helm-push icon indicating copy to clipboard operation
helm-push copied to clipboard

can't pass

Open ozbillwang opened this issue 1 year ago • 0 comments

can't pass security scanning after install helm-push in docker images.

https://github.com/alpine-docker/k8s/issues/40

/root/.local/share/helm/plugins/helm-push/testdata/tls/server.key
/root/.local/share/helm/plugins/helm-push/testdata/tls/client.key
/root/.cache/helm/plugins/https-github.com-chartmuseum-helm-push/testdata/tls/client.key
/root/.cache/helm/plugins/https-github.com-chartmuseum-helm-push/testdata/tls/server.key

after discussed we found the test data in helm-push are not cleaned, so it is not suitable for prod environment.

can I ask to clean below folders when install this plugin

/root/.local/share/helm/plugins/helm-push/testdata/* 
/root/.local/share/helm/plugins/helm-push/acceptance_tests/*

it can be installed in other place, if defined environment variable HELM_PLUGINS, refer: https://helm.sh/docs/topics/plugins/#environment-variables

ozbillwang avatar Jan 18 '23 06:01 ozbillwang