checkov icon indicating copy to clipboard operation
checkov copied to clipboard

feat(sca): add Image Referencer for Kubernetes, Helm and Kustomize

Open gruebel opened this issue 3 years ago • 2 comments

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.

Description

  • same as the one for CloudFormation 🙂 was pretty straight forward and will result in a lot more findings compared to Terraform and CloudFormation
  • added support for normal Kubernetes manifests
  • added support for Helm charts
  • added support for Kustomize configs
  • I also added code for PodTemplate even it is typically not defined by the user and added a comment to the function

Checklist:

  • [x] My code follows the style guidelines of this project
  • [x] I have performed a self-review of my own code
  • [x] I have commented my code, particularly in hard-to-understand areas
  • [ ] I have made corresponding changes to the documentation
  • [x] I have added tests that prove my feature, policy, or fix is effective and works
  • [x] New and existing tests pass locally with my changes
  • [ ] Any dependent changes have been merged and published in downstream modules

gruebel avatar Sep 13 '22 22:09 gruebel

kustomize too?

schosterbarak avatar Sep 15 '22 09:09 schosterbarak

kustomize too?

done

gruebel avatar Sep 16 '22 21:09 gruebel