Stepan Stipl

Virus scanning as part of release process

1

While we're conscious about SDLC process security, and therefore highly unlikely we might consider adding a virus scan as an additional step to our release process - related to #178.

Add docs for auth process

1

Document order and precedence of how K8s API credentials are picked up (related to #237)

Integration test for additional-kinds

1

We broke additional kinds functionality (#204, #209), this should really be covered with integration test.

We incorrectly assign Chart namespace even for Cluster-level resources. These should not have a namespace: ``` __________________________________________________________________________________________ >>> Deprecated APIs removed in 1.22

Currently, when adding/updating new resources, changes have to be made at two places, in-sync - the rego rules, and cluster collector. This is difficult to keep in sync. Also, the...

Refactor to support resource version evolution

2

As we want to provide most relevant advice to users, current implementation has its limitation as it's not able to support incremental recommendations, example being Ingress: ``` "Ingress": { "old":...

Just as a convenience option.

Or script even? not sure. But at lease mention the script is for Linux, and on Win you should download & extract manually.

Add tests for empty output format to make sure we keep consistent output with regards to use in CI/integration (#31) - text stdout output should be empty if no issues...