[Security] MEDIUM: 25 infrastructure issue(s) #229

New issue

Closed

opened 2026-05-17 10:13:43 +00:00 by Mark · 1 comment

Mark commented

2026-05-17 10:13:43 +00:00

Owner

Checkov Infrastructure Scan Findings

MEDIUM CKV_K8S_8: Liveness Probe Should be Configured
File: ? (line 1)
MEDIUM CKV_K8S_31: Ensure that the seccomp profile is set to docker/default or runtime/default
File: ? (line 1)
MEDIUM CKV_K8S_22: Use read-only filesystem for containers where possible
File: ? (line 1)
MEDIUM CKV_K8S_14: Image Tag should be fixed - not latest or blank
File: ? (line 1)
MEDIUM CKV_K8S_23: Minimize the admission of root containers
File: ? (line 1)
MEDIUM CKV_K8S_40: Containers should run as a high UID to avoid host conflict
File: ? (line 1)
MEDIUM CKV_K8S_21: The default namespace should not be used
File: ? (line 1)
MEDIUM CKV_K8S_29: Apply security context to your pods and containers
File: ? (line 1)
MEDIUM CKV_K8S_20: Containers should not run with allowPrivilegeEscalation
File: ? (line 1)
MEDIUM CKV_K8S_38: Ensure that Service Account Tokens are only mounted where necessary
File: ? (line 1)
MEDIUM CKV_K8S_30: Apply security context to your containers
File: ? (line 1)
MEDIUM CKV_K8S_37: Minimize the admission of containers with capabilities assigned
File: ? (line 1)
MEDIUM CKV_K8S_15: Image Pull Policy should be Always
File: ? (line 1)
MEDIUM CKV_K8S_9: Readiness Probe Should be Configured
File: ? (line 1)
MEDIUM CKV_K8S_28: Minimize the admission of containers with the NET_RAW capability
File: ? (line 1)
MEDIUM CKV_K8S_43: Image should use digest
File: ? (line 1)
MEDIUM CKV_K8S_21: The default namespace should not be used
File: ? (line 1)
MEDIUM CKV_K8S_21: The default namespace should not be used
File: ? (line 8)
MEDIUM CKV_K8S_21: The default namespace should not be used
File: ? (line 22)
MEDIUM CKV2_K8S_6: Minimize the admission of pods which lack an associated NetworkPolicy
File: ? (line 1)
MEDIUM CKV_DOCKER_3: Ensure that a user for the container has been created
File: ? (line 1)
MEDIUM CKV_DOCKER_3: Ensure that a user for the container has been created
File: ? (line 1)
MEDIUM CKV_DOCKER_2: Ensure that HEALTHCHECK instructions have been added to container images
File: ? (line 1)
MEDIUM CKV_DOCKER_3: Ensure that a user for the container has been created
File: ? (line 1)
MEDIUM CKV_DOCKER_2: Ensure that HEALTHCHECK instructions have been added to container images
File: ? (line 1)

Auto-filed by security-sweep.py on 2026-05-17 03:13 UTC

## Checkov Infrastructure Scan Findings - **MEDIUM** `CKV_K8S_8`: Liveness Probe Should be Configured *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_31`: Ensure that the seccomp profile is set to docker/default or runtime/default *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_22`: Use read-only filesystem for containers where possible *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_14`: Image Tag should be fixed - not latest or blank *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_23`: Minimize the admission of root containers *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_40`: Containers should run as a high UID to avoid host conflict *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_21`: The default namespace should not be used *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_29`: Apply security context to your pods and containers *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_20`: Containers should not run with allowPrivilegeEscalation *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_38`: Ensure that Service Account Tokens are only mounted where necessary *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_30`: Apply security context to your containers *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_37`: Minimize the admission of containers with capabilities assigned *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_15`: Image Pull Policy should be Always *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_9`: Readiness Probe Should be Configured *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_28`: Minimize the admission of containers with the NET_RAW capability *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_43`: Image should use digest *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_21`: The default namespace should not be used *File: `?` (line 1)* - **MEDIUM** `CKV_K8S_21`: The default namespace should not be used *File: `?` (line 8)* - **MEDIUM** `CKV_K8S_21`: The default namespace should not be used *File: `?` (line 22)* - **MEDIUM** `CKV2_K8S_6`: Minimize the admission of pods which lack an associated NetworkPolicy *File: `?` (line 1)* - **MEDIUM** `CKV_DOCKER_3`: Ensure that a user for the container has been created *File: `?` (line 1)* - **MEDIUM** `CKV_DOCKER_3`: Ensure that a user for the container has been created *File: `?` (line 1)* - **MEDIUM** `CKV_DOCKER_2`: Ensure that HEALTHCHECK instructions have been added to container images *File: `?` (line 1)* - **MEDIUM** `CKV_DOCKER_3`: Ensure that a user for the container has been created *File: `?` (line 1)* - **MEDIUM** `CKV_DOCKER_2`: Ensure that HEALTHCHECK instructions have been added to container images *File: `?` (line 1)* --- *Auto-filed by security-sweep.py on 2026-05-17 03:13 UTC*