployment
2024-04-25T11:44:11.0633952Z 		3  | metadata:
2024-04-25T11:44:11.0634126Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0634265Z 		5  |   labels:
2024-04-25T11:44:11.0634471Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0634589Z 		7  | spec:
2024-04-25T11:44:11.0634711Z 		8  |   replicas: 1
2024-04-25T11:44:11.0634936Z 		9  |   selector:
2024-04-25T11:44:11.0635063Z 		10 |     matchLabels:
2024-04-25T11:44:11.0635257Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0635412Z 		12 |   template:
2024-04-25T11:44:11.0635532Z 		13 |     metadata:
2024-04-25T11:44:11.0635648Z 		14 |       labels:
2024-04-25T11:44:11.0635927Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0636066Z 		16 |     spec:
2024-04-25T11:44:11.0636267Z 		17 |       containers:
2024-04-25T11:44:11.0636499Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0636978Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.0637165Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0637360Z 		21 |           env:
2024-04-25T11:44:11.0637690Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0638105Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0638227Z 		24 |           ports:
2024-04-25T11:44:11.0638410Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0638601Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0638807Z 		27 |             httpGet:
2024-04-25T11:44:11.0638959Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0639125Z 		29 |               port: 8501
2024-04-25T11:44:11.0639263Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0639401Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0639588Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0639775Z 		33 |             httpGet:
2024-04-25T11:44:11.0639924Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0640088Z 		35 |               port: 8501
2024-04-25T11:44:11.0640219Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0640360Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0640538Z 		38 |           resources:
2024-04-25T11:44:11.0640720Z 		39 |             limits:
2024-04-25T11:44:11.0640936Z 		40 |               cpu: 1
2024-04-25T11:44:11.0641101Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0641225Z 		42 |             requests:
2024-04-25T11:44:11.0641404Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0641536Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0641542Z 
2024-04-25T11:44:11.0641846Z Check: CKV_K8S_21: "The default namespace should not be used"
2024-04-25T11:44:11.0642195Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0642688Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0643398Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-20
2024-04-25T11:44:11.0643403Z 
2024-04-25T11:44:11.0643594Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0643727Z 		2  | kind: Deployment
2024-04-25T11:44:11.0643914Z 		3  | metadata:
2024-04-25T11:44:11.0644126Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0644243Z 		5  |   labels:
2024-04-25T11:44:11.0644473Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0644590Z 		7  | spec:
2024-04-25T11:44:11.0644717Z 		8  |   replicas: 1
2024-04-25T11:44:11.0644936Z 		9  |   selector:
2024-04-25T11:44:11.0645067Z 		10 |     matchLabels:
2024-04-25T11:44:11.0645244Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0645416Z 		12 |   template:
2024-04-25T11:44:11.0645660Z 		13 |     metadata:
2024-04-25T11:44:11.0645849Z 		14 |       labels:
2024-04-25T11:44:11.0646138Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0646258Z 		16 |     spec:
2024-04-25T11:44:11.0646404Z 		17 |       containers:
2024-04-25T11:44:11.0646631Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0647122Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.0647279Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0647498Z 		21 |           env:
2024-04-25T11:44:11.0647694Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0648071Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0648230Z 		24 |           ports:
2024-04-25T11:44:11.0648413Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0648545Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0648780Z 		27 |             httpGet:
2024-04-25T11:44:11.0648952Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0649114Z 		29 |               port: 8501
2024-04-25T11:44:11.0649243Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0649379Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0649607Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0649745Z 		33 |             httpGet:
2024-04-25T11:44:11.0649894Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0650179Z 		35 |               port: 8501
2024-04-25T11:44:11.0650306Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0650486Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0650732Z 		38 |           resources:
2024-04-25T11:44:11.0650853Z 		39 |             limits:
2024-04-25T11:44:11.0650973Z 		40 |               cpu: 1
2024-04-25T11:44:11.0651133Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0651257Z 		42 |             requests:
2024-04-25T11:44:11.0651384Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0651635Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0651642Z 
2024-04-25T11:44:11.0651988Z Check: CKV_K8S_37: "Minimize the admission of containers with capabilities assigned"
2024-04-25T11:44:11.0652286Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0652796Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0653486Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-34
2024-04-25T11:44:11.0653496Z 
2024-04-25T11:44:11.0653680Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0653878Z 		2  | kind: Deployment
2024-04-25T11:44:11.0653995Z 		3  | metadata:
2024-04-25T11:44:11.0654208Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0654324Z 		5  |   labels:
2024-04-25T11:44:11.0654496Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0654664Z 		7  | spec:
2024-04-25T11:44:11.0654855Z 		8  |   replicas: 1
2024-04-25T11:44:11.0654973Z 		9  |   selector:
2024-04-25T11:44:11.0655134Z 		10 |     matchLabels:
2024-04-25T11:44:11.0655307Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0655468Z 		12 |   template:
2024-04-25T11:44:11.0655645Z 		13 |     metadata:
2024-04-25T11:44:11.0656777Z 		14 |       labels:
2024-04-25T11:44:11.0657021Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0657176Z 		16 |     spec:
2024-04-25T11:44:11.0657303Z 		17 |       containers:
2024-04-25T11:44:11.0657518Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0658055Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.0658291Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0658447Z 		21 |           env:
2024-04-25T11:44:11.0658627Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0659010Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0659184Z 		24 |           ports:
2024-04-25T11:44:11.0659540Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0659751Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0659912Z 		27 |             httpGet:
2024-04-25T11:44:11.0660084Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0660214Z 		29 |               port: 8501
2024-04-25T11:44:11.0660385Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0660522Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0660726Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0660885Z 		33 |             httpGet:
2024-04-25T11:44:11.0661049Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0661219Z 		35 |               port: 8501
2024-04-25T11:44:11.0661382Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0661522Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0661742Z 		38 |           resources:
2024-04-25T11:44:11.0661879Z 		39 |             limits:
2024-04-25T11:44:11.0662001Z 		40 |               cpu: 1
2024-04-25T11:44:11.0662166Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0662294Z 		42 |             requests:
2024-04-25T11:44:11.0662418Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0662646Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0662653Z 
2024-04-25T11:44:11.0662997Z Check: CKV_K8S_40: "Containers should run as a high UID to avoid host conflict"
2024-04-25T11:44:11.0663300Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0663971Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0664673Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-37
2024-04-25T11:44:11.0664679Z 
2024-04-25T11:44:11.0664939Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0665067Z 		2  | kind: Deployment
2024-04-25T11:44:11.0665186Z 		3  | metadata:
2024-04-25T11:44:11.0665398Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0665514Z 		5  |   labels:
2024-04-25T11:44:11.0665690Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0665922Z 		7  | spec:
2024-04-25T11:44:11.0666046Z 		8  |   replicas: 1
2024-04-25T11:44:11.0666209Z 		9  |   selector:
2024-04-25T11:44:11.0666370Z 		10 |     matchLabels:
2024-04-25T11:44:11.0666547Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0666666Z 		12 |   template:
2024-04-25T11:44:11.0666897Z 		13 |     metadata:
2024-04-25T11:44:11.0667014Z 		14 |       labels:
2024-04-25T11:44:11.0667199Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0667351Z 		16 |     spec:
2024-04-25T11:44:11.0667476Z 		17 |       containers:
2024-04-25T11:44:11.0667662Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0668261Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.0668414Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0668533Z 		21 |           env:
2024-04-25T11:44:11.0668744Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0669116Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0669254Z 		24 |           ports:
2024-04-25T11:44:11.0669537Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0669669Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0669829Z 		27 |             httpGet:
2024-04-25T11:44:11.0669979Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0670111Z 		29 |               port: 8501
2024-04-25T11:44:11.0670292Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0670485Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0670619Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0670817Z 		33 |             httpGet:
2024-04-25T11:44:11.0670963Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0671106Z 		35 |               port: 8501
2024-04-25T11:44:11.0671268Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0671459Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0671582Z 		38 |           resources:
2024-04-25T11:44:11.0671862Z 		39 |             limits:
2024-04-25T11:44:11.0672004Z 		40 |               cpu: 1
2024-04-25T11:44:11.0672130Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0672289Z 		42 |             requests:
2024-04-25T11:44:11.0672483Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0672618Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0672624Z 
2024-04-25T11:44:11.0672963Z Check: CKV_K8S_29: "Apply security context to your pods and containers"
2024-04-25T11:44:11.0673264Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0673782Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0674796Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-securitycontext-is-applied-to-pods-and-containers
2024-04-25T11:44:11.0674802Z 
2024-04-25T11:44:11.0675000Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0675166Z 		2  | kind: Deployment
2024-04-25T11:44:11.0675301Z 		3  | metadata:
2024-04-25T11:44:11.0675473Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0675625Z 		5  |   labels:
2024-04-25T11:44:11.0675795Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0676020Z 		7  | spec:
2024-04-25T11:44:11.0676193Z 		8  |   replicas: 1
2024-04-25T11:44:11.0676312Z 		9  |   selector:
2024-04-25T11:44:11.0676436Z 		10 |     matchLabels:
2024-04-25T11:44:11.0676778Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0676900Z 		12 |   template:
2024-04-25T11:44:11.0677088Z 		13 |     metadata:
2024-04-25T11:44:11.0677260Z 		14 |       labels:
2024-04-25T11:44:11.0677437Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0677589Z 		16 |     spec:
2024-04-25T11:44:11.0677720Z 		17 |       containers:
2024-04-25T11:44:11.0677908Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0678562Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.0678723Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0678842Z 		21 |           env:
2024-04-25T11:44:11.0679054Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0679424Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0679549Z 		24 |           ports:
2024-04-25T11:44:11.0679875Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0680011Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0680133Z 		27 |             httpGet:
2024-04-25T11:44:11.0680317Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0680443Z 		29 |               port: 8501
2024-04-25T11:44:11.0680624Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0680856Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0680987Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0681109Z 		33 |             httpGet:
2024-04-25T11:44:11.0681291Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0681419Z 		35 |               port: 8501
2024-04-25T11:44:11.0681660Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0681795Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0681917Z 		38 |           resources:
2024-04-25T11:44:11.0682074Z 		39 |             limits:
2024-04-25T11:44:11.0682192Z 		40 |               cpu: 1
2024-04-25T11:44:11.0682340Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0682560Z 		42 |             requests:
2024-04-25T11:44:11.0682690Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0682822Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0682828Z 
2024-04-25T11:44:11.0683111Z Check: CKV_K8S_30: "Apply security context to your containers"
2024-04-25T11:44:11.0683408Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0683903Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0684822Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-28
2024-04-25T11:44:11.0684831Z 
2024-04-25T11:44:11.0684974Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0685135Z 		2  | kind: Deployment
2024-04-25T11:44:11.0685274Z 		3  | metadata:
2024-04-25T11:44:11.0685491Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0685639Z 		5  |   labels:
2024-04-25T11:44:11.0685884Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0686002Z 		7  | spec:
2024-04-25T11:44:11.0686164Z 		8  |   replicas: 1
2024-04-25T11:44:11.0686301Z 		9  |   selector:
2024-04-25T11:44:11.0686425Z 		10 |     matchLabels:
2024-04-25T11:44:11.0686636Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0686817Z 		12 |   template:
2024-04-25T11:44:11.0686938Z 		13 |     metadata:
2024-04-25T11:44:11.0687108Z 		14 |       labels:
2024-04-25T11:44:11.0687289Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0687408Z 		16 |     spec:
2024-04-25T11:44:11.0687566Z 		17 |       containers:
2024-04-25T11:44:11.0687812Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0688309Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.0688509Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0688628Z 		21 |           env:
2024-04-25T11:44:11.0688802Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0689215Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0689542Z 		24 |           ports:
2024-04-25T11:44:11.0689788Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0689921Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0690086Z 		27 |             httpGet:
2024-04-25T11:44:11.0690269Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0690397Z 		29 |               port: 8501
2024-04-25T11:44:11.0690589Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0690776Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0690907Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0691034Z 		33 |             httpGet:
2024-04-25T11:44:11.0691215Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0691341Z 		35 |               port: 8501
2024-04-25T11:44:11.0691544Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0691715Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0691840Z 		38 |           resources:
2024-04-25T11:44:11.0691962Z 		39 |             limits:
2024-04-25T11:44:11.0692118Z 		40 |               cpu: 1
2024-04-25T11:44:11.0692245Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0692448Z 		42 |             requests:
2024-04-25T11:44:11.0692608Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0692736Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0692742Z 
2024-04-25T11:44:11.0692948Z Check: CKV_K8S_43: "Image should use digest"
2024-04-25T11:44:11.0693244Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0693744Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0694545Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-39
2024-04-25T11:44:11.0694552Z 
2024-04-25T11:44:11.0694685Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0694851Z 		2  | kind: Deployment
2024-04-25T11:44:11.0695003Z 		3  | metadata:
2024-04-25T11:44:11.0695175Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0695313Z 		5  |   labels:
2024-04-25T11:44:11.0695580Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0695695Z 		7  | spec:
2024-04-25T11:44:11.0695941Z 		8  |   replicas: 1
2024-04-25T11:44:11.0696097Z 		9  |   selector:
2024-04-25T11:44:11.0696238Z 		10 |     matchLabels:
2024-04-25T11:44:11.0696415Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0696640Z 		12 |   template:
2024-04-25T11:44:11.0696762Z 		13 |     metadata:
2024-04-25T11:44:11.0696915Z 		14 |       labels:
2024-04-25T11:44:11.0697093Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0697379Z 		16 |     spec:
2024-04-25T11:44:11.0697605Z 		17 |       containers:
2024-04-25T11:44:11.0697797Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0698282Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.0698489Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0698606Z 		21 |           env:
2024-04-25T11:44:11.0698785Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0699255Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0699377Z 		24 |           ports:
2024-04-25T11:44:11.0699604Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0699790Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0699911Z 		27 |             httpGet:
2024-04-25T11:44:11.0700058Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0700284Z 		29 |               port: 8501
2024-04-25T11:44:11.0700414Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0700553Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0700740Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0700860Z 		33 |             httpGet:
2024-04-25T11:44:11.0701040Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0701231Z 		35 |               port: 8501
2024-04-25T11:44:11.0701362Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0701548Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0701845Z 		38 |           resources:
2024-04-25T11:44:11.0701964Z 		39 |             limits:
2024-04-25T11:44:11.0702117Z 		40 |               cpu: 1
2024-04-25T11:44:11.0702312Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0702454Z 		42 |             requests:
2024-04-25T11:44:11.0702613Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0702741Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0702747Z 
2024-04-25T11:44:11.0703145Z Check: CKV_K8S_31: "Ensure that the seccomp profile is set to docker/default or runtime/default"
2024-04-25T11:44:11.0703480Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0704063Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0704809Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-29
2024-04-25T11:44:11.0704815Z 
2024-04-25T11:44:11.0704946Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0705078Z 		2  | kind: Deployment
2024-04-25T11:44:11.0705228Z 		3  | metadata:
2024-04-25T11:44:11.0705399Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0705589Z 		5  |   labels:
2024-04-25T11:44:11.0705801Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0705920Z 		7  | spec:
2024-04-25T11:44:11.0706040Z 		8  |   replicas: 1
2024-04-25T11:44:11.0706191Z 		9  |   selector:
2024-04-25T11:44:11.0706312Z 		10 |     matchLabels:
2024-04-25T11:44:11.0706558Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0706714Z 		12 |   template:
2024-04-25T11:44:11.0706835Z 		13 |     metadata:
2024-04-25T11:44:11.0706954Z 		14 |       labels:
2024-04-25T11:44:11.0707166Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0707298Z 		16 |     spec:
2024-04-25T11:44:11.0707484Z 		17 |       containers:
2024-04-25T11:44:11.0707707Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0708189Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.0708340Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0708495Z 		21 |           env:
2024-04-25T11:44:11.0708687Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0709196Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0709318Z 		24 |           ports:
2024-04-25T11:44:11.0709500Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0709666Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0709805Z 		27 |             httpGet:
2024-04-25T11:44:11.0710076Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0710311Z 		29 |               port: 8501
2024-04-25T11:44:11.0710443Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0710579Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0710765Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0710885Z 		33 |             httpGet:
2024-04-25T11:44:11.0711033Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0711261Z 		35 |               port: 8501
2024-04-25T11:44:11.0711388Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0711523Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0711697Z 		38 |           resources:
2024-04-25T11:44:11.0711816Z 		39 |             limits:
2024-04-25T11:44:11.0711936Z 		40 |               cpu: 1
2024-04-25T11:44:11.0712162Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0712285Z 		42 |             requests:
2024-04-25T11:44:11.0712410Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0712603Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0712609Z 
2024-04-25T11:44:11.0712996Z Check: CKV_K8S_28: "Minimize the admission of containers with the NET_RAW capability"
2024-04-25T11:44:11.0713396Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0713878Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0714574Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-27
2024-04-25T11:44:11.0714720Z 
2024-04-25T11:44:11.0714893Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0715018Z 		2  | kind: Deployment
2024-04-25T11:44:11.0715135Z 		3  | metadata:
2024-04-25T11:44:11.0715416Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0715533Z 		5  |   labels:
2024-04-25T11:44:11.0715723Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0715874Z 		7  | spec:
2024-04-25T11:44:11.0715996Z 		8  |   replicas: 1
2024-04-25T11:44:11.0716149Z 		9  |   selector:
2024-04-25T11:44:11.0716339Z 		10 |     matchLabels:
2024-04-25T11:44:11.0716533Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0716687Z 		12 |   template:
2024-04-25T11:44:11.0716804Z 		13 |     metadata:
2024-04-25T11:44:11.0716919Z 		14 |       labels:
2024-04-25T11:44:11.0717130Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0717307Z 		16 |     spec:
2024-04-25T11:44:11.0717448Z 		17 |       containers:
2024-04-25T11:44:11.0717671Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0718149Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.0718336Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0718493Z 		21 |           env:
2024-04-25T11:44:11.0718754Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0719127Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0719284Z 		24 |           ports:
2024-04-25T11:44:11.0719469Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0719599Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0719757Z 		27 |             httpGet:
2024-04-25T11:44:11.0719983Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0720110Z 		29 |               port: 8501
2024-04-25T11:44:11.0720274Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0720408Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0720578Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0720717Z 		33 |             httpGet:
2024-04-25T11:44:11.0720923Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0721083Z 		35 |               port: 8501
2024-04-25T11:44:11.0721210Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0721343Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0721500Z 		38 |           resources:
2024-04-25T11:44:11.0721637Z 		39 |             limits:
2024-04-25T11:44:11.0721821Z 		40 |               cpu: 1
2024-04-25T11:44:11.0721985Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0722276Z 		42 |             requests:
2024-04-25T11:44:11.0722404Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0722586Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0722593Z 
2024-04-25T11:44:11.0722924Z Check: CKV_K8S_14: "Image Tag should be fixed - not latest or blank"
2024-04-25T11:44:11.0723283Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0723796Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0724484Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-13
2024-04-25T11:44:11.0724490Z 
2024-04-25T11:44:11.0724678Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0724803Z 		2  | kind: Deployment
2024-04-25T11:44:11.0724923Z 		3  | metadata:
2024-04-25T11:44:11.0725189Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0725309Z 		5  |   labels:
2024-04-25T11:44:11.0725484Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0725651Z 		7  | spec:
2024-04-25T11:44:11.0725773Z 		8  |   replicas: 1
2024-04-25T11:44:11.0725891Z 		9  |   selector:
2024-04-25T11:44:11.0726110Z 		10 |     matchLabels:
2024-04-25T11:44:11.0726283Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0726400Z 		12 |   template:
2024-04-25T11:44:11.0726571Z 		13 |     metadata:
2024-04-25T11:44:11.0726687Z 		14 |       labels:
2024-04-25T11:44:11.0726991Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0727215Z 		16 |     spec:
2024-04-25T11:44:11.0727404Z 		17 |       containers:
2024-04-25T11:44:11.0727590Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0728101Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.0728247Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0728461Z 		21 |           env:
2024-04-25T11:44:11.0728639Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0729028Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0729185Z 		24 |           ports:
2024-04-25T11:44:11.0729364Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0729495Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0729714Z 		27 |             httpGet:
2024-04-25T11:44:11.0729878Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0730004Z 		29 |               port: 8501
2024-04-25T11:44:11.0730170Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0730306Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0730438Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0730653Z 		33 |             httpGet:
2024-04-25T11:44:11.0730816Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0730943Z 		35 |               port: 8501
2024-04-25T11:44:11.0731105Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0731239Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0731363Z 		38 |           resources:
2024-04-25T11:44:11.0731602Z 		39 |             limits:
2024-04-25T11:44:11.0731765Z 		40 |               cpu: 1
2024-04-25T11:44:11.0731924Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0732048Z 		42 |             requests:
2024-04-25T11:44:11.0732172Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0732333Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0732339Z 
2024-04-25T11:44:11.0732732Z Check: CKV_K8S_20: "Containers should not run with allowPrivilegeEscalation"
2024-04-25T11:44:11.0733031Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0733547Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0734235Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-19
2024-04-25T11:44:11.0734240Z 
2024-04-25T11:44:11.0734371Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0734549Z 		2  | kind: Deployment
2024-04-25T11:44:11.0734850Z 		3  | metadata:
2024-04-25T11:44:11.0735063Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0735181Z 		5  |   labels:
2024-04-25T11:44:11.0735351Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0735518Z 		7  | spec:
2024-04-25T11:44:11.0735648Z 		8  |   replicas: 1
2024-04-25T11:44:11.0736278Z 		9  |   selector:
2024-04-25T11:44:11.0736456Z 		10 |     matchLabels:
2024-04-25T11:44:11.0736645Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0736771Z 		12 |   template:
2024-04-25T11:44:11.0736940Z 		13 |     metadata:
2024-04-25T11:44:11.0737055Z 		14 |       labels:
2024-04-25T11:44:11.0737351Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0737506Z 		16 |     spec:
2024-04-25T11:44:11.0737632Z 		17 |       containers:
2024-04-25T11:44:11.0737819Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0738356Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.0738505Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0738693Z 		21 |           env:
2024-04-25T11:44:11.0738904Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0739277Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0739419Z 		24 |           ports:
2024-04-25T11:44:11.0739637Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0739767Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0740131Z 		27 |             httpGet:
2024-04-25T11:44:11.0740318Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0740468Z 		29 |               port: 8501
2024-04-25T11:44:11.0740636Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0740771Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0740905Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0741131Z 		33 |             httpGet:
2024-04-25T11:44:11.0741293Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0741419Z 		35 |               port: 8501
2024-04-25T11:44:11.0741585Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0741759Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0741881Z 		38 |           resources:
2024-04-25T11:44:11.0742100Z 		39 |             limits:
2024-04-25T11:44:11.0742237Z 		40 |               cpu: 1
