arno/kube-bench
1
0
Fork 0
mirror of https://github.com/aquasecurity/kube-bench.git synced 2025-03-05 01:26:18 +00:00
Code Issues Releases Wiki Activity

fix: typo of applicaions which should have been applications (#1819)

Browse Source
This commit is contained in:
Simon Alexander Alsing 2025-03-04 07:27:13 +01:00 committed by GitHub
parent 949999145e
commit c40b2a72e2
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
20 changed files with 20 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cfg/ack-1.0/policies.yaml
View File

@ -132,7 +132,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications runnning on your cluster. Where a namespace Review the use of capabilites in applications runnning on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/cis-1.10/policies.yaml
View File

@ -443,7 +443,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/cis-1.20/policies.yaml
View File

@ -146,7 +146,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/cis-1.23/policies.yaml
View File

@ -153,7 +153,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/cis-1.24/policies.yaml
View File

@ -153,7 +153,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/cis-1.5/policies.yaml
View File

@ -132,7 +132,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/cis-1.6/policies.yaml
View File

@ -132,7 +132,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/cis-1.7/policies.yaml
View File

@ -188,7 +188,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/cis-1.8/policies.yaml
View File

@ -188,7 +188,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/cis-1.9/policies.yaml
View File

@ -289,7 +289,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/k3s-cis-1.23/policies.yaml
View File

@ -153,7 +153,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/rh-1.0/policies.yaml
View File

@ -184,7 +184,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider contains applications which do not require any Linux capabities to operate consider
adding a SCC which forbids the admission of containers which do not drop all capabilities. adding a SCC which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/rke-cis-1.23/policies.yaml
View File

@ -153,7 +153,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/rke-cis-1.24/policies.yaml
View File

@ -193,7 +193,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/rke-cis-1.7/policies.yaml
View File

@ -191,7 +191,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/rke2-cis-1.23/policies.yaml
View File

@ -153,7 +153,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/rke2-cis-1.24/policies.yaml
View File

@ -153,7 +153,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/rke2-cis-1.7/policies.yaml
View File

@ -188,7 +188,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
scored: false scored: false

2
cfg/tkgi-1.2.53/policies.yaml
View File

@ -160,7 +160,7 @@ groups:
type: "manual" type: "manual"
remediation: | remediation: |
Review the use of capabilites in applications running on your cluster. Where a namespace Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
Exception Exception
This is site-specific setting. This is site-specific setting.

2
integration/testdata/Expected_output.data vendored
View File

@ -385,7 +385,7 @@ UIDs not including 0.
it is set to an empty array. it is set to an empty array.
5.2.9 Review the use of capabilites in applications running on your cluster. Where a namespace 5.2.9 Review the use of capabilites in applications running on your cluster. Where a namespace
contains applicaions which do not require any Linux capabities to operate consider adding contains applications which do not require any Linux capabities to operate consider adding
a PSP which forbids the admission of containers which do not drop all capabilities. a PSP which forbids the admission of containers which do not drop all capabilities.
5.3.1 If the CNI plugin in use does not support network policies, consideration should be given to 5.3.1 If the CNI plugin in use does not support network policies, consideration should be given to