14 lines
621 B
YAML
14 lines
621 B
YAML
soft-fail: false
|
|
quiet: true
|
|
compact: true
|
|
framework:
|
|
- all
|
|
skip-check:
|
|
- CKV_K8S_21 # Default namespace usage
|
|
- CKV_K8S_43 # Image tag validation (using latest tags intentionally)
|
|
- CKV_K8S_14 # Image tag should be fixed (same as above)
|
|
- CKV_K8S_22 # Read-only filesystem (IRC apps need to write to volumes)
|
|
- CKV_K8S_40 # Containers should run as high UID (ZNC LinuxServer container needs flexibility)
|
|
- CKV_K8S_23 # Minimize admission of root containers (ZNC requires root for s6-overlay init)
|
|
- CKV_K8S_20 # Containers should not run with allowPrivilegeEscalation (ZNC needs init flexibility)
|