network-operator/.trivyignore.yaml at main · intel/network-operator · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
misconfigurations:
  - id: AVD-KSV-0049
    statement: "operator requires access to configmaps"
    paths:
      - operator.yaml

  - id: AVD-KSV-0048
    statement: "operator requires access to various things"
    paths:
      - operator.yaml

  - id: AVD-KSV-0013
    statement: "using :latest is ok from repo"
    paths:
      - operator.yaml

  - id: AVD-KSV-0050
    statement: "operator has to have access to rolebindings to be able to provision them"
    paths:
      - operator.yaml

  - id: AVD-KSV-0009
    statement: "host-network is required for linkdiscovery"
    paths:
      - discovery.yaml

  - id: AVD-KSV-0012
    statement: "linkdiscovery requires root account"
    paths:
      - discovery.yaml

  - id: AVD-KSV-0022
    statement: "linkdiscovery requires additional capabilities"
    paths:
      - discovery.yaml

  - id: AVD-KSV-0023
    statement: "linkdiscovery requires hostpath for NFD and Gaudi files"
    paths:
      - discovery.yaml

  - id: AVD-KSV-0119
    statement: "linkdiscovery requires NET_RAW to operate"
    paths:
      - discovery.yaml

  - id: AVD-KSV-0104
    statement: "linkdiscovery's seccomp is defined in the operator namespace"
    paths:
      - discovery.yaml

  - id: AVD-DS-0002
    statement: "linkdiscovery's requires root"

  - id: AVD-KSV-0125
    statement: "docker.io is a trusted registry for us"
    paths:
      - operator.yaml
      - discovery.yaml

  - id: AVD-KSV-0118
    statement: "container is scheduled to a namespace selected by the user. Not to default namespace."
    paths:
      - discovery.yaml

  - id: AVD-DS-0017
    statement: "apt update is followed by apt source to fetch sources as required by package licenses"
    paths:
      - Dockerfile.linkdiscovery

  # No need to restrict registries yet
  - id: AVD-KSV-0032
  - id: AVD-KSV-0033
  - id: AVD-KSV-0034
  - id: AVD-KSV-0035
  - id: AVD-KSV-0013