2024-04-25T11:44:11.0742363Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0742524Z 		42 |             requests:
2024-04-25T11:44:11.0742649Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0742782Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0742788Z 
2024-04-25T11:44:11.0743145Z Check: CKV_K8S_23: "Minimize the admission of root containers"
2024-04-25T11:44:11.0743442Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0743962Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0744656Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-22
2024-04-25T11:44:11.0744666Z 
2024-04-25T11:44:11.0744797Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0745019Z 		2  | kind: Deployment
2024-04-25T11:44:11.0745156Z 		3  | metadata:
2024-04-25T11:44:11.0745331Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0745481Z 		5  |   labels:
2024-04-25T11:44:11.0745653Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0745768Z 		7  | spec:
2024-04-25T11:44:11.0746007Z 		8  |   replicas: 1
2024-04-25T11:44:11.0746130Z 		9  |   selector:
2024-04-25T11:44:11.0746256Z 		10 |     matchLabels:
2024-04-25T11:44:11.0746464Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0746581Z 		12 |   template:
2024-04-25T11:44:11.0746732Z 		13 |     metadata:
2024-04-25T11:44:11.0746965Z 		14 |       labels:
2024-04-25T11:44:11.0747150Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0747267Z 		16 |     spec:
2024-04-25T11:44:11.0747428Z 		17 |       containers:
2024-04-25T11:44:11.0747615Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0748288Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.0748512Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.0748632Z 		21 |           env:
2024-04-25T11:44:11.0748851Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.0749226Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.0749347Z 		24 |           ports:
2024-04-25T11:44:11.0749585Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.0749782Z 		26 |           livenessProbe:
2024-04-25T11:44:11.0749906Z 		27 |             httpGet:
2024-04-25T11:44:11.0750093Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.0750217Z 		29 |               port: 8501
2024-04-25T11:44:11.0750366Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.0750537Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.0750744Z 		32 |           readinessProbe:
2024-04-25T11:44:11.0750867Z 		33 |             httpGet:
2024-04-25T11:44:11.0751052Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.0751216Z 		35 |               port: 8501
2024-04-25T11:44:11.0751359Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.0751528Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.0751705Z 		38 |           resources:
2024-04-25T11:44:11.0751859Z 		39 |             limits:
2024-04-25T11:44:11.0751981Z 		40 |               cpu: 1
2024-04-25T11:44:11.0752248Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.0752409Z 		42 |             requests:
2024-04-25T11:44:11.0752536Z 		43 |               cpu: 100m
2024-04-25T11:44:11.0752730Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.0752737Z 
2024-04-25T11:44:11.0753131Z Check: CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"
2024-04-25T11:44:11.0753447Z 	FAILED for resource: Deployment.default.fixmycar-frontend
2024-04-25T11:44:11.0753926Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.0754662Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-35
2024-04-25T11:44:11.0754669Z 
2024-04-25T11:44:11.0754800Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.0755036Z 		2  | kind: Deployment
2024-04-25T11:44:11.0755172Z 		3  | metadata:
2024-04-25T11:44:11.0755342Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.0755496Z 		5  |   labels:
2024-04-25T11:44:11.0755668Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.0755877Z 		7  | spec:
2024-04-25T11:44:11.0756116Z 		8  |   replicas: 1
2024-04-25T11:44:11.0756272Z 		9  |   selector:
2024-04-25T11:44:11.0756395Z 		10 |     matchLabels:
2024-04-25T11:44:11.0756608Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.0756729Z 		12 |   template:
2024-04-25T11:44:11.0756850Z 		13 |     metadata:
2024-04-25T11:44:11.0757073Z 		14 |       labels:
2024-04-25T11:44:11.0757253Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.0757369Z 		16 |     spec:
2024-04-25T11:44:11.0757530Z 		17 |       containers:
2024-04-25T11:44:11.0757712Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.0758195Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.1000919Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.1001051Z 		21 |           env:
2024-04-25T11:44:11.1001525Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.1002078Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.1002236Z 		24 |           ports:
2024-04-25T11:44:11.1002488Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.1002634Z 		26 |           livenessProbe:
2024-04-25T11:44:11.1002768Z 		27 |             httpGet:
2024-04-25T11:44:11.1002950Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.1003107Z 		29 |               port: 8501
2024-04-25T11:44:11.1003253Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.1004022Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.1004200Z 		32 |           readinessProbe:
2024-04-25T11:44:11.1004342Z 		33 |             httpGet:
2024-04-25T11:44:11.1004537Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.1004687Z 		35 |               port: 8501
2024-04-25T11:44:11.1004839Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.1005011Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.1005177Z 		38 |           resources:
2024-04-25T11:44:11.1005320Z 		39 |             limits:
2024-04-25T11:44:11.1005471Z 		40 |               cpu: 1
2024-04-25T11:44:11.1005623Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.1005769Z 		42 |             requests:
2024-04-25T11:44:11.1005914Z 		43 |               cpu: 100m
2024-04-25T11:44:11.1006063Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.1006073Z 
2024-04-25T11:44:11.1006590Z Check: CKV2_K8S_6: "Minimize the admission of pods which lack an associated NetworkPolicy"
2024-04-25T11:44:11.1007173Z 	FAILED for resource: Pod.default.fixmycar-backend.app-fixmycar-backend
2024-04-25T11:44:11.1007786Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/backend-deployment.yaml:1-59
2024-04-25T11:44:11.1007794Z 
2024-04-25T11:44:11.1008301Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.1008878Z Check: CKV2_K8S_6: "Minimize the admission of pods which lack an associated NetworkPolicy"
2024-04-25T11:44:11.1009894Z 	FAILED for resource: Pod.default.fixmycar-frontend.app-fixmycar-frontend
2024-04-25T11:44:11.1010534Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.1010545Z 
2024-04-25T11:44:11.1010710Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.1010876Z 		2  | kind: Deployment
2024-04-25T11:44:11.1011019Z 		3  | metadata:
2024-04-25T11:44:11.1011309Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.1011477Z 		5  |   labels:
2024-04-25T11:44:11.1011716Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.1011844Z 		7  | spec:
2024-04-25T11:44:11.1011992Z 		8  |   replicas: 1
2024-04-25T11:44:11.1012120Z 		9  |   selector:
2024-04-25T11:44:11.1012273Z 		10 |     matchLabels:
2024-04-25T11:44:11.1012550Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.1012719Z 		12 |   template:
2024-04-25T11:44:11.1012859Z 		13 |     metadata:
2024-04-25T11:44:11.1012996Z 		14 |       labels:
2024-04-25T11:44:11.1013237Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.1013373Z 		16 |     spec:
2024-04-25T11:44:11.1013533Z 		17 |       containers:
2024-04-25T11:44:11.1013769Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.1014362Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-cloud-sql:latest
2024-04-25T11:44:11.1014557Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.1014709Z 		21 |           env:
2024-04-25T11:44:11.1014970Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.1015503Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.1015664Z 		24 |           ports:
2024-04-25T11:44:11.1016183Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.1016352Z 		26 |           livenessProbe:
2024-04-25T11:44:11.1016496Z 		27 |             httpGet:
2024-04-25T11:44:11.1016709Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.1016876Z 		29 |               port: 8501
2024-04-25T11:44:11.1017057Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.1017239Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.1017420Z 		32 |           readinessProbe:
2024-04-25T11:44:11.1017583Z 		33 |             httpGet:
2024-04-25T11:44:11.1017791Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.1017956Z 		35 |               port: 8501
2024-04-25T11:44:11.1018129Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.1018326Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.1018493Z 		38 |           resources:
2024-04-25T11:44:11.1018934Z 		39 |             limits:
2024-04-25T11:44:11.1019142Z 		40 |               cpu: 1
2024-04-25T11:44:11.1019310Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.1019476Z 		42 |             requests:
2024-04-25T11:44:11.1019634Z 		43 |               cpu: 100m
2024-04-25T11:44:11.1019816Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.1019826Z 
2024-04-25T11:44:11.1020416Z Check: CKV2_K8S_6: "Minimize the admission of pods which lack an associated NetworkPolicy"
2024-04-25T11:44:11.1021060Z 	FAILED for resource: Pod.default.fixmycar-backend.app-fixmycar-backend
2024-04-25T11:44:11.1021849Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/backend-deployment.yaml:1-34
2024-04-25T11:44:11.1021861Z 
2024-04-25T11:44:11.1022055Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.1022216Z 		2  | kind: Deployment
2024-04-25T11:44:11.1022360Z 		3  | metadata:
2024-04-25T11:44:11.1022648Z 		4  |   name: fixmycar-backend
2024-04-25T11:44:11.1022797Z 		5  |   labels:
2024-04-25T11:44:11.1023033Z 		6  |     app: fixmycar-backend
2024-04-25T11:44:11.1023199Z 		7  | spec:
2024-04-25T11:44:11.1023357Z 		8  |   replicas: 1
2024-04-25T11:44:11.1023509Z 		9  |   selector:
2024-04-25T11:44:11.1023684Z 		10 |     matchLabels:
2024-04-25T11:44:11.1023942Z 		11 |       app: fixmycar-backend
2024-04-25T11:44:11.1024113Z 		12 |   template:
2024-04-25T11:44:11.1024263Z 		13 |     metadata:
2024-04-25T11:44:11.1024420Z 		14 |       labels:
2024-04-25T11:44:11.1024968Z 		15 |         app: fixmycar-backend
2024-04-25T11:44:11.1025111Z 		16 |     spec:
2024-04-25T11:44:11.1025265Z 		17 |       containers:
2024-04-25T11:44:11.1025531Z 		18 |         - name: fixmycar-backend
2024-04-25T11:44:11.1026251Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/backend-vertex-ai-search:latest
2024-04-25T11:44:11.1026455Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.1026624Z 		21 |           ports:
2024-04-25T11:44:11.1026889Z 		22 |             - containerPort: 3100
2024-04-25T11:44:11.1027055Z 		23 |           resources:
2024-04-25T11:44:11.1027231Z 		24 |             limits:
2024-04-25T11:44:11.1027386Z 		25 |               cpu: "1"
2024-04-25T11:44:11.1027548Z 		26 |               memory: "2Gi"
2024-04-25T11:44:11.1027706Z 		27 |           env:
2024-04-25T11:44:11.1027941Z 		28 |             - name: LOG_LEVEL
2024-04-25T11:44:11.1028111Z 		29 |               value: "debug"
2024-04-25T11:44:11.1028397Z 		30 |             - name: GCP_PROJECT_ID
2024-04-25T11:44:11.1028657Z 		31 |               value: "PROJECT-ID"
2024-04-25T11:44:11.1028966Z 		32 |             - name: VERTEX_AI_DATASTORE_ID
2024-04-25T11:44:11.1029283Z 		33 |               value: "YOUR-DATASTORE-ID"
2024-04-25T11:44:11.1029503Z 		34 |       serviceAccountName: fixmycar
2024-04-25T11:44:11.1029512Z 
2024-04-25T11:44:11.1030067Z Check: CKV2_K8S_6: "Minimize the admission of pods which lack an associated NetworkPolicy"
2024-04-25T11:44:11.1030605Z 	FAILED for resource: Pod.default.fixmycar-frontend.app-fixmycar-frontend
2024-04-25T11:44:11.1031366Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/kubernetes/frontend-deployment.yaml:1-44
2024-04-25T11:44:11.1031376Z 
2024-04-25T11:44:11.1031564Z 		1  | apiVersion: apps/v1
2024-04-25T11:44:11.1031730Z 		2  | kind: Deployment
2024-04-25T11:44:11.1031885Z 		3  | metadata:
2024-04-25T11:44:11.1032154Z 		4  |   name: fixmycar-frontend
2024-04-25T11:44:11.1032308Z 		5  |   labels:
2024-04-25T11:44:11.1032551Z 		6  |     app: fixmycar-frontend
2024-04-25T11:44:11.1032701Z 		7  | spec:
2024-04-25T11:44:11.1032852Z 		8  |   replicas: 1
2024-04-25T11:44:11.1032995Z 		9  |   selector:
2024-04-25T11:44:11.1033161Z 		10 |     matchLabels:
2024-04-25T11:44:11.1033398Z 		11 |       app: fixmycar-frontend
2024-04-25T11:44:11.1033547Z 		12 |   template:
2024-04-25T11:44:11.1033686Z 		13 |     metadata:
2024-04-25T11:44:11.1033823Z 		14 |       labels:
2024-04-25T11:44:11.1034077Z 		15 |         app: fixmycar-frontend
2024-04-25T11:44:11.1034220Z 		16 |     spec:
2024-04-25T11:44:11.1034571Z 		17 |       containers:
2024-04-25T11:44:11.1034883Z 		18 |         - name: fixmycar-frontend
2024-04-25T11:44:11.1035650Z 		19 |           image: us-central1-docker.pkg.dev/PROJECT-ID/fixmycar/frontend-vertex-ai-search:latest
2024-04-25T11:44:11.1035856Z 		20 |           imagePullPolicy: Always
2024-04-25T11:44:11.1036020Z 		21 |           env:
2024-04-25T11:44:11.1036258Z 		22 |             - name: BACKEND_URL
2024-04-25T11:44:11.1036831Z 		23 |               value: "http://fixmycar-backend.default.svc.cluster.local:8080"
2024-04-25T11:44:11.1037004Z 		24 |           ports:
2024-04-25T11:44:11.1037254Z 		25 |             - containerPort: 8501
2024-04-25T11:44:11.1037431Z 		26 |           livenessProbe:
2024-04-25T11:44:11.1037608Z 		27 |             httpGet:
2024-04-25T11:44:11.1037803Z 		28 |               path: /_stcore/health
2024-04-25T11:44:11.1037967Z 		29 |               port: 8501
2024-04-25T11:44:11.1038149Z 		30 |               scheme: HTTP
2024-04-25T11:44:11.1038336Z 		31 |             timeoutSeconds: 1
2024-04-25T11:44:11.1038528Z 		32 |           readinessProbe:
2024-04-25T11:44:11.1038683Z 		33 |             httpGet:
2024-04-25T11:44:11.1038879Z 		34 |               path: /_stcore/health
2024-04-25T11:44:11.1039058Z 		35 |               port: 8501
2024-04-25T11:44:11.1039226Z 		36 |               scheme: HTTP
2024-04-25T11:44:11.1039397Z 		37 |             timeoutSeconds: 1
2024-04-25T11:44:11.1039563Z 		38 |           resources:
2024-04-25T11:44:11.1039920Z 		39 |             limits:
2024-04-25T11:44:11.1040069Z 		40 |               cpu: 1
2024-04-25T11:44:11.1040249Z 		41 |               memory: 2Gi
2024-04-25T11:44:11.1040407Z 		42 |             requests:
2024-04-25T11:44:11.1040576Z 		43 |               cpu: 100m
2024-04-25T11:44:11.1040762Z 		44 |               memory: 745Mi
2024-04-25T11:44:11.1040772Z 
2024-04-25T11:44:11.1040941Z dockerfile scan results:
2024-04-25T11:44:11.1040948Z 
2024-04-25T11:44:11.1041280Z Passed checks: 528, Failed checks: 20, Skipped checks: 0
2024-04-25T11:44:11.1041312Z 
2024-04-25T11:44:11.1041923Z Check: CKV_DOCKER_2: "Ensure that HEALTHCHECK instructions have been added to container images"
2024-04-25T11:44:11.1042465Z 	FAILED for resource: /language/sample-apps/chat-streamlit/Dockerfile.
