CKV_K8S_19

aad-pod-identity-aad-pod-identity

Bokeh Plot Bokeh.set_log_level("info"); {"dd0533d1-4c53-4177-ab93-58f7939d16a6":{"defs":[],"roots":{"references":[{"attributes":{"data_source":{"id":"1367"},"glyph":{"id":"1396"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"1369"}},"id":"1368","type":"GlyphRenderer"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"1395","type":"CategoricalColorMapper"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"1359","type":"HoverTool"},{"attributes":{},"id":"1338","type":"BasicTicker"},{"attributes":{},"id":"1413","type":"BasicTickFormatter"},{"attributes":{"source":{"id":"1367"}},"id":"1369","type":"CDSView"},{"attributes":{},"id":"1423","type":"NodesOnly"},{"attributes":{},"id":"1408","type":"AllLabels"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"1351","type":"BoxAnnotation"},{"attributes":{"formatter":{"id":"1413"},"major_label_policy":{"id":"1411"},"ticker":{"id":"1342"}},"id":"1341","type":"LinearAxis"},{"attributes":{},"id":"1345","type":"PanTool"},{"attributes":{"source":{"id":"1371"}},"id":"1373","type":"CDSView"},{"attributes":{"below":[{"id":"1337"}],"center":[{"id":"1340"},{"id":"1344"}],"height":768,"left":[{"id":"1341"}],"renderers":[{"id":"1365"},{"id":"1405"}],"title":{"id":"1327"},"toolbar":{"id":"1352"},"width":1024,"x_range":{"id":"1329"},"x_scale":{"id":"1333"},"y_range":{"id":"1331"},"y_scale":{"id":"1335"}},"id":"1326","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"1411","type":"AllLabels"},{"attributes":{},"id":"1348","type":"SaveTool"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_20","CKV_K8S_15","CKV_K8S_25","CKV_K8S_9","CKV_K8S_28","CKV_K8S_37","CKV_K8S_49","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_20","CKV_K8S_15","CKV_K8S_25","CKV_K8S_9","mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.5","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_28","CKV_K8S_37","ClusterRole.default","CVE-2021-33574","CVE-2016-2781","CVE-2021-40528"],"start":["aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","aad-pod-identity/aad-pod-identity","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_20","CKV_K8S_15","CKV_K8S_9","Deployment.default","Deployment.default","CKV_K8S_49","mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.5","mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.5","mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.5"]},"selected":{"id":"1429"},"selection_policy":{"id":"1428"}},"id":"1371","type":"ColumnDataSource"},{"attributes":{},"id":"1428","type":"UnionRenderers"},{"attributes":{},"id":"1335","type":"LinearScale"},{"attributes":{"edge_renderer":{"id":"1372"},"inspection_policy":{"id":"1418"},"layout_provider":{"id":"1374"},"node_renderer":{"id":"1368"},"selection_policy":{"id":"1423"}},"id":"1365","type":"GraphRenderer"},{"attributes":{},"id":"1346","type":"WheelZoomTool"},{"attributes":{"graph_layout":{"CKV_K8S_15":[0.12956265636798742,-0.06400563067211652],"CKV_K8S_19":[0.15633926121507422,0.02527279097137981],"CKV_K8S_20":[-0.06998160259021269,-0.126477058454207],"CKV_K8S_22":[-0.028735200075643872,-0.17394454163134843],"CKV_K8S_23":[0.08749913962567815,-0.1919543799740974],"CKV_K8S_25":[0.21007385746826845,-0.051020608263380125],"CKV_K8S_28":[0.01106250641196291,-0.2786778624730222],"CKV_K8S_29":[0.15868721118257492,-0.11684247983502394],"CKV_K8S_31":[0.05957977266824845,0.01610359731796481],"CKV_K8S_37":[0.10457800711635604,-0.2751987102424933],"CKV_K8S_38":[-0.060841920740619636,-0.07823211948241286],"CKV_K8S_40":[-0.010785191163629993,-0.005240637140737319],"CKV_K8S_43":[-0.05568828520808468,-0.03128243188430873],"CKV_K8S_49":[-0.13917361687946728,-0.29340628179992523],"CKV_K8S_9":[0.1437742818318626,-0.1659731439686649],"CVE-2016-2781":[0.07541687662561573,0.43409178219622035],"CVE-2021-33574":[0.1664344663568756,0.3974725719290523],"CVE-2021-40528":[-0.018385912147073136,0.4046844084318818],"ClusterRole.default":[-0.26849893620359594,-0.4035665575264393],"DaemonSet.default":[0.06123521176791133,-0.028886438648026636],"Deployment.default":[0.028924881012432308,-0.13712937635607225],"aad-pod-identity/aad-pod-identity":[0.049181851611075814,-0.12407542973191202],"deps":[-0.8590429866281752,1.0],"mcr.microsoft.com/oss/azure/aad-pod-identity/nmi:v1.8.5":[0.06878367037457762,0.2682885372376889]}},"id":"1374","type":"StaticLayoutProvider"},{"attributes":{},"id":"1349","type":"ResetTool"},{"attributes":{},"id":"1342","type":"BasicTicker"},{"attributes":{},"id":"1426","type":"UnionRenderers"},{"attributes":{"axis":{"id":"1337"},"ticker":null},"id":"1340","type":"Grid"},{"attributes":{},"id":"1410","type":"BasicTickFormatter"},{"attributes":{"overlay":{"id":"1351"}},"id":"1347","type":"BoxZoomTool"},{"attributes":{"callback":null},"id":"1360","type":"TapTool"},{"attributes":{"data_source":{"id":"1371"},"glyph":{"id":"1370"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"1373"}},"id":"1372","type":"GlyphRenderer"},{"attributes":{},"id":"1427","type":"Selection"},{"attributes":{},"id":"1331","type":"DataRange1d"},{"attributes":{"axis":{"id":"1341"},"dimension":1,"ticker":null},"id":"1344","type":"Grid"},{"attributes":{},"id":"1329","type":"DataRange1d"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,6.5,5.9],"description":["aad-pod-identity/aad-pod-identity",null,"Containers should not share the host network namespace","DaemonSet.aad-pod-identity-nmi.default (container 0) - nmi","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Use read-only filesystem for containers where possible"

