CKV_K8S_38: "Ensure that Service Account Tokens are only mounted where necessary"

CKV_K8S_35: "Prefer using secrets as files over secrets as environment variables"

CKV_K8S_43: "Image should use digest"

CKV_K8S_15: "Image Pull Policy should be Always"

CKV_K8S_35: "Prefer using secrets as files over secrets as environment variables"

CKV_K8S_43: "Image should use digest"

CKV_K8S_40: "Containers should run as a high UID to avoid host conflict"

CKV2_K8S_6: "Minimize the admission of pods which lack an associated NetworkPolicy"

CKV2_K8S_6: "Minimize the admission of pods which lack an associated NetworkPolicy"

CKV2_K8S_5: "No ServiceAccount/Node should be able to read all secrets"

Uploading multiple SARIF runs with the same category is deprecated and will be removed on June 4, 2025. Please update your workflow to upload a single run per category. For more information, see https://github.blog/changelog/2024-05-06-code-scanning-will-stop-combining-runs-from-a-single-upload

The following actions use a deprecated Node.js version and will be forced to run on node20: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d. For more info: https://github.blog/changelog/2024-03-07-github-actions-all-actions-will-run-on-node20-instead-of-node16-by-default/

Failed to restore: "/usr/bin/tar" failed with error: The process '/usr/bin/tar' failed with exit code 2

1 issue was detected with this workflow: Please specify an on.push hook to analyze and see code scanning alerts from the default branch on the Security tab.