Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(query): cover additional deprecated API versions in k8s rule #5867

Merged
merged 3 commits into from
Oct 7, 2022

Conversation

Churro
Copy link
Contributor

@Churro Churro commented Oct 1, 2022

Proposed Changes

  • Add more CRD deprecations to the rule (previously mentioned here: fix(query): covered additional deprecated API versions in k8s rule #4830 (review))
  • Extend description
  • Change category to "Best Practices": Using a Kubernetes resource with a deprecated API version is not a security risk, comparable to others in that category (e.g. seccomp profile missing). Newer versions are not "more secure", only less likely to cause problems during K8s upgrades.

I submit this contribution under the Apache-2.0 license.

@rafaela-soares rafaela-soares added query New query feature community Community contribution labels Oct 3, 2022
Copy link
Contributor

@rafaela-soares rafaela-soares left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hello, @Churro! Thank you so much for remembering and updating it!

Regarding the category suggestion, I will talk with the AppSec team and I will let you know as soon as possible.

Meanwhile, can you please add the new result (line 94) in the positive_expect_result.json?

@Churro
Copy link
Contributor Author

Churro commented Oct 3, 2022

Done, thanks for the hint, @rafaela-soares 👍

@rjegoncalves
Copy link

Hi Johannes (@Churro),

Another relevant suggestion. Thank you!
We agree with your proposal. Our only addition, and also aligned with your comments, is to lower the severity, in this case, for Low.

@Churro
Copy link
Contributor Author

Churro commented Oct 6, 2022

Done, thanks for cross-checking 😊

Copy link
Contributor

@rafaela-soares rafaela-soares left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 🚀

@rafaela-soares rafaela-soares merged commit 7130206 into Checkmarx:master Oct 7, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
community Community contribution query New query feature
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants