12 Commits (dependabot/go_modules/golang.org/x/net-0.23.0)

Author	SHA1	Message	Date
Andrey Polovov	faeceb5dfa	job.yaml: Adding /var/lib/cni mounts for proper CIS 1.1.9 and 1.1.0 checking (#1547) ... Signed-off-by: Andrey Polovov <andrey.polovov@flant.com> Signed-off-by: Andrey Pavlov <andrey.pavlov@flant.com> Co-authored-by: Andrey Pavlov <andrey.pavlov@flant.com> Co-authored-by: chenk <hen.keinan@gmail.com>	3 months ago
Dmitriy Dubson	113ee337ee	Update job-master.yaml for K8s 1.24.x labels/tolerations (#1250) (#1251)	2 years ago
rhtenhove	ebdfba55cc	fix: fully qualified image names (#1206)	2 years ago
Nick	cb7ee765a3	K8s Job Command Clean (#923) ... * Update commands * oopsy on run command * update reference version for iks to be 120 Co-authored-by: Yoav Rotem <yoavrotems97@gmail.com>	3 years ago
Huang Huang	182e64753e	mount /etc/passwd and /etc/group for etcd ownership related checks (#868)	3 years ago
Dmytro Oboznyi	d528400881	Fix file permissions false positive (#800) ... * Fix file permissions false positive Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Added kops files to config path list Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Automated CNI files checks Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fixed linting Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fixed to right folder CNI test Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Changed Automated to manual Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Removed changes from remediation Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Added path to config files Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Update cfg/cis-1.6/master.yaml Co-authored-by: Yoav Rotem <yoavrotems97@gmail.com> Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fix Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Fix to job.yaml Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Add extra mountpoints Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> * Revert audit scripts changes Signed-off-by: Dmytro Oboznyi <dmytro.oboznyi@syncier.com> Co-authored-by: Yoav Rotem <yoavrotems97@gmail.com>	3 years ago
Neha Viswanathan	b2d481812f	deprecate master and node subcommands (#812) ... * deprecate master and node subcommands * deprecate master and node subcommands	3 years ago
Huang Huang	17cd104788	Fixes issue #574: change the PATH in container (#577) ... * Fixes issue #574: change the PATH in container And change to use `/usr/local/mount-from-host/bin` as mount path. Fixes #574 * Fix integration tests	4 years ago
Nick Smith	77f66511e7	Set all host-mounted volumes to be read-only. (#569) ... By setting all host-mounted volumes to be read-only we reduce the likelihood any host filesystem is modified by running kube-bench.	4 years ago
James Ward	5f34058dc7	Support Linting YAML as part of Travis CI build (#554) ... * add yamllint command to travis CI installs and runs a linter across the YAML in the project to ensure consistency in the written YAML. this uses yamllint and the default yamllint config with "truthy" and "line-length" disabled. * run dos2unix on CRLF files * YAMLLINT: remove trailing spaces * YAMLLint: add YAML document start * YAMLLint: too many spaces around bracket * YAMLLint: fix indentation * YAMLLint: remove duplicate key * YAMLLint: newline at end of file * YAMLLint: Too few spaces after comma * YAMLLint: too many spaces after colon	4 years ago
Liz Rice	3422b9102f	Add comment for why /usr/bin is mounted	5 years ago
Liz Rice	8021610e46	For #197 - create job YAML files that mount host volumes as needed	5 years ago