2024-04-25T11:44:11.1042888Z 	File: /language/sample-apps/chat-streamlit/Dockerfile:1-10
2024-04-25T11:44:11.1044635Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-healthcheck-instructions-have-been-added-to-container-images
2024-04-25T11:44:11.1044657Z 
2024-04-25T11:44:11.1044817Z 		1  | FROM python:3.8
2024-04-25T11:44:11.1044971Z 		2  | 
2024-04-25T11:44:11.1045128Z 		3  | EXPOSE 8080
2024-04-25T11:44:11.1045289Z 		4  | WORKDIR /app
2024-04-25T11:44:11.1045446Z 		5  | 
2024-04-25T11:44:11.1045590Z 		6  | COPY . ./
2024-04-25T11:44:11.1045726Z 		7  | 
2024-04-25T11:44:11.1046131Z 		8  | RUN pip install --no-cache-dir -r requirements.txt
2024-04-25T11:44:11.1046273Z 		9  | 
2024-04-25T11:44:11.1046927Z 		10 | ENTRYPOINT ["streamlit", "run", "app.py", "--server.port=8080", "--server.address=0.0.0.0"]
2024-04-25T11:44:11.1046940Z 
2024-04-25T11:44:11.1047352Z Check: CKV_DOCKER_3: "Ensure that a user for the container has been created"
2024-04-25T11:44:11.1047840Z 	FAILED for resource: /language/sample-apps/chat-streamlit/Dockerfile.
2024-04-25T11:44:11.1048217Z 	File: /language/sample-apps/chat-streamlit/Dockerfile:1-10
2024-04-25T11:44:11.1049251Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-a-user-for-the-container-has-been-created
2024-04-25T11:44:11.1049258Z 
2024-04-25T11:44:11.1049359Z 		1  | FROM python:3.8
2024-04-25T11:44:11.1049450Z 		2  | 
2024-04-25T11:44:11.1049537Z 		3  | EXPOSE 8080
2024-04-25T11:44:11.1049628Z 		4  | WORKDIR /app
2024-04-25T11:44:11.1049722Z 		5  | 
2024-04-25T11:44:11.1049816Z 		6  | COPY . ./
2024-04-25T11:44:11.1049900Z 		7  | 
2024-04-25T11:44:11.1050390Z 		8  | RUN pip install --no-cache-dir -r requirements.txt
2024-04-25T11:44:11.1050480Z 		9  | 
2024-04-25T11:44:11.1050888Z 		10 | ENTRYPOINT ["streamlit", "run", "app.py", "--server.port=8080", "--server.address=0.0.0.0"]
2024-04-25T11:44:11.1050894Z 
2024-04-25T11:44:11.1051229Z Check: CKV_DOCKER_2: "Ensure that HEALTHCHECK instructions have been added to container images"
2024-04-25T11:44:11.1051614Z 	FAILED for resource: /gemini/sample-apps/fixmycar/vertex-ai-search/frontend/Dockerfile.
2024-04-25T11:44:11.1051954Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/frontend/Dockerfile:1-27
2024-04-25T11:44:11.1052903Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-healthcheck-instructions-have-been-added-to-container-images
2024-04-25T11:44:11.1052908Z 
2024-04-25T11:44:11.1053050Z 		1  | FROM python:3.8-slim
2024-04-25T11:44:11.1053131Z 		2  | 
2024-04-25T11:44:11.1053323Z 		3  | RUN groupadd --gid 1000 appuser \
2024-04-25T11:44:11.1053571Z 		4  |     && useradd --uid 1000 --gid 1000 -ms /bin/bash appuser
2024-04-25T11:44:11.1053654Z 		5  | 
2024-04-25T11:44:11.1053848Z 		6  | RUN pip3 install --no-cache-dir --upgrade \
2024-04-25T11:44:11.1053949Z 		7  |     pip \
2024-04-25T11:44:11.1054040Z 		8  |     virtualenv
2024-04-25T11:44:11.1054122Z 		9  | 
2024-04-25T11:44:11.1054322Z 		10 | RUN apt-get update && apt-get install -y \
2024-04-25T11:44:11.1054459Z 		11 |     build-essential \
2024-04-25T11:44:11.1054757Z 		12 |     software-properties-common \
2024-04-25T11:44:11.1054860Z 		13 |     git
2024-04-25T11:44:11.1054943Z 		14 | 
2024-04-25T11:44:11.1055036Z 		15 | USER appuser
2024-04-25T11:44:11.1055153Z 		16 | WORKDIR /home/appuser
2024-04-25T11:44:11.1055235Z 		17 | 
2024-04-25T11:44:11.1055322Z 		18 | COPY . . 
2024-04-25T11:44:11.1055419Z 		19 | 
2024-04-25T11:44:11.1055541Z 		20 | ENV VIRTUAL_ENV=/home/appuser/venv
2024-04-25T11:44:11.1055667Z 		21 | RUN virtualenv ${VIRTUAL_ENV}
2024-04-25T11:44:11.1056278Z 		22 | RUN . ${VIRTUAL_ENV}/bin/activate && pip install -r ./requirements.txt
2024-04-25T11:44:11.1056364Z 		23 | 
2024-04-25T11:44:11.1056453Z 		24 | EXPOSE 8501
2024-04-25T11:44:11.1056548Z 		25 | 
2024-04-25T11:44:11.1056655Z 		26 | COPY run.sh /home/appuser
2024-04-25T11:44:11.1056759Z 		27 | ENTRYPOINT ["./run.sh"]
2024-04-25T11:44:11.1057122Z Check: CKV_DOCKER_2: "Ensure that HEALTHCHECK instructions have been added to container images"
2024-04-25T11:44:11.1057475Z 	FAILED for resource: /language/tuning/distilling_step_by_step/prediction_container/Dockerfile.
2024-04-25T11:44:11.1057862Z 	File: /language/tuning/distilling_step_by_step/prediction_container/Dockerfile:1-34
2024-04-25T11:44:11.1058818Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-healthcheck-instructions-have-been-added-to-container-images
2024-04-25T11:44:11.1058824Z 
2024-04-25T11:44:11.1058936Z 		1  | # Copyright 2024 Google LLC
2024-04-25T11:44:11.1059029Z 		2  | #
2024-04-25T11:44:11.1059274Z 		3  | # Licensed under the Apache License, Version 2.0 (the "License");
2024-04-25T11:44:11.1059506Z 		4  | # you may not use this file except in compliance with the License.
2024-04-25T11:44:11.1059672Z 		5  | # You may obtain a copy of the License at
2024-04-25T11:44:11.1059760Z 		6  | #
2024-04-25T11:44:11.1059991Z 		7  | #     http://www.apache.org/licenses/LICENSE-2.0
2024-04-25T11:44:11.1060074Z 		8  | #
2024-04-25T11:44:11.1060326Z 		9  | # Unless required by applicable law or agreed to in writing, software
2024-04-25T11:44:11.1060598Z 		10 | # distributed under the License is distributed on an "AS IS" BASIS,
2024-04-25T11:44:11.1060873Z 		11 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
2024-04-25T11:44:11.1061126Z 		12 | # See the License for the specific language governing permissions and
2024-04-25T11:44:11.1061261Z 		13 | # limitations under the License.
2024-04-25T11:44:11.1061351Z 		14 | 
2024-04-25T11:44:11.1061575Z 		15 | FROM tiangolo/uvicorn-gunicorn-fastapi:python3.9
2024-04-25T11:44:11.1061866Z 		16 | 
2024-04-25T11:44:11.1062038Z 		17 | LABEL com.nvidia.volumes.needed=nvidia_driver
2024-04-25T11:44:11.1062122Z 		18 | 
2024-04-25T11:44:11.1062458Z 		19 | # ENV PATH=/opt/conda/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2024-04-25T11:44:11.1062578Z 		20 | ENV NVIDIA_VISIBLE_DEVICES=all
2024-04-25T11:44:11.1062753Z 		21 | ENV NVIDIA_DRIVER_CAPABILITIES=compute,utility
2024-04-25T11:44:11.1062988Z 		22 | ENV LD_LIBRARY_PATH=/usr/local/nvidia/lib:/usr/local/nvidia/lib64
2024-04-25T11:44:11.1063071Z 		23 | 
2024-04-25T11:44:11.1063192Z 		24 | # hadolint ignore=DL3013
2024-04-25T11:44:11.1063445Z 		25 | RUN python3 -m pip install --upgrade --no-cache-dir pip
2024-04-25T11:44:11.1063583Z 		26 | 
2024-04-25T11:44:11.1063708Z 		27 | COPY ./app /app
2024-04-25T11:44:11.1064055Z 		28 | RUN pip3 --timeout=300 --no-cache-dir install -r /app/requirements-torch.txt \
2024-04-25T11:44:11.1064346Z 		29 |  && pip3 --timeout=300 --no-cache-dir install -r /app/requirements.txt
2024-04-25T11:44:11.1064439Z 		30 | 
2024-04-25T11:44:11.1064533Z 		31 | EXPOSE 7080
2024-04-25T11:44:11.1064617Z 		32 | 
2024-04-25T11:44:11.1064734Z 		33 | # Start the app
2024-04-25T11:44:11.1065216Z 		34 | CMD ["gunicorn", "-b", "0.0.0.0:7080", "main:app","--workers","1","--timeout","180","-k","uvicorn.workers.UvicornWorker"]
2024-04-25T11:44:11.1065221Z 
2024-04-25T11:44:11.1065480Z Check: CKV_DOCKER_3: "Ensure that a user for the container has been created"
2024-04-25T11:44:11.1065994Z 	FAILED for resource: /language/tuning/distilling_step_by_step/prediction_container/Dockerfile.
