You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: data/BuildandDeployment.yml
+2-3Lines changed: 2 additions & 3 deletions
Original file line number
Diff line number
Diff line change
@@ -240,9 +240,8 @@ Deployment:
240
240
- 12.1.4
241
241
Usage of trusted images:
242
242
risk: Developers or operations might start random images in the production cluster which have malicous code or known vulnerabilities.
243
-
Measure: Whitelist signed artifacts/images or whitelist a trusted (internal) registry.
244
-
implementation: Kubernetes Admission Controller can whitelist registries and/or whitelist a signing key.
245
-
dependsOn: Signing of artifacts
243
+
measure: Create image assessment criteria, perform an evaluation of images and create a whitelist of artifacts/container images/virtual machine images.
244
+
implementation: Kubernetes Admission Controller can whitelist registries and/or whitelist a signing key.
0 commit comments