View BlastRadius Graph

adfinis-openshift-etcd-backup

Bokeh Plot Bokeh.set_log_level("info"); {"d2742249-638e-41e6-94d7-33c9712f7850":{"defs":[],"roots":{"references":[{"attributes":{},"id":"6532","type":"SaveTool"},{"attributes":{"source":{"id":"6555"}},"id":"6557","type":"CDSView"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"6609","type":"BoxAnnotation"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"6551"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"6589","type":"LabelSet"},{"attributes":{},"id":"6592","type":"AllLabels"},{"attributes":{"text":"adfinis-openshift-etcd-backup"},"id":"6511","type":"Title"},{"attributes":{},"id":"6597","type":"BasicTickFormatter"},{"attributes":{},"id":"6602","type":"NodesOnly"},{"attributes":{},"id":"6612","type":"UnionRenderers"},{"attributes":{},"id":"6607","type":"NodesOnly"},{"attributes":{},"id":"6519","type":"LinearScale"},{"attributes":{},"id":"6513","type":"DataRange1d"},{"attributes":{"edge_renderer":{"id":"6556"},"inspection_policy":{"id":"6602"},"layout_provider":{"id":"6558"},"node_renderer":{"id":"6552"},"selection_policy":{"id":"6607"}},"id":"6549","type":"GraphRenderer"},{"attributes":{"data_source":{"id":"6555"},"glyph":{"id":"6554"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"6557"}},"id":"6556","type":"GlyphRenderer"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"6579"}},"size":{"value":20}},"id":"6580","type":"Circle"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.1,7.8,7.5,7.5,7.5,6.4,6.1,7.5,5.9,5.9,5.3,5.3],"description":["adfinis/openshift-etcd-backup",null,"Containers should not share the host network namespace","CronJob.RELEASE-NAME-openshift-etcd-backup.default (container 0) - openshift-etcd-backup","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Containers should not share the host process ID namespace","Image should use digest","Use read-only filesystem for containers where possible"

View BlastRadius Graph

arhatdev-abbot

Bokeh Plot Bokeh.set_log_level("info"); {"d683f909-9f1e-47e3-9863-9c4a77ec3c62":{"defs":[],"roots":{"references":[{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"36683"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"36721","type":"LabelSet"},{"attributes":{},"id":"36665","type":"ResetTool"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,9.1,7.5,7.5,7.5,7.4,7.4,5.9,5.9,5.9,5.5],"description":["arhatdev/abbot",null,"Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-abbot.default (container 0) - abbot","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Containers should not share the host process ID namespace","Image should use digest","Use read-only filesystem for containers where possible"

View BlastRadius Graph

arhatdev-aranya

Bokeh Plot Bokeh.set_log_level("info"); {"e253d2e7-fd00-407d-a014-9a20ed2ebb7b":{"defs":[],"roots":{"references":[{"attributes":{},"id":"37050","type":"BasicTickFormatter"},{"attributes":{"overlay":{"id":"37065"}},"id":"37001","type":"BoxSelectTool"},{"attributes":{"callback":null},"id":"37000","type":"TapTool"},{"attributes":{"graph_layout":{"CKV_K8S_10":[-0.18835545824725974,-0.08862701179366933],"CKV_K8S_11":[-0.2520200353032367,-0.03855508809557196],"CKV_K8S_12":[-0.2304673077939933,-0.07074837892481683],"CKV_K8S_13":[-0.2279101216726881,0.11364564609015872],"CKV_K8S_14":[-0.13038466932990467,0.11466069600630939],"CKV_K8S_19":[-0.18447578271163753,0.1014600951180469],"CKV_K8S_20":[-0.257575758206175,0.07972116095603576],"CKV_K8S_22":[-0.2801257672375596,0.040455137214016376],"CKV_K8S_23":[-0.2783779280964104,-0.00859625526689415],"CKV_K8S_28":[-0.09323461667543846,0.10239230505989762],"CKV_K8S_31":[-0.16503567069592492,0.1395899304472199],"CKV_K8S_37":[-0.1875219851420164,-0.04050470226216006],"CKV_K8S_38":[-0.07920163499128464,0.05996617263629902],"CKV_K8S_40":[-0.23790870186542165,0.01854728899188003],"CKV_K8S_43":[-0.07840550901025078,0.006397678069077363],"CKV_K8S_49":[-0.2702708122271378,0.2146038260557015],"CKV_K8S_8":[-0.14256833100340197,-0.07657969863668238],"CKV_K8S_9":[-0.10525154062035394,-0.045934029701358514],"CVE-2020-26160":[0.32370180509449187,-0.030981082571848464],"CVE-2021-23840":[0.25421963532952657,0.04464167948166368],"CVE-2021-23841":[0.33191273226222023,-0.08636060633982831],"CVE-2021-28831":[0.23994945844685736,-0.1977571620810083],"CVE-2021-30139":[0.15276032006436058,-0.15649378379124348],"CVE-2021-3449":[0.31367042563028236,-0.13780461852249679],"CVE-2021-3450":[0.20088400851206198,0.027479338524148834],"CVE-2021-36159":[0.18633845731324936,-0.2002444383037217],"CVE-2021-3711":[0.2724915681107202,-0.16357971082661224],"CVE-2021-3712":[0.2691139166558456,-0.07404796061766926],"ClusterRole.default":[-0.3150239733707524,0.33591139361362676],"Deployment.default":[-0.13614630830718596,0.012178598084260622],"PRISMA-2021-0118":[0.2968051055745956,0.012359924108368276],"arhatdev/aranya":[-0.18741204226465827,0.03949975612552056],"deps":[1.0,0.02218653896638934],"ghcr.io/arhat-dev/aranya:latest":[0.18582652177848044,-0.06888263781303942]}},"id":"37014","type":"StaticLayoutProvider"},{"attributes":{"below":[{"id":"36977"}],"center":[{"id":"36980"},{"id":"36984"}],"height":768,"left":[{"id":"36981"}],"renderers":[{"id":"37005"},{"id":"37045"}],"title":{"id":"36967"},"toolbar":{"id":"36992"},"width":1024,"x_range":{"id":"36969"},"x_scale":{"id":"36973"},"y_range":{"id":"36971"},"y_scale":{"id":"36975"}},"id":"36966","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"36985","type":"PanTool"},{"attributes":{"formatter":{"id":"37050"},"major_label_policy":{"id":"37048"},"ticker":{"id":"36978"}},"id":"36977","type":"LinearAxis"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"37007"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"37045","type":"LabelSet"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"37035","type":"CategoricalColorMapper"},{"attributes":{"overlay":{"id":"36991"}},"id":"36987","type":"BoxZoomTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"36991","type":"BoxAnnotation"},{"attributes":{},"id":"36973","type":"LinearScale"},{"attributes":{"formatter":{"id":"37053"},"major_label_policy":{"id":"37051"},"ticker":{"id":"36982"}},"id":"36981","type":"LinearAxis"},{"attributes":{},"id":"37053","type":"BasicTickFormatter"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_10","CKV_K8S_14","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_49","Deployment.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_10","CKV_K8S_14","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","ghcr.io/arhat-dev/aranya:latest","ClusterRole.default","CVE-2021-3711","CVE-2021-36159","PRISMA-2021-0118","CVE-2020-26160","CVE-2021-30139","CVE-2021-28831","CVE-2021-23840","CVE-2021-3712","CVE-2021-3450","CVE-2021-3449","CVE-2021-23841"],"start":["arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","arhatdev/aranya","CKV_K8S_19","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_49","ghcr.io/arhat-dev/aranya:latest","ghcr.io/arhat-dev/aranya:latest","ghcr.io/arhat-dev/aranya:latest","ghcr.io/arhat-dev/aranya:latest","ghcr.io/arhat-dev/aranya:latest","ghcr.io/arhat-dev/aranya:latest","ghcr.io/arhat-dev/aranya:latest","ghcr.io/arhat-dev/aranya:latest","ghcr.io/arhat-dev/aranya:latest","ghcr.io/arhat-dev/aranya:latest","ghcr.io/arhat-dev/aranya:latest"]},"selected":{"id":"37069"},"selection_policy":{"id":"37068"}},"id":"37011","type":"ColumnDataSource"},{"attributes":{},"id":"36971","type":"DataRange1d"},{"attributes":{"axis":{"id":"36981"},"dimension":1,"ticker":null},"id":"36984","type":"Grid"},{"attributes":{},"id":"37069","type":"Selection"},{"attributes":{},"id":"36986","type":"WheelZoomTool"},{"attributes":{"axis":{"id":"36977"},"ticker":null},"id":"36980","type":"Grid"},{"attributes":{},"id":"36969","type":"DataRange1d"},{"attributes":{"data_source":{"id":"37011"},"glyph":{"id":"37010"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"37013"}},"id":"37012","type":"GlyphRenderer"},{"attributes":{},"id":"37067","type":"Selection"},{"attributes":{},"id":"37068","type":"UnionRenderers"},{"attributes":{},"id":"37048","type":"AllLabels"},{"attributes":{"source":{"id":"37007"}},"id":"37009","type":"CDSView"},{"attributes":{},"id":"37051","type":"AllLabels"},{"attributes":{},"id":"36982","type":"BasicTicker"},{"attributes":{},"id":"37063","type":"NodesOnly"},{"attributes":{"source":{"id":"37011"}},"id":"37013","type":"CDSView"},{"attributes":{},"id":"37010","type":"MultiLine"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"37065","type":"BoxAnnotation"},{"attributes":{},"id":"36975","type":"LinearScale"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,9.1,7.8,7.7,7.5,7.5,7.5,7.4,7.4,5.9,5.9],"description":["arhatdev/aranya",null,"Containers should not share the host network namespace","Deployment.RELEASE-NAME-aranya.default (container 0) - aranya","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability"

View BlastRadius Graph

arhatdev-calico-node

Bokeh Plot Bokeh.set_log_level("info"); {"96af6450-3efc-42f0-add1-2afdc41f47f9":{"defs":[],"roots":{"references":[{"attributes":{},"id":"38022","type":"BasicTickFormatter"},{"attributes":{"data_source":{"id":"37983"},"glyph":{"id":"37982"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"37985"}},"id":"37984","type":"GlyphRenderer"},{"attributes":{"graph_layout":{"CKV_K8S_10":[-0.1506522978612829,-0.2781134837578174],"CKV_K8S_11":[-0.2576599113668111,-0.1180476316407903],"CKV_K8S_12":[-0.02542981607890512,-0.1446618408470108],"CKV_K8S_13":[-0.25231607394824385,-0.16577861127924176],"CKV_K8S_15":[-0.12045651362476537,-0.24026849400686487],"CKV_K8S_16":[-0.014492141179925736,-0.20681721745448486],"CKV_K8S_19":[-0.18975861168835406,-0.06259214620047755],"CKV_K8S_20":[-0.07046858067018111,-0.19941071166256566],"CKV_K8S_22":[-0.2422837927529103,-0.2191800540686968],"CKV_K8S_23":[-0.23647560182657448,-0.06664969587480811],"CKV_K8S_28":[-0.20270824488399436,-0.11835394003930313],"CKV_K8S_29":[-0.08940968598208443,-0.2810242624975157],"CKV_K8S_31":[-0.10931048111126151,-0.05440267415673565],"CKV_K8S_37":[-0.19922440546350637,-0.19961132404349402],"CKV_K8S_38":[-0.16130926104378332,-0.028595432144865353],"CKV_K8S_40":[-0.19504196658627176,-0.25571614452766156],"CKV_K8S_43":[-0.04563713097846725,-0.25213516137717396],"CVE-2020-28362":[0.24926240955460668,0.20969031888952402],"CVE-2020-28366":[0.16549866156799817,0.015702711441892968],"CVE-2020-28367":[0.24813623930265225,0.11475520106551941],"CVE-2021-27918":[0.200955867660901,0.23865572810597216],"CVE-2021-29923":[0.10623199165139655,0.17705458821991124],"CVE-2021-3114":[0.197957718197673,0.18760703752809374],"CVE-2021-31525":[0.1495088864845475,0.23733762275429574],"CVE-2021-33194":[0.09794843698047097,0.22305850254452944],"CVE-2021-33195":[0.2754533367832366,0.17119791131145642],"CVE-2021-33196":[0.29176408584022534,0.07328465124597326],"CVE-2021-33197":[0.2981094919646892,0.12575873034173118],"CVE-2021-33198":[0.2607172806848713,0.03848018452889839],"CVE-2021-34558":[0.22442174180766858,0.006464203156318112],"CVE-2021-36221":[0.06018015058126177,0.14951960841218903],"DaemonSet.default":[-0.08758716693952652,-0.11417839118121006],"arhatdev/calico-node":[-0.14886771113206781,-0.1680594927766356],"deps":[-0.34205247501014013,1.0],"docker.io/calico/cni:v3.19.1":[0.16242639297485925,0.09667786682063476],"docker.io/calico/pod2daemon-flexvol:v3.19.1":[0.15256917809199824,0.10835184317041326]}},"id":"37986","type":"StaticLayoutProvider"},{"attributes":{"source":{"id":"37979"}},"id":"37981","type":"CDSView"},{"attributes":{"below":[{"id":"37949"}],"center":[{"id":"37952"},{"id":"37956"}],"height":768,"left":[{"id":"37953"}],"renderers":[{"id":"37977"},{"id":"38017"}],"title":{"id":"37939"},"toolbar":{"id":"37964"},"width":1024,"x_range":{"id":"37941"},"x_scale":{"id":"37945"},"y_range":{"id":"37943"},"y_scale":{"id":"37947"}},"id":"37938","subtype":"Figure","type":"Plot"},{"attributes":{"formatter":{"id":"38022"},"major_label_policy":{"id":"38020"},"ticker":{"id":"37950"}},"id":"37949","type":"LinearAxis"},{"attributes":{"text":"arhatdev-calico-node"},"id":"37939","type":"Title"},{"attributes":{},"id":"37945","type":"LinearScale"},{"attributes":{"overlay":{"id":"38037"}},"id":"37973","type":"BoxSelectTool"},{"attributes":{},"id":"37961","type":"ResetTool"},{"attributes":{},"id":"37941","type":"DataRange1d"},{"attributes":{"callback":null},"id":"37972","type":"TapTool"},{"attributes":{},"id":"37962","type":"HelpTool"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_11","CKV_K8S_16","CKV_K8S_13","CKV_K8S_10","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_11","CKV_K8S_16","CKV_K8S_13","CKV_K8S_10","docker.io/calico/cni:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1","CVE-2021-33198","CVE-2021-33196","CVE-2021-33194","CVE-2021-29923","CVE-2021-27918","CVE-2020-28367","CVE-2020-28366","CVE-2020-28362","CVE-2021-33195","CVE-2021-34558","CVE-2021-3114","CVE-2021-36221","CVE-2021-31525","CVE-2021-33197","docker.io/calico/pod2daemon-flexvol:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1","docker.io/calico/pod2daemon-flexvol:v3.19.1"],"start":["arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","arhatdev/calico-node","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","docker.io/calico/cni:v3.19.1","docker.io/calico/cni:v3.19.1","docker.io/calico/cni:v3.19.1","docker.io/calico/cni:v3.19.1","docker.io/calico/cni:v3.19.1","docker.io/calico/cni:v3.19.1","docker.io/calico/cni:v3.19.1","docker.io/calico/cni:v3.19.1","docker.io/calico/cni:v3.19.1","docker.io/calico/cni:v3.19.1","docker.io/calico/cni:v3.19.1","docker.io/calico/cni:v3.19.1","docker.io/calico/cni:v3.19.1","docker.io/calico/cni:v3.19.1","CVE-2021-33198","CVE-2021-33196","CVE-2021-33194","CVE-2021-29923","CVE-2021-27918","CVE-2020-28367","CVE-2020-28366","CVE-2020-28362","CVE-2021-33195","CVE-2021-34558","CVE-2021-3114","CVE-2021-36221","CVE-2021-31525","CVE-2021-33197"]},"selected":{"id":"38041"},"selection_policy":{"id":"38040"}},"id":"37983","type":"ColumnDataSource"},{"attributes":{},"id":"37960","type":"SaveTool"},{"attributes":{},"id":"38038","type":"UnionRenderers"},{"attributes":{},"id":"37957","type":"PanTool"},{"attributes":{},"id":"38025","type":"BasicTickFormatter"},{"attributes":{"source":{"id":"37983"}},"id":"37985","type":"CDSView"},{"attributes":{"overlay":{"id":"37963"}},"id":"37959","type":"BoxZoomTool"},{"attributes":{},"id":"37943","type":"DataRange1d"},{"attributes":{},"id":"38035","type":"NodesOnly"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"38007","type":"CategoricalColorMapper"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"37979"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"38017","type":"LabelSet"},{"attributes":{"axis":{"id":"37953"},"dimension":1,"ticker":null},"id":"37956","type":"Grid"},{"attributes":{"data_source":{"id":"37979"},"glyph":{"id":"38008"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"37981"}},"id":"37980","type":"GlyphRenderer"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.3,6.5,6.5,5.9,5.9,5.3,null],"description":["arhatdev/calico-node",null,"Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-calico-node.kube-system (container 2) - flexvol-driver","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Use read-only filesystem for containers where possible"

View BlastRadius Graph

aws-appmesh-spire-agent

Bokeh Plot Bokeh.set_log_level("info"); {"962c5268-d5c5-4fd4-a5ff-dd001a679dd6":{"defs":[],"roots":{"references":[{"attributes":{"below":[{"id":"53825"}],"center":[{"id":"53828"},{"id":"53832"}],"height":768,"left":[{"id":"53829"}],"renderers":[{"id":"53853"},{"id":"53893"}],"title":{"id":"53815"},"toolbar":{"id":"53840"},"width":1024,"x_range":{"id":"53817"},"x_scale":{"id":"53821"},"y_range":{"id":"53819"},"y_scale":{"id":"53823"}},"id":"53814","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"53911","type":"NodesOnly"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"53839","type":"BoxAnnotation"},{"attributes":{},"id":"53914","type":"UnionRenderers"},{"attributes":{},"id":"53898","type":"BasicTickFormatter"},{"attributes":{},"id":"53823","type":"LinearScale"},{"attributes":{},"id":"53833","type":"PanTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"53913","type":"BoxAnnotation"},{"attributes":{"axis":{"id":"53825"},"ticker":null},"id":"53828","type":"Grid"},{"attributes":{},"id":"53837","type":"ResetTool"},{"attributes":{"active_multi":null,"tools":[{"id":"53833"},{"id":"53834"},{"id":"53835"},{"id":"53836"},{"id":"53837"},{"id":"53838"},{"id":"53847"},{"id":"53848"},{"id":"53849"}]},"id":"53840","type":"Toolbar"},{"attributes":{"data_source":{"id":"53855"},"glyph":{"id":"53884"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"53857"}},"id":"53856","type":"GlyphRenderer"},{"attributes":{"source":{"id":"53855"}},"id":"53857","type":"CDSView"},{"attributes":{"axis":{"id":"53829"},"dimension":1,"ticker":null},"id":"53832","type":"Grid"},{"attributes":{},"id":"53915","type":"Selection"},{"attributes":{},"id":"53901","type":"BasicTickFormatter"},{"attributes":{"text":"aws-appmesh-spire-agent"},"id":"53815","type":"Title"},{"attributes":{},"id":"53830","type":"BasicTicker"},{"attributes":{"edge_renderer":{"id":"53860"},"inspection_policy":{"id":"53906"},"layout_provider":{"id":"53862"},"node_renderer":{"id":"53856"},"selection_policy":{"id":"53911"}},"id":"53853","type":"GraphRenderer"},{"attributes":{"data_source":{"id":"53859"},"glyph":{"id":"53858"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"53861"}},"id":"53860","type":"GlyphRenderer"},{"attributes":{},"id":"53896","type":"AllLabels"},{"attributes":{},"id":"53817","type":"DataRange1d"},{"attributes":{"graph_layout":{"CKV_K8S_10":[0.10540504423463377,0.28731380950652535],"CKV_K8S_11":[0.0488376788916464,0.29071196887223993],"CKV_K8S_12":[-0.07462246549497455,0.19647948546184152],"CKV_K8S_13":[-0.01494055694773328,0.05693322079942961],"CKV_K8S_14":[0.10102539106395277,0.0352244711316258],"CKV_K8S_15":[0.14211939037742816,0.16828891412544736],"CKV_K8S_17":[0.1907600184999131,0.19302152469617548],"CKV_K8S_19":[-0.0012120670610755154,0.2755777294144406],"CKV_K8S_20":[-0.08115414082171907,0.14011020221552112],"CKV_K8S_22":[-0.031694782931131274,0.15302876398328336],"CKV_K8S_23":[0.18985374874461117,0.13402949689586593],"CKV_K8S_28":[0.12983294560700734,0.09809550151190014],"CKV_K8S_29":[0.039353070297612223,0.03523440414482808],"CKV_K8S_30":[-0.05653669693995334,0.09055542766532527],"CKV_K8S_31":[0.16134790648194228,0.2288466136676999],"CKV_K8S_37":[0.1250846015183092,0.24852355789233904],"CKV_K8S_38":[0.1643871598105034,0.06826958655753163],"CKV_K8S_40":[0.06165974722231393,0.2413059303491456],"CKV_K8S_43":[-0.04841727888188231,0.24446973220604515],"CKV_K8S_9":[-0.006443613808008022,0.21794451723842329],"CVE-2020-15257":[0.02269013002074033,-0.4325779814279836],"CVE-2020-26160":[0.061882619920267536,-0.377990242123208],"CVE-2021-21334":[-0.19231216452843872,-0.242557290420833],"CVE-2021-23840":[-0.23700724436443366,-0.3028214020802531],"CVE-2021-23841":[-0.2217078987619858,-0.3760686098539786],"CVE-2021-28831":[-0.030191190607544452,-0.39022064236587195],"CVE-2021-30139":[-0.17932951431289992,-0.4266209241485775],"CVE-2021-3449":[-0.16933395098332335,-0.3285564570906637],"CVE-2021-3450":[-0.11708492095202984,-0.4017528491348144],"CVE-2021-36159":[0.04501221555585599,-0.31289622436832054],"CVE-2021-3711":[-0.11123962835043656,-0.4641139139795556],"CVE-2021-3712":[-0.04324179792591309,-0.46124542171376653],"CVE-2021-39537":[0.4443010610903527,0.046058201384822896],"DaemonSet.default":[0.057638764600776306,0.11571728960895235],"aws/appmesh-spire-agent":[0.05589436967643031,0.16767643096590326],"deps":[-0.7503641030210785,1.0],"gcr.io/spiffe-io/spire-agent:0.12.0":[-0.06891498165245105,-0.28732045686924707],"gcr.io/spiffe-io/wait-for-it:latest":[0.28866313473271576,0.07132563528175835]}},"id":"53862","type":"StaticLayoutProvider"},{"attributes":{},"id":"53821","type":"LinearScale"},{"attributes":{"overlay":{"id":"53913"}},"id":"53849","type":"BoxSelectTool"},{"attributes":{},"id":"53858","type":"MultiLine"},{"attributes":{},"id":"53838","type":"HelpTool"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"53883"}},"size":{"value":20}},"id":"53884","type":"Circle"},{"attributes":{},"id":"53899","type":"AllLabels"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"53847","type":"HoverTool"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_17","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_9","CKV_K8S_14","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_17","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_9","CKV_K8S_14","gcr.io/spiffe-io/wait-for-it:latest","gcr.io/spiffe-io/spire-agent:0.12.0","CVE-2021-39537","CVE-2021-3711","CVE-2021-36159","CVE-2020-26160","CVE-2021-30139","CVE-2021-28831","CVE-2021-23840","CVE-2021-3712","CVE-2021-3450","CVE-2021-21334","CVE-2021-3449","CVE-2021-23841","CVE-2020-15257"],"start":["aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","aws/appmesh-spire-agent","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","gcr.io/spiffe-io/wait-for-it:latest","gcr.io/spiffe-io/spire-agent:0.12.0","gcr.io/spiffe-io/spire-agent:0.12.0","gcr.io/spiffe-io/spire-agent:0.12.0","gcr.io/spiffe-io/spire-agent:0.12.0","gcr.io/spiffe-io/spire-agent:0.12.0","gcr.io/spiffe-io/spire-agent:0.12.0","gcr.io/spiffe-io/spire-agent:0.12.0","gcr.io/spiffe-io/spire-agent:0.12.0","gcr.io/spiffe-io/spire-agent:0.12.0","gcr.io/spiffe-io/spire-agent:0.12.0","gcr.io/spiffe-io/spire-agent:0.12.0","gcr.io/spiffe-io/spire-agent:0.12.0"]},"selected":{"id":"53917"},"selection_policy":{"id":"53916"}},"id":"53859","type":"ColumnDataSource"},{"attributes":{"callback":null},"id":"53848","type":"TapTool"},{"attributes":{},"id":"53917","type":"Selection"},{"attributes":{},"id":"53834","type":"WheelZoomTool"},{"attributes":{"formatter":{"id":"53898"},"major_label_policy":{"id":"53896"},"ticker":{"id":"53826"}},"id":"53825","type":"LinearAxis"},{"attributes":{},"id":"53819","type":"DataRange1d"},{"attributes":{"source":{"id":"53859"}},"id":"53861","type":"CDSView"},{"attributes":{},"id":"53826","type":"BasicTicker"},{"attributes":{},"id":"53916","type":"UnionRenderers"},{"attributes":{},"id":"53906","type":"NodesOnly"},{"attributes":{"overlay":{"id":"53839"}},"id":"53835","type":"BoxZoomTool"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"53883","type":"CategoricalColorMapper"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,8.8,null,9.8,9.1,7.7,7.5,7.5,7.5,7.4,7.4,6.3,5.9,5.9,5.3],"description":["aws/appmesh-spire-agent",null,"Containers should not share the host network namespace","DaemonSet.spire-agent.default (container 0) - init","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Containers should not share the host process ID namespace"

View BlastRadius Graph

aws-aws-calico

Bokeh Plot Bokeh.set_log_level("info"); {"66282c99-25b8-4607-abdb-14ead04b93f6":{"defs":[],"roots":{"references":[{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"50997","type":"BoxAnnotation"},{"attributes":{},"id":"50914","type":"BasicTicker"},{"attributes":{},"id":"50983","type":"AllLabels"},{"attributes":{},"id":"50903","type":"DataRange1d"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"50923","type":"BoxAnnotation"},{"attributes":{"graph_layout":{"CKV_K8S_15":[-0.21364983993823128,-0.10532569987348056],"CKV_K8S_16":[-0.24653848773092524,-0.2113001989541773],"CKV_K8S_19":[-0.11404429857442512,-0.18872202781190733],"CKV_K8S_20":[-0.14362019282589866,-0.04083832083700692],"CKV_K8S_22":[-0.17462042628088476,-0.19191069061262608],"CKV_K8S_23":[-0.06399512349654232,-0.1369827111604324],"CKV_K8S_28":[-0.06789572174587555,-0.18164297090554044],"CKV_K8S_29":[-0.13979120013894863,-0.21939475921906726],"CKV_K8S_30":[0.0007358836971099637,-0.13316152208508292],"CKV_K8S_31":[-0.18264565951813302,-0.04936899513668981],"CKV_K8S_37":[-0.20603371366422898,-0.14543454880647627],"CKV_K8S_38":[-0.18787968626762705,-0.08219465511139211],"CKV_K8S_40":[-0.09004162797484916,-0.21857731367846728],"CKV_K8S_43":[-0.12619000748272677,-0.07743884113729939],"CKV_K8S_8":[-0.015502900818914615,-0.19537850926478878],"CKV_K8S_9":[-0.07260279843989248,-0.022932412795415472],"CVE-2020-28362":[0.21943847219301255,0.0678308638044021],"CVE-2020-28366":[0.12525668039601076,0.2936993775296234],"CVE-2020-28367":[0.1915103243269681,0.25665363886871345],"CVE-2021-27918":[0.33269589933425114,0.19263876303809968],"CVE-2021-29923":[0.2751001633796584,0.2832870608478995],"CVE-2021-3114":[0.26928354367664237,0.21055394152204296],"CVE-2021-31525":[0.316610202411042,0.24942621134220264],"CVE-2021-33194":[0.096288494805522,0.19105273184230914],"CVE-2021-33195":[0.08835590618223618,0.2540018290101036],"CVE-2021-33196":[0.23197221478700047,0.30987323289419133],"CVE-2021-33197":[0.26837975485544385,0.12737899545568],"CVE-2021-33198":[0.3299659986344285,0.13689978485436732],"CVE-2021-34558":[0.29528634161383405,0.07622627102424237],"CVE-2021-36221":[0.17542091267712598,0.3186861966591829],"DaemonSet.default":[-0.1604781977750219,-0.14633908440932633],"Deployment.default":[-0.06892997593435124,-0.08507550234527649],"aws/aws-calico":[-0.12543172237477354,-0.13804149730114948],"deps":[-1.0,-0.5647589994417455],"quay.io/calico/typha:v3.19.1":[0.18359078801196171,0.16661036219428818]}},"id":"50946","type":"StaticLayoutProvider"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"50967"}},"size":{"value":20}},"id":"50968","type":"Circle"},{"attributes":{},"id":"50905","type":"LinearScale"},{"attributes":{"source":{"id":"50939"}},"id":"50941","type":"CDSView"},{"attributes":{"edge_renderer":{"id":"50944"},"inspection_policy":{"id":"50990"},"layout_provider":{"id":"50946"},"node_renderer":{"id":"50940"},"selection_policy":{"id":"50995"}},"id":"50937","type":"GraphRenderer"},{"attributes":{"below":[{"id":"50909"}],"center":[{"id":"50912"},{"id":"50916"}],"height":768,"left":[{"id":"50913"}],"renderers":[{"id":"50937"},{"id":"50977"}],"title":{"id":"50899"},"toolbar":{"id":"50924"},"width":1024,"x_range":{"id":"50901"},"x_scale":{"id":"50905"},"y_range":{"id":"50903"},"y_scale":{"id":"50907"}},"id":"50898","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"50920","type":"SaveTool"},{"attributes":{},"id":"50990","type":"NodesOnly"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"50967","type":"CategoricalColorMapper"},{"attributes":{},"id":"51001","type":"Selection"},{"attributes":{},"id":"50901","type":"DataRange1d"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.3,6.5,6.5,5.9,5.9,5.3],"description":["aws/aws-calico",null,"Containers should not share the host network namespace","DaemonSet.calico-node.default (container 0) - calico-node","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Use read-only filesystem for containers where possible"

View BlastRadius Graph

aws-aws-node-termination-handler

Bokeh Plot Bokeh.set_log_level("info"); {"d5427d35-1821-4591-8d94-b4458f65e7d5":{"defs":[],"roots":{"references":[{"attributes":{"edge_renderer":{"id":"50296"},"inspection_policy":{"id":"50342"},"layout_provider":{"id":"50298"},"node_renderer":{"id":"50292"},"selection_policy":{"id":"50347"}},"id":"50289","type":"GraphRenderer"},{"attributes":{"callback":null},"id":"50284","type":"TapTool"},{"attributes":{},"id":"50353","type":"Selection"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"50283","type":"HoverTool"},{"attributes":{},"id":"50270","type":"WheelZoomTool"},{"attributes":{"source":{"id":"50291"}},"id":"50293","type":"CDSView"},{"attributes":{"active_multi":null,"tools":[{"id":"50269"},{"id":"50270"},{"id":"50271"},{"id":"50272"},{"id":"50273"},{"id":"50274"},{"id":"50283"},{"id":"50284"},{"id":"50285"}]},"id":"50276","type":"Toolbar"},{"attributes":{"overlay":{"id":"50275"}},"id":"50271","type":"BoxZoomTool"},{"attributes":{},"id":"50294","type":"MultiLine"},{"attributes":{},"id":"50335","type":"AllLabels"},{"attributes":{"below":[{"id":"50261"}],"center":[{"id":"50264"},{"id":"50268"}],"height":768,"left":[{"id":"50265"}],"renderers":[{"id":"50289"},{"id":"50329"}],"title":{"id":"50251"},"toolbar":{"id":"50276"},"width":1024,"x_range":{"id":"50253"},"x_scale":{"id":"50257"},"y_range":{"id":"50255"},"y_scale":{"id":"50259"}},"id":"50250","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"50337","type":"BasicTickFormatter"},{"attributes":{"axis":{"id":"50265"},"dimension":1,"ticker":null},"id":"50268","type":"Grid"},{"attributes":{"text":"aws-aws-node-termination-handler"},"id":"50251","type":"Title"},{"attributes":{},"id":"50262","type":"BasicTicker"},{"attributes":{},"id":"50257","type":"LinearScale"},{"attributes":{},"id":"50350","type":"UnionRenderers"},{"attributes":{},"id":"50351","type":"Selection"},{"attributes":{"formatter":{"id":"50334"},"major_label_policy":{"id":"50332"},"ticker":{"id":"50262"}},"id":"50261","type":"LinearAxis"},{"attributes":{},"id":"50352","type":"UnionRenderers"},{"attributes":{},"id":"50332","type":"AllLabels"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,7.5],"description":["aws/aws-node-termination-handler",null,"Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-aws-node-termination-handler.default (container 0) - aws-node-termination-handler","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Minimize the admission of containers with the NET_RAW capability","Minimize the admission of containers with capabilities assigned"

View BlastRadius Graph

aws-aws-vpc-cni

Bokeh Plot Bokeh.set_log_level("info"); {"b56c9688-8685-4d49-8518-eed4a9a2379e":{"defs":[],"roots":{"references":[{"attributes":{"graph_layout":{"CKV_K8S_10":[-0.11636837554772288,-0.03907494730484738],"CKV_K8S_11":[-0.10895887314665671,0.023692615114298265],"CKV_K8S_12":[-0.11051069827795088,-0.0993411072369254],"CKV_K8S_13":[0.18507724836815395,-0.07317472624000954],"CKV_K8S_16":[0.11031195709127156,0.09355044356929],"CKV_K8S_19":[0.0493844493200604,0.07301999580391345],"CKV_K8S_20":[0.027824453655892332,-0.2216697330009144],"CKV_K8S_22":[-0.03374146918624112,-0.18935126954066073],"CKV_K8S_23":[0.06691424487640986,-0.16856022943878493],"CKV_K8S_25":[-0.057659868400898165,0.0598314745428246],"CKV_K8S_28":[0.14385703981778822,0.03668832983184351],"CKV_K8S_31":[-0.08928547464584542,-0.15797111730976696],"CKV_K8S_37":[0.12967519129473745,-0.19124059855674538],"CKV_K8S_38":[0.18687915865187488,-0.00917772822120206],"CKV_K8S_40":[0.1641250025281576,-0.13142974313858496],"CKV_K8S_43":[-0.007400956774054395,0.10254000803535421],"DaemonSet.default":[0.023656009209183343,-0.0600740077960072],"aws/aws-vpc-cni":[0.0414530079875394,-0.04825765911307506],"deps":[-0.6052320468216998,1.0]}},"id":"51918","type":"StaticLayoutProvider"},{"attributes":{"overlay":{"id":"51969"}},"id":"51905","type":"BoxSelectTool"},{"attributes":{"text":"aws