2024-04-25T11:44:11.1066351Z 	File: /language/tuning/distilling_step_by_step/prediction_container/Dockerfile:1-34
2024-04-25T11:44:11.1067284Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-a-user-for-the-container-has-been-created
2024-04-25T11:44:11.1067290Z 
2024-04-25T11:44:11.1067403Z 		1  | # Copyright 2024 Google LLC
2024-04-25T11:44:11.1067487Z 		2  | #
2024-04-25T11:44:11.1067736Z 		3  | # Licensed under the Apache License, Version 2.0 (the "License");
2024-04-25T11:44:11.1067974Z 		4  | # you may not use this file except in compliance with the License.
2024-04-25T11:44:11.1068121Z 		5  | # You may obtain a copy of the License at
2024-04-25T11:44:11.1068213Z 		6  | #
2024-04-25T11:44:11.1068426Z 		7  | #     http://www.apache.org/licenses/LICENSE-2.0
2024-04-25T11:44:11.1068529Z 		8  | #
2024-04-25T11:44:11.1068778Z 		9  | # Unless required by applicable law or agreed to in writing, software
2024-04-25T11:44:11.1069018Z 		10 | # distributed under the License is distributed on an "AS IS" BASIS,
2024-04-25T11:44:11.1069300Z 		11 | # WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
2024-04-25T11:44:11.1069547Z 		12 | # See the License for the specific language governing permissions and
2024-04-25T11:44:11.1069669Z 		13 | # limitations under the License.
2024-04-25T11:44:11.1069763Z 		14 | 
2024-04-25T11:44:11.1069985Z 		15 | FROM tiangolo/uvicorn-gunicorn-fastapi:python3.9
2024-04-25T11:44:11.1070067Z 		16 | 
2024-04-25T11:44:11.1070245Z 		17 | LABEL com.nvidia.volumes.needed=nvidia_driver
2024-04-25T11:44:11.1070324Z 		18 | 
2024-04-25T11:44:11.1070639Z 		19 | # ENV PATH=/opt/conda/bin:/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
2024-04-25T11:44:11.1070785Z 		20 | ENV NVIDIA_VISIBLE_DEVICES=all
2024-04-25T11:44:11.1070946Z 		21 | ENV NVIDIA_DRIVER_CAPABILITIES=compute,utility
2024-04-25T11:44:11.1071173Z 		22 | ENV LD_LIBRARY_PATH=/usr/local/nvidia/lib:/usr/local/nvidia/lib64
2024-04-25T11:44:11.1071273Z 		23 | 
2024-04-25T11:44:11.1071385Z 		24 | # hadolint ignore=DL3013
2024-04-25T11:44:11.1071645Z 		25 | RUN python3 -m pip install --upgrade --no-cache-dir pip
2024-04-25T11:44:11.1071728Z 		26 | 
2024-04-25T11:44:11.1071823Z 		27 | COPY ./app /app
2024-04-25T11:44:11.1072184Z 		28 | RUN pip3 --timeout=300 --no-cache-dir install -r /app/requirements-torch.txt \
2024-04-25T11:44:11.1072651Z 		29 |  && pip3 --timeout=300 --no-cache-dir install -r /app/requirements.txt
2024-04-25T11:44:11.1072742Z 		30 | 
2024-04-25T11:44:11.1072849Z 		31 | EXPOSE 7080
2024-04-25T11:44:11.1072932Z 		32 | 
2024-04-25T11:44:11.1073026Z 		33 | # Start the app
2024-04-25T11:44:11.1073524Z 		34 | CMD ["gunicorn", "-b", "0.0.0.0:7080", "main:app","--workers","1","--timeout","180","-k","uvicorn.workers.UvicornWorker"]
2024-04-25T11:44:11.1073529Z 
2024-04-25T11:44:11.1073874Z Check: CKV_DOCKER_2: "Ensure that HEALTHCHECK instructions have been added to container images"
2024-04-25T11:44:11.1074071Z 	FAILED for resource: /search/web-app/Dockerfile.
2024-04-25T11:44:11.1074244Z 	File: /search/web-app/Dockerfile:1-22
2024-04-25T11:44:11.1075191Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-healthcheck-instructions-have-been-added-to-container-images
2024-04-25T11:44:11.1075197Z 
2024-04-25T11:44:11.1075370Z 		1  | # Use the official lightweight Python image.
2024-04-25T11:44:11.1075508Z 		2  | # https://hub.docker.com/_/python
2024-04-25T11:44:11.1075641Z 		3  | FROM python:3.11-slim
2024-04-25T11:44:11.1075733Z 		4  | 
2024-04-25T11:44:11.1076012Z 		5  | # Allow statements and log messages to immediately appear in the Knative logs
2024-04-25T11:44:11.1076125Z 		6  | ENV PYTHONUNBUFFERED True
2024-04-25T11:44:11.1076219Z 		7  | 
2024-04-25T11:44:11.1076366Z 		8  | # Copy local code to the container image.
2024-04-25T11:44:11.1076592Z 		9  | ENV APP_HOME /app
2024-04-25T11:44:11.1076701Z 		10 | WORKDIR $APP_HOME
2024-04-25T11:44:11.1076792Z 		11 | COPY . ./
2024-04-25T11:44:11.1076874Z 		12 | 
2024-04-25T11:44:11.1077021Z 		13 | # Install production dependencies.
2024-04-25T11:44:11.1077249Z 		14 | RUN pip install --no-cache-dir -r requirements.txt
2024-04-25T11:44:11.1077369Z 		15 | 
2024-04-25T11:44:11.1077618Z 		16 | # Run the web service on container startup. Here we use the gunicorn
2024-04-25T11:44:11.1077795Z 		17 | # webserver, with one worker process and 8 threads.
2024-04-25T11:44:11.1078081Z 		18 | # For environments with multiple CPU cores, increase the number of workers
2024-04-25T11:44:11.1078214Z 		19 | # to be equal to the cores available.
2024-04-25T11:44:11.1078609Z 		20 | # Timeout is set to 0 to disable the timeouts of the workers to allow Cloud Run to handle instance scaling.
2024-04-25T11:44:11.1078728Z 		21 | # hadolint ignore=DL3025
2024-04-25T11:44:11.1079060Z 		22 | CMD exec gunicorn --bind :$PORT --workers 1 --threads 8 --timeout 0 main:app
2024-04-25T11:44:11.1079069Z 
2024-04-25T11:44:11.1079328Z Check: CKV_DOCKER_3: "Ensure that a user for the container has been created"
2024-04-25T11:44:11.1079546Z 	FAILED for resource: /search/web-app/Dockerfile.
2024-04-25T11:44:11.1079704Z 	File: /search/web-app/Dockerfile:1-22
2024-04-25T11:44:11.1080547Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-a-user-for-the-container-has-been-created
2024-04-25T11:44:11.1080553Z 
2024-04-25T11:44:11.1080717Z 		1  | # Use the official lightweight Python image.
2024-04-25T11:44:11.1080893Z 		2  | # https://hub.docker.com/_/python
2024-04-25T11:44:11.1081041Z 		3  | FROM python:3.11-slim
2024-04-25T11:44:11.1081122Z 		4  | 
2024-04-25T11:44:11.1081413Z 		5  | # Allow statements and log messages to immediately appear in the Knative logs
2024-04-25T11:44:11.1081543Z 		6  | ENV PYTHONUNBUFFERED True
2024-04-25T11:44:11.1081627Z 		7  | 
2024-04-25T11:44:11.1081772Z 		8  | # Copy local code to the container image.
2024-04-25T11:44:11.1081887Z 		9  | ENV APP_HOME /app
2024-04-25T11:44:11.1081984Z 		10 | WORKDIR $APP_HOME
2024-04-25T11:44:11.1082075Z 		11 | COPY . ./
2024-04-25T11:44:11.1082167Z 		12 | 
2024-04-25T11:44:11.1082293Z 		13 | # Install production dependencies.
2024-04-25T11:44:11.1082527Z 		14 | RUN pip install --no-cache-dir -r requirements.txt
2024-04-25T11:44:11.1082611Z 		15 | 
2024-04-25T11:44:11.1082856Z 		16 | # Run the web service on container startup. Here we use the gunicorn
2024-04-25T11:44:11.1083175Z 		17 | # webserver, with one worker process and 8 threads.
2024-04-25T11:44:11.1083450Z 		18 | # For environments with multiple CPU cores, increase the number of workers
2024-04-25T11:44:11.1083583Z 		19 | # to be equal to the cores available.
2024-04-25T11:44:11.1083998Z 		20 | # Timeout is set to 0 to disable the timeouts of the workers to allow Cloud Run to handle instance scaling.
2024-04-25T11:44:11.1084109Z 		21 | # hadolint ignore=DL3025
2024-04-25T11:44:11.1084440Z 		22 | CMD exec gunicorn --bind :$PORT --workers 1 --threads 8 --timeout 0 main:app
2024-04-25T11:44:11.1084446Z 
2024-04-25T11:44:11.1084803Z Check: CKV_DOCKER_2: "Ensure that HEALTHCHECK instructions have been added to container images"
2024-04-25T11:44:11.1085137Z 	FAILED for resource: /gemini/sample-apps/gemini-streamlit-cloudrun/Dockerfile.
2024-04-25T11:44:11.1085435Z 	File: /gemini/sample-apps/gemini-streamlit-cloudrun/Dockerfile:1-10
2024-04-25T11:44:11.1086378Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-healthcheck-instructions-have-been-added-to-container-images
2024-04-25T11:44:11.1086384Z 
2024-04-25T11:44:11.1086480Z 		1  | FROM python:3.8
2024-04-25T11:44:11.1086580Z 		2  | 
2024-04-25T11:44:11.1086673Z 		3  | EXPOSE 8080
2024-04-25T11:44:11.1086764Z 		4  | WORKDIR /app
2024-04-25T11:44:11.1086858Z 		5  | 
2024-04-25T11:44:11.1086945Z 		6  | COPY . ./
2024-04-25T11:44:11.1087148Z 		7  | 
2024-04-25T11:44:11.1087334Z 		8  | RUN pip install -r requirements.txt
2024-04-25T11:44:11.1087416Z 		9  | 
2024-04-25T11:44:11.1087805Z 		10 | ENTRYPOINT ["streamlit", "run", "app.py", "--server.port=8080", "--server.address=0.0.0.0"]
2024-04-25T11:44:11.1088078Z Check: CKV_DOCKER_3: "Ensure that a user for the container has been created"
2024-04-25T11:44:11.1088415Z 	FAILED for resource: /gemini/sample-apps/gemini-streamlit-cloudrun/Dockerfile.
