Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Clarification on "points" and "advise", especially for RunAsNonRoot #504

Open
huornlmj opened this issue Aug 15, 2023 · 0 comments
Open
Labels
Projects

Comments

@huornlmj
Copy link

Your question
I observed that the output of $ kubesec print-rules shows values for both "points" and "advise". I do not understand how the advise for the .runAsNonRoot context works though. Why does it have 1 point and 10 advise? For example, where does the 10 advise points come into play and in what situations?

 {
    "id": "RunAsNonRoot",
    "selector": "containers[] .securityContext .runAsNonRoot == true",
    "reason": "Force the running image to run as a non-root user to ensure least privilege",
    "kinds": [
      "Pod",
      "Deployment",
      "StatefulSet",
      "DaemonSet"
    ],
    "points": 1,
    "advise": 10
  }
@controlplane-bot controlplane-bot added this to To Do in Kubesec Aug 15, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
Kubesec
  
To Do
Development

No branches or pull requests

1 participant