YiscahLevySilas1

Hi, the control checks if there is a service account apart from "default" in every namespace and fails those that don't have one. The remediation is to create another SA...

Hi, In all our controls there is always the case where the misconfiguration we're looking for is intentional. That is what the exceptions are for. In this case - it...

Looking back at the remediation procedure of [this CIS control](https://workbench.cisecurity.org/sections/1126661/recommendations/1838594), I am thinking maybe we should fail workloads that use the default SA, and not the namespaces. (And in the...

afaik this is by design, as the "lowest" level we show results for is control by resource, so it wouldn't make sense to not run the whole control. We need...