2024-04-25T11:44:11.1088717Z 	File: /gemini/sample-apps/gemini-streamlit-cloudrun/Dockerfile:1-10
2024-04-25T11:44:11.1089533Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-a-user-for-the-container-has-been-created
2024-04-25T11:44:11.1089538Z 
2024-04-25T11:44:11.1089637Z 		1  | FROM python:3.8
2024-04-25T11:44:11.1089732Z 		2  | 
2024-04-25T11:44:11.1089833Z 		3  | EXPOSE 8080
2024-04-25T11:44:11.1089923Z 		4  | WORKDIR /app
2024-04-25T11:44:11.1090026Z 		5  | 
2024-04-25T11:44:11.1090118Z 		6  | COPY . ./
2024-04-25T11:44:11.1090197Z 		7  | 
2024-04-25T11:44:11.1090372Z 		8  | RUN pip install -r requirements.txt
2024-04-25T11:44:11.1090454Z 		9  | 
2024-04-25T11:44:11.1090834Z 		10 | ENTRYPOINT ["streamlit", "run", "app.py", "--server.port=8080", "--server.address=0.0.0.0"]
2024-04-25T11:44:11.1091179Z Check: CKV_DOCKER_2: "Ensure that HEALTHCHECK instructions have been added to container images"
2024-04-25T11:44:11.1091512Z 	FAILED for resource: /gemini/sample-apps/fixmycar/cloud-sql/backend/Dockerfile.
2024-04-25T11:44:11.1091808Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/backend/Dockerfile:1-32
2024-04-25T11:44:11.1092737Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-healthcheck-instructions-have-been-added-to-container-images
2024-04-25T11:44:11.1092742Z 
2024-04-25T11:44:11.1093015Z 		1  | # Base image with Java 17 (using a lightweight Alpine variant for efficiency)
2024-04-25T11:44:11.1093240Z 		2  | FROM eclipse-temurin:17-jdk-alpine as builder
2024-04-25T11:44:11.1093321Z 		3  | 
2024-04-25T11:44:11.1093433Z 		4  | # Set working directory
2024-04-25T11:44:11.1093559Z 		5  | WORKDIR /workspace/app
2024-04-25T11:44:11.1093639Z 		6  | 
2024-04-25T11:44:11.1093893Z 		7  | # Copy Maven dependencies (for efficient caching and layer separation)
2024-04-25T11:44:11.1094002Z 		8  | COPY mvnw .
2024-04-25T11:44:11.1094101Z 		9  | COPY .mvn .mvn
2024-04-25T11:44:11.1094219Z 		10 | COPY pom.xml .
2024-04-25T11:44:11.1094389Z 		11 | RUN ./mvnw dependency:go-offline -B
2024-04-25T11:44:11.1094631Z 		12 | 
2024-04-25T11:44:11.1094761Z 		13 | # Copy project source code
2024-04-25T11:44:11.1094854Z 		14 | COPY src src
2024-04-25T11:44:11.1094937Z 		15 | 
2024-04-25T11:44:11.1095083Z 		16 | # Build the application with Maven
2024-04-25T11:44:11.1095240Z 		17 | RUN ./mvnw package -DskipTests
2024-04-25T11:44:11.1095323Z 		18 | 
2024-04-25T11:44:11.1095475Z 		19 | # Create a lightweight runtime image
2024-04-25T11:44:11.1095638Z 		20 | FROM eclipse-temurin:17-jdk-alpine
2024-04-25T11:44:11.1095718Z 		21 | 
2024-04-25T11:44:11.1096073Z 		22 | # Set working directory
2024-04-25T11:44:11.1096225Z 		23 | WORKDIR /app
2024-04-25T11:44:11.1096308Z 		24 | 
2024-04-25T11:44:11.1096493Z 		25 | # Copy the built JAR file from the builder stage
2024-04-25T11:44:11.1096765Z 		26 | COPY --from=builder /workspace/app/target/*.jar /app/app.jar
2024-04-25T11:44:11.1096846Z 		27 | 
2024-04-25T11:44:11.1097134Z 		28 | # Expose the application port (replace with your actual port if different)
2024-04-25T11:44:11.1097236Z 		29 | EXPOSE 8080
2024-04-25T11:44:11.1097317Z 		30 | 
2024-04-25T11:44:11.1097572Z 		31 | # Run the application using Spring Boot's executable JAR
2024-04-25T11:44:11.1097768Z 		32 | ENTRYPOINT ["java", "-jar", "/app/app.jar"]
2024-04-25T11:44:11.1098048Z Check: CKV_DOCKER_3: "Ensure that a user for the container has been created"
2024-04-25T11:44:11.1098390Z 	FAILED for resource: /gemini/sample-apps/fixmycar/cloud-sql/backend/Dockerfile.
2024-04-25T11:44:11.1098842Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/backend/Dockerfile:1-32
2024-04-25T11:44:11.1099666Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-a-user-for-the-container-has-been-created
2024-04-25T11:44:11.1099672Z 
2024-04-25T11:44:11.1099949Z 		1  | # Base image with Java 17 (using a lightweight Alpine variant for efficiency)
2024-04-25T11:44:11.1100151Z 		2  | FROM eclipse-temurin:17-jdk-alpine as builder
2024-04-25T11:44:11.1100249Z 		3  | 
2024-04-25T11:44:11.1100361Z 		4  | # Set working directory
2024-04-25T11:44:11.1100474Z 		5  | WORKDIR /workspace/app
2024-04-25T11:44:11.1100575Z 		6  | 
2024-04-25T11:44:11.1100830Z 		7  | # Copy Maven dependencies (for efficient caching and layer separation)
2024-04-25T11:44:11.1100943Z 		8  | COPY mvnw .
2024-04-25T11:44:11.1101038Z 		9  | COPY .mvn .mvn
2024-04-25T11:44:11.1101131Z 		10 | COPY pom.xml .
2024-04-25T11:44:11.1101311Z 		11 | RUN ./mvnw dependency:go-offline -B
2024-04-25T11:44:11.1101392Z 		12 | 
2024-04-25T11:44:11.1101502Z 		13 | # Copy project source code
2024-04-25T11:44:11.1101608Z 		14 | COPY src src
2024-04-25T11:44:11.1101689Z 		15 | 
2024-04-25T11:44:11.1101813Z 		16 | # Build the application with Maven
2024-04-25T11:44:11.1101977Z 		17 | RUN ./mvnw package -DskipTests
2024-04-25T11:44:11.1102064Z 		18 | 
2024-04-25T11:44:11.1102199Z 		19 | # Create a lightweight runtime image
2024-04-25T11:44:11.1102366Z 		20 | FROM eclipse-temurin:17-jdk-alpine
2024-04-25T11:44:11.1102450Z 		21 | 
2024-04-25T11:44:11.1102555Z 		22 | # Set working directory
2024-04-25T11:44:11.1102669Z 		23 | WORKDIR /app
2024-04-25T11:44:11.1102760Z 		24 | 
2024-04-25T11:44:11.1102929Z 		25 | # Copy the built JAR file from the builder stage
2024-04-25T11:44:11.1103205Z 		26 | COPY --from=builder /workspace/app/target/*.jar /app/app.jar
2024-04-25T11:44:11.1103288Z 		27 | 
2024-04-25T11:44:11.1103557Z 		28 | # Expose the application port (replace with your actual port if different)
2024-04-25T11:44:11.1103674Z 		29 | EXPOSE 8080
2024-04-25T11:44:11.1103759Z 		30 | 
2024-04-25T11:44:11.1104002Z 		31 | # Run the application using Spring Boot's executable JAR
2024-04-25T11:44:11.1104200Z 		32 | ENTRYPOINT ["java", "-jar", "/app/app.jar"]
2024-04-25T11:44:11.1104536Z Check: CKV_DOCKER_2: "Ensure that HEALTHCHECK instructions have been added to container images"
2024-04-25T11:44:11.1104804Z 	FAILED for resource: /gemini/sample-apps/genwealth/Dockerfile.
2024-04-25T11:44:11.1105161Z 	File: /gemini/sample-apps/genwealth/Dockerfile:1-39
2024-04-25T11:44:11.1106111Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-healthcheck-instructions-have-been-added-to-container-images
2024-04-25T11:44:11.1106118Z 
2024-04-25T11:44:11.1106218Z 		1  | ##
2024-04-25T11:44:11.1106329Z 		2  | ## Stage 1: Build the API
2024-04-25T11:44:11.1106420Z 		3  | ##
2024-04-25T11:44:11.1106597Z 		4  | FROM node:lts-alpine AS api-build
2024-04-25T11:44:11.1106681Z 		5  | 
2024-04-25T11:44:11.1106772Z 		6  | WORKDIR /src
2024-04-25T11:44:11.1106881Z 		7  | COPY ./api .
2024-04-25T11:44:11.1106960Z 		8  | 
2024-04-25T11:44:11.1107053Z 		9  | RUN npm install
2024-04-25T11:44:11.1107208Z 		10 | RUN npx tsc --outDir /dist
2024-04-25T11:44:11.1107296Z 		11 | 
2024-04-25T11:44:11.1107379Z 		12 | ##
2024-04-25T11:44:11.1107503Z 		13 | ## Stage 2: Build the UI
2024-04-25T11:44:11.1107584Z 		14 | ##
2024-04-25T11:44:11.1107749Z 		15 | FROM node:lts-alpine AS ui-build
2024-04-25T11:44:11.1107837Z 		16 | 
2024-04-25T11:44:11.1107928Z 		17 | WORKDIR /app
2024-04-25T11:44:11.1108031Z 		18 | COPY ./ui .
2024-04-25T11:44:11.1108117Z 		19 | 
2024-04-25T11:44:11.1108209Z 		20 | RUN npm install
2024-04-25T11:44:11.1108391Z 		21 | RUN npx ng build --output-path /dist
2024-04-25T11:44:11.1108477Z 		22 | 
2024-04-25T11:44:11.1108560Z 		23 | ##
2024-04-25T11:44:11.1108673Z 		24 | ## Stage 3: Build Runtime
2024-04-25T11:44:11.1108875Z 		25 | ##
2024-04-25T11:44:11.1109026Z 		26 | FROM node:lts-alpine AS runtime
2024-04-25T11:44:11.1109125Z 		27 | 
2024-04-25T11:44:11.1109220Z 		28 | WORKDIR /app
2024-04-25T11:44:11.1109310Z 		29 | 
2024-04-25T11:44:11.1109536Z 		30 | # Copy build artifacts from the api-build stage
2024-04-25T11:44:11.1109685Z 		31 | COPY --from=api-build /dist .
2024-04-25T11:44:11.1109917Z 		32 | COPY --from=api-build /src/node_modules ./node_modules
2024-04-25T11:44:11.1110017Z 		33 | 
2024-04-25T11:44:11.1110222Z 		34 | # Copy build artifacts from the ui-build stage
2024-04-25T11:44:11.1110471Z 		35 | COPY --from=ui-build /dist ./ui/dist/genwealth-advisor-ui
2024-04-25T11:44:11.1110574Z 		36 | 
2024-04-25T11:44:11.1110664Z 		37 | EXPOSE 8080
2024-04-25T11:44:11.1110747Z 		38 | 
2024-04-25T11:44:11.1110868Z 		39 | CMD ["node", "index.js"] 
2024-04-25T11:44:11.1110873Z 
2024-04-25T11:44:11.1111131Z Check: CKV_DOCKER_3: "Ensure that a user for the container has been created"
2024-04-25T11:44:11.1111411Z 	FAILED for resource: /gemini/sample-apps/genwealth/Dockerfile.
