farhoodliquor/irc
Archived
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

chore: add notReadOnlyRootFilesystem exemption and lower Polaris threshold

Browse Source
This commit is contained in:
Chris Farhood
2026-02-08 19:38:48 -05:00
parent 99f9ec453d
commit 991b1f4407
2 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.gitea/workflows/best-practices.yaml
+1 -1
View File
@@ -74,7 +74,7 @@ jobs:
polaris audit --audit-path manifests.yaml \ polaris audit --audit-path manifests.yaml \
--format pretty \ --format pretty \
--set-exit-code-on-danger \ --set-exit-code-on-danger \
--set-exit-code-below-score 70 --set-exit-code-below-score 50
fi fi
resource-analysis: resource-analysis:
znc/statefulset.yaml
+1
View File
@@ -13,6 +13,7 @@ metadata:
polaris.fairwinds.com/dangerousCapabilities-exempt: "true" polaris.fairwinds.com/dangerousCapabilities-exempt: "true"
polaris.fairwinds.com/insecureCapabilities-exempt: "true" polaris.fairwinds.com/insecureCapabilities-exempt: "true"
polaris.fairwinds.com/hostNetworkSet-exempt: "true" polaris.fairwinds.com/hostNetworkSet-exempt: "true"
polaris.fairwinds.com/notReadOnlyRootFilesystem-exempt: "true"
spec: spec:
selector: selector:
matchLabels: matchLabels: