Skip to content

Commit c719e57

Browse files
committed
Refine trusted images
1 parent 4c38cc2 commit c719e57

File tree

1 file changed

+2
-3
lines changed

1 file changed

+2
-3
lines changed

data/BuildandDeployment.yml

Lines changed: 2 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -240,9 +240,8 @@ Deployment:
240240
- 12.1.4
241241
Usage of trusted images:
242242
risk: Developers or operations might start random images in the production cluster which have malicous code or known vulnerabilities.
243-
Measure: Whitelist signed artifacts/images or whitelist a trusted (internal) registry.
244-
implementation: Kubernetes Admission Controller can whitelist registries and/or whitelist a signing key.
245-
dependsOn: Signing of artifacts
243+
measure: Create image assessment criteria, perform an evaluation of images and create a whitelist of artifacts/container images/virtual machine images.
244+
implementation: Kubernetes Admission Controller can whitelist registries and/or whitelist a signing key.
246245
difficultyOfImplementation:
247246
knowledge: 1
248247
time: 1

0 commit comments

Comments
 (0)