2024-04-25T11:44:11.1111619Z 	File: /gemini/sample-apps/genwealth/Dockerfile:1-39
2024-04-25T11:44:11.1112433Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-a-user-for-the-container-has-been-created
2024-04-25T11:44:11.1112438Z 
2024-04-25T11:44:11.1112542Z 		1  | ##
2024-04-25T11:44:11.1112649Z 		2  | ## Stage 1: Build the API
2024-04-25T11:44:11.1112731Z 		3  | ##
2024-04-25T11:44:11.1112906Z 		4  | FROM node:lts-alpine AS api-build
2024-04-25T11:44:11.1112995Z 		5  | 
2024-04-25T11:44:11.1113087Z 		6  | WORKDIR /src
2024-04-25T11:44:11.1113205Z 		7  | COPY ./api .
2024-04-25T11:44:11.1113295Z 		8  | 
2024-04-25T11:44:11.1113390Z 		9  | RUN npm install
2024-04-25T11:44:11.1113552Z 		10 | RUN npx tsc --outDir /dist
2024-04-25T11:44:11.1113634Z 		11 | 
2024-04-25T11:44:11.1113714Z 		12 | ##
2024-04-25T11:44:11.1113843Z 		13 | ## Stage 2: Build the UI
2024-04-25T11:44:11.1113935Z 		14 | ##
2024-04-25T11:44:11.1114087Z 		15 | FROM node:lts-alpine AS ui-build
2024-04-25T11:44:11.1114187Z 		16 | 
2024-04-25T11:44:11.1114275Z 		17 | WORKDIR /app
2024-04-25T11:44:11.1114363Z 		18 | COPY ./ui .
2024-04-25T11:44:11.1114457Z 		19 | 
2024-04-25T11:44:11.1114551Z 		20 | RUN npm install
2024-04-25T11:44:11.1114734Z 		21 | RUN npx ng build --output-path /dist
2024-04-25T11:44:11.1114826Z 		22 | 
2024-04-25T11:44:11.1114905Z 		23 | ##
2024-04-25T11:44:11.1115017Z 		24 | ## Stage 3: Build Runtime
2024-04-25T11:44:11.1115101Z 		25 | ##
2024-04-25T11:44:11.1115375Z 		26 | FROM node:lts-alpine AS runtime
2024-04-25T11:44:11.1115476Z 		27 | 
2024-04-25T11:44:11.1115572Z 		28 | WORKDIR /app
2024-04-25T11:44:11.1115650Z 		29 | 
2024-04-25T11:44:11.1115875Z 		30 | # Copy build artifacts from the api-build stage
2024-04-25T11:44:11.1116018Z 		31 | COPY --from=api-build /dist .
2024-04-25T11:44:11.1116245Z 		32 | COPY --from=api-build /src/node_modules ./node_modules
2024-04-25T11:44:11.1116333Z 		33 | 
2024-04-25T11:44:11.1116535Z 		34 | # Copy build artifacts from the ui-build stage
2024-04-25T11:44:11.1116782Z 		35 | COPY --from=ui-build /dist ./ui/dist/genwealth-advisor-ui
2024-04-25T11:44:11.1116877Z 		36 | 
2024-04-25T11:44:11.1116970Z 		37 | EXPOSE 8080
2024-04-25T11:44:11.1117049Z 		38 | 
2024-04-25T11:44:11.1117166Z 		39 | CMD ["node", "index.js"] 
2024-04-25T11:44:11.1117171Z 
2024-04-25T11:44:11.1117514Z Check: CKV_DOCKER_2: "Ensure that HEALTHCHECK instructions have been added to container images"
2024-04-25T11:44:11.1117891Z 	FAILED for resource: /gemini/sample-apps/fixmycar/vertex-ai-search/backend/Dockerfile.
2024-04-25T11:44:11.1118220Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/backend/Dockerfile:1-32
2024-04-25T11:44:11.1119158Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-healthcheck-instructions-have-been-added-to-container-images
2024-04-25T11:44:11.1119163Z 
2024-04-25T11:44:11.1119453Z 		1  | # Base image with Java 17 (using a lightweight Alpine variant for efficiency)
2024-04-25T11:44:11.1119778Z 		2  | FROM eclipse-temurin:17-jdk-alpine as builder
2024-04-25T11:44:11.1119862Z 		3  | 
2024-04-25T11:44:11.1119978Z 		4  | # Set working directory
2024-04-25T11:44:11.1120084Z 		5  | WORKDIR /workspace/app
2024-04-25T11:44:11.1120165Z 		6  | 
2024-04-25T11:44:11.1120434Z 		7  | # Copy Maven dependencies (for efficient caching and layer separation)
2024-04-25T11:44:11.1120521Z 		8  | COPY mvnw .
2024-04-25T11:44:11.1120615Z 		9  | COPY .mvn .mvn
2024-04-25T11:44:11.1120722Z 		10 | COPY pom.xml .
2024-04-25T11:44:11.1120895Z 		11 | RUN ./mvnw dependency:go-offline -B
2024-04-25T11:44:11.1120988Z 		12 | 
2024-04-25T11:44:11.1121100Z 		13 | # Copy project source code
2024-04-25T11:44:11.1121194Z 		14 | COPY src src
2024-04-25T11:44:11.1121297Z 		15 | 
2024-04-25T11:44:11.1121428Z 		16 | # Build the application with Maven
2024-04-25T11:44:11.1121578Z 		17 | RUN ./mvnw package -DskipTests
2024-04-25T11:44:11.1121676Z 		18 | 
2024-04-25T11:44:11.1121807Z 		19 | # Create a lightweight runtime image
2024-04-25T11:44:11.1121967Z 		20 | FROM eclipse-temurin:17-jdk-alpine
2024-04-25T11:44:11.1122066Z 		21 | 
2024-04-25T11:44:11.1122175Z 		22 | # Set working directory
2024-04-25T11:44:11.1122267Z 		23 | WORKDIR /app
2024-04-25T11:44:11.1122367Z 		24 | 
2024-04-25T11:44:11.1122536Z 		25 | # Copy the built JAR file from the builder stage
2024-04-25T11:44:11.1122793Z 		26 | COPY --from=builder /workspace/app/target/*.jar /app/app.jar
2024-04-25T11:44:11.1122891Z 		27 | 
2024-04-25T11:44:11.1123164Z 		28 | # Expose the application port (replace with your actual port if different)
2024-04-25T11:44:11.1123256Z 		29 | EXPOSE 8080
2024-04-25T11:44:11.1123350Z 		30 | 
2024-04-25T11:44:11.1123592Z 		31 | # Run the application using Spring Boot's executable JAR
2024-04-25T11:44:11.1123783Z 		32 | ENTRYPOINT ["java", "-jar", "/app/app.jar"]
2024-04-25T11:44:11.1124054Z Check: CKV_DOCKER_3: "Ensure that a user for the container has been created"
2024-04-25T11:44:11.1124426Z 	FAILED for resource: /gemini/sample-apps/fixmycar/vertex-ai-search/backend/Dockerfile.
2024-04-25T11:44:11.1124767Z 	File: /gemini/sample-apps/fixmycar/vertex-ai-search/backend/Dockerfile:1-32
2024-04-25T11:44:11.1125574Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-a-user-for-the-container-has-been-created
2024-04-25T11:44:11.1125579Z 
2024-04-25T11:44:11.1125846Z 		1  | # Base image with Java 17 (using a lightweight Alpine variant for efficiency)
2024-04-25T11:44:11.1126184Z 		2  | FROM eclipse-temurin:17-jdk-alpine as builder
2024-04-25T11:44:11.1126267Z 		3  | 
2024-04-25T11:44:11.1126370Z 		4  | # Set working directory
2024-04-25T11:44:11.1126491Z 		5  | WORKDIR /workspace/app
2024-04-25T11:44:11.1126575Z 		6  | 
2024-04-25T11:44:11.1127012Z 		7  | # Copy Maven dependencies (for efficient caching and layer separation)
2024-04-25T11:44:11.1127191Z 		8  | COPY mvnw .
2024-04-25T11:44:11.1127312Z 		9  | COPY .mvn .mvn
2024-04-25T11:44:11.1127423Z 		10 | COPY pom.xml .
2024-04-25T11:44:11.1127613Z 		11 | RUN ./mvnw dependency:go-offline -B
2024-04-25T11:44:11.1127693Z 		12 | 
2024-04-25T11:44:11.1127814Z 		13 | # Copy project source code
2024-04-25T11:44:11.1127908Z 		14 | COPY src src
2024-04-25T11:44:11.1127987Z 		15 | 
2024-04-25T11:44:11.1128129Z 		16 | # Build the application with Maven
2024-04-25T11:44:11.1128280Z 		17 | RUN ./mvnw package -DskipTests
2024-04-25T11:44:11.1128362Z 		18 | 
2024-04-25T11:44:11.1128506Z 		19 | # Create a lightweight runtime image
2024-04-25T11:44:11.1128669Z 		20 | FROM eclipse-temurin:17-jdk-alpine
2024-04-25T11:44:11.1128753Z 		21 | 
2024-04-25T11:44:11.1128866Z 		22 | # Set working directory
2024-04-25T11:44:11.1128957Z 		23 | WORKDIR /app
2024-04-25T11:44:11.1129040Z 		24 | 
2024-04-25T11:44:11.1129223Z 		25 | # Copy the built JAR file from the builder stage
2024-04-25T11:44:11.1129488Z 		26 | COPY --from=builder /workspace/app/target/*.jar /app/app.jar
2024-04-25T11:44:11.1129751Z 		27 | 
2024-04-25T11:44:11.1130034Z 		28 | # Expose the application port (replace with your actual port if different)
2024-04-25T11:44:11.1130127Z 		29 | EXPOSE 8080
2024-04-25T11:44:11.1130206Z 		30 | 
2024-04-25T11:44:11.1130467Z 		31 | # Run the application using Spring Boot's executable JAR
2024-04-25T11:44:11.1130656Z 		32 | ENTRYPOINT ["java", "-jar", "/app/app.jar"]
2024-04-25T11:44:11.1131009Z Check: CKV_DOCKER_2: "Ensure that HEALTHCHECK instructions have been added to container images"
2024-04-25T11:44:11.1131330Z 	FAILED for resource: /language/sample-apps/chat-flask-cloudrun/Dockerfile.
2024-04-25T11:44:11.1131600Z 	File: /language/sample-apps/chat-flask-cloudrun/Dockerfile:1-10
2024-04-25T11:44:11.1132552Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-healthcheck-instructions-have-been-added-to-container-images
2024-04-25T11:44:11.1132559Z 
2024-04-25T11:44:11.1132654Z 		1  | FROM python:3.8
2024-04-25T11:44:11.1132744Z 		2  | 
2024-04-25T11:44:11.1132848Z 		3  | EXPOSE 8080
2024-04-25T11:44:11.1132939Z 		4  | WORKDIR /app
2024-04-25T11:44:11.1133019Z 		5  | 
2024-04-25T11:44:11.1133117Z 		6  | COPY . ./
2024-04-25T11:44:11.1133196Z 		7  | 
2024-04-25T11:44:11.1133366Z 		8  | RUN pip install -r requirements.txt
2024-04-25T11:44:11.1133460Z 		9  | 
2024-04-25T11:44:11.1133571Z 		10 | CMD ["python", "app.py"]
2024-04-25T11:44:11.1133826Z Check: CKV_DOCKER_3: "Ensure that a user for the container has been created"
2024-04-25T11:44:11.1134152Z 	FAILED for resource: /language/sample-apps/chat-flask-cloudrun/Dockerfile.
2024-04-25T11:44:11.1134413Z 	File: /language/sample-apps/chat-flask-cloudrun/Dockerfile:1-10
2024-04-25T11:44:11.1135223Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-a-user-for-the-container-has-been-created
2024-04-25T11:44:11.1135228Z 
2024-04-25T11:44:11.1135320Z 		1  | FROM python:3.8
2024-04-25T11:44:11.1135401Z 		2  | 
2024-04-25T11:44:11.1135505Z 		3  | EXPOSE 8080
2024-04-25T11:44:11.1135595Z 		4  | WORKDIR /app
2024-04-25T11:44:11.1135673Z 		5  | 
2024-04-25T11:44:11.1135969Z 		6  | COPY . ./
2024-04-25T11:44:11.1136097Z 		7  | 
2024-04-25T11:44:11.1136322Z 		8  | RUN pip install -r requirements.txt
2024-04-25T11:44:11.1136420Z 		9  | 
2024-04-25T11:44:11.1136526Z 		10 | CMD ["python", "app.py"]
2024-04-25T11:44:11.1136864Z Check: CKV_DOCKER_2: "Ensure that HEALTHCHECK instructions have been added to container images"
2024-04-25T11:44:11.1137314Z 	FAILED for resource: /language/sample-apps/chat-gradio/Dockerfile.
2024-04-25T11:44:11.1137544Z 	File: /language/sample-apps/chat-gradio/Dockerfile:1-10
2024-04-25T11:44:11.1138489Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-healthcheck-instructions-have-been-added-to-container-images
2024-04-25T11:44:11.1138495Z 
2024-04-25T11:44:11.1138589Z 		1  | FROM python:3.11
2024-04-25T11:44:11.1138676Z 		2  | 
2024-04-25T11:44:11.1138779Z 		3  | EXPOSE 8080
2024-04-25T11:44:11.1138867Z 		4  | WORKDIR /app
2024-04-25T11:44:11.1138946Z 		5  | 
2024-04-25T11:44:11.1139046Z 		6  | COPY . ./
2024-04-25T11:44:11.1139130Z 		7  | 
2024-04-25T11:44:11.1139296Z 		8  | RUN pip install -r requirements.txt
2024-04-25T11:44:11.1139391Z 		9  | 
2024-04-25T11:44:11.1139492Z 		10 | CMD ["python", "app.py"]
2024-04-25T11:44:11.1139746Z Check: CKV_DOCKER_3: "Ensure that a user for the container has been created"
2024-04-25T11:44:11.1140034Z 	FAILED for resource: /language/sample-apps/chat-gradio/Dockerfile.
2024-04-25T11:44:11.1140251Z 	File: /language/sample-apps/chat-gradio/Dockerfile:1-10
2024-04-25T11:44:11.1141063Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-a-user-for-the-container-has-been-created
2024-04-25T11:44:11.1141069Z 
2024-04-25T11:44:11.1141169Z 		1  | FROM python:3.11
2024-04-25T11:44:11.1141251Z 		2  | 
2024-04-25T11:44:11.1141503Z 		3  | EXPOSE 8080
2024-04-25T11:44:11.1141594Z 		4  | WORKDIR /app
2024-04-25T11:44:11.1141671Z 		5  | 
2024-04-25T11:44:11.1141773Z 		6  | COPY . ./
2024-04-25T11:44:11.1141859Z 		7  | 
2024-04-25T11:44:11.1142026Z 		8  | RUN pip install -r requirements.txt
2024-04-25T11:44:11.1142115Z 		9  | 
2024-04-25T11:44:11.1142223Z 		10 | CMD ["python", "app.py"]
2024-04-25T11:44:11.1142556Z Check: CKV_DOCKER_2: "Ensure that HEALTHCHECK instructions have been added to container images"
2024-04-25T11:44:11.1142909Z 	FAILED for resource: /gemini/sample-apps/fixmycar/cloud-sql/frontend/Dockerfile.
2024-04-25T11:44:11.1143207Z 	File: /gemini/sample-apps/fixmycar/cloud-sql/frontend/Dockerfile:1-27
2024-04-25T11:44:11.1144152Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/docker-policies/docker-policy-index/ensure-that-healthcheck-instructions-have-been-added-to-container-images
2024-04-25T11:44:11.1144157Z 
2024-04-25T11:44:11.1144289Z 		1  | FROM python:3.8-slim
2024-04-25T11:44:11.1144374Z 		2  | 
2024-04-25T11:44:11.1144545Z 		3  | RUN groupadd --gid 1000 appuser \
2024-04-25T11:44:11.1144778Z 		4  |     && useradd --uid 1000 --gid 1000 -ms /bin/bash appuser
2024-04-25T11:44:11.1144858Z 		5  | 
2024-04-25T11:44:11.1145061Z 		6  | RUN pip3 install --no-cache-dir --upgrade \
2024-04-25T11:44:11.1145147Z 		7  |     pip \
2024-04-25T11:44:11.1145240Z 		8  |     virtualenv
2024-04-25T11:44:11.1145342Z 		9  | 
2024-04-25T11:44:11.1145528Z 		10 | RUN apt-get update && apt-get install -y \
2024-04-25T11:44:11.1145662Z 		11 |     build-essential \
2024-04-25T11:44:11.1145846Z 		12 |     software-properties-common \
2024-04-25T11:44:11.1145937Z 		13 |     git
2024-04-25T11:44:11.1146018Z 		14 | 
2024-04-25T11:44:11.1146119Z 		15 | USER appuser
2024-04-25T11:44:11.1146219Z 		16 | WORKDIR /home/appuser
2024-04-25T11:44:11.1146301Z 		17 | 
2024-04-25T11:44:11.1146404Z 		18 | COPY . . 
2024-04-25T11:44:11.1146490Z 		19 | 
2024-04-25T11:44:11.1146614Z 		20 | ENV VIRTUAL_ENV=/home/appuser/venv
2024-04-25T11:44:11.1146743Z 		21 | RUN virtualenv ${VIRTUAL_ENV}
2024-04-25T11:44:11.1147041Z 		22 | RUN . ${VIRTUAL_ENV}/bin/activate && pip install -r ./requirements.txt
2024-04-25T11:44:11.1147137Z 		23 | 
2024-04-25T11:44:11.1147228Z 		24 | EXPOSE 8501
2024-04-25T11:44:11.1147309Z 		25 | 
2024-04-25T11:44:11.1147434Z 		26 | COPY run.sh /home/appuser
2024-04-25T11:44:11.1147538Z 		27 | ENTRYPOINT ["./run.sh"]
2024-04-25T11:44:11.1147659Z github_actions scan results:
2024-04-25T11:44:11.1147666Z 
2024-04-25T11:44:11.1147954Z Passed checks: 15, Failed checks: 1, Skipped checks: 0
2024-04-25T11:44:11.1148145Z 
2024-04-25T11:44:11.1148552Z Check: CKV2_GHA_1: "Ensure top-level permissions are not set to write-all"
2024-04-25T11:44:11.1148752Z 	FAILED for resource: on(Lint Code Base)
2024-04-25T11:44:11.1149013Z 	File: /.github/workflows/linter.yaml:0-1
2024-04-25T11:44:11.1149169Z openapi scan results:
2024-04-25T11:44:11.1149176Z 
2024-04-25T11:44:11.1149456Z Passed checks: 2, Failed checks: 3, Skipped checks: 0
2024-04-25T11:44:11.1149495Z 
2024-04-25T11:44:11.1149811Z Check: CKV_OPENAPI_21: "Ensure that arrays have a maximum number of items"
2024-04-25T11:44:11.1149922Z 	FAILED for resource: paths
2024-04-25T11:44:11.1150184Z 	File: /gemini/sample-apps/genwealth/api/swagger.json:23-28
2024-04-25T11:44:11.1150748Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/api-policies/openapi-policies/bc-openapi-21
2024-04-25T11:44:11.1150753Z 
2024-04-25T11:44:11.1150863Z 		23 |             "schema": {
2024-04-25T11:44:11.1150990Z 		24 |               "type": "array",
2024-04-25T11:44:11.1151090Z 		25 |               "items": {
2024-04-25T11:44:11.1151193Z 		26 |                 "type": "string"
2024-04-25T11:44:11.1151299Z 		27 |               }
2024-04-25T11:44:11.1151385Z 		28 |             }
2024-04-25T11:44:11.1151391Z 
2024-04-25T11:44:11.1151637Z Check: CKV_OPENAPI_5: "Ensure that security operations is not empty."
2024-04-25T11:44:11.1151745Z 	FAILED for resource: security
2024-04-25T11:44:11.1152130Z 	File: /gemini/sample-apps/genwealth/api/swagger.json:1-227
2024-04-25T11:44:11.1152862Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/api-policies/openapi-policies/ensure-that-security-operations-is-not-empty
2024-04-25T11:44:11.1152868Z 
2024-04-25T11:44:11.1153208Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.1153477Z Check: CKV_OPENAPI_4: "Ensure that the global security field has rules defined"
2024-04-25T11:44:11.1153608Z 	FAILED for resource: security
2024-04-25T11:44:11.1153850Z 	File: /gemini/sample-apps/genwealth/api/swagger.json:1-227
2024-04-25T11:44:11.1154651Z 	Guide: https://docs.prismacloud.io/en/enterprise-edition/policy-reference/api-policies/openapi-policies/ensure-that-the-global-security-field-has-rules-defined
2024-04-25T11:44:11.1154656Z 
2024-04-25T11:44:11.1154994Z 		Code lines for this resource are too many. Please use IDE of your choice to review the file.
2024-04-25T11:44:11.1155097Z ------
2024-04-25T11:44:11.1155404Z 2024-04-25 11:44:10 [ERROR]   Stderr contents for CHECKOV:
2024-04-25T11:44:11.1155500Z ------
2024-04-25T11:44:11.1156524Z 2024-04-25 11:44:03,555 [MainThread  ] [WARNI]  Failed to download module terraform-google-modules/project-factory/google//modules/project_services:14.4 (for external modules, the --download-external-modules flag is required)
2024-04-25T11:44:11.1156637Z ------
2024-04-25T11:44:11.8698404Z 2024-04-25 11:44:11 [ERROR]   Super-linter detected linting errors
2024-04-25T11:44:12.0651189Z Post job cleanup.
2024-04-25T11:44:12.1432752Z [command]/usr/bin/git version
2024-04-25T11:44:12.1476059Z git version 2.43.2
2024-04-25T11:44:12.1519924Z Temporarily overriding HOME='/home/runner/work/_temp/bbeef4f4-e9d7-49ea-941e-76d421d77062' before making global git config changes
2024-04-25T11:44:12.1521731Z Adding repository directory to the temporary git global config as a safe directory
2024-04-25T11:44:12.1525121Z [command]/usr/bin/git config --global --add safe.directory /home/runner/work/generative-ai/generative-ai
2024-04-25T11:44:12.1561876Z [command]/usr/bin/git config --local --name-only --get-regexp core\.sshCommand
2024-04-25T11:44:12.1603520Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'core\.sshCommand' && git config --local --unset-all 'core.sshCommand' || :"
2024-04-25T11:44:12.1861226Z [command]/usr/bin/git config --local --name-only --get-regexp http\.https\:\/\/github\.com\/\.extraheader
2024-04-25T11:44:12.1883717Z http.https://github.com/.extraheader
2024-04-25T11:44:12.1896379Z [command]/usr/bin/git config --local --unset-all http.https://github.com/.extraheader
2024-04-25T11:44:12.1926593Z [command]/usr/bin/git submodule foreach --recursive sh -c "git config --local --name-only --get-regexp 'http\.https\:\/\/github\.com\/\.extraheader' && git config --local --unset-all 'http.https://github.com/.extraheader' || :"
2024-04-25T11:44:12.2419748Z Cleaning up orphan processes
Code of Conduct

[X] I agree to follow this project's Code of Conduct
Apr 25 '24 14:04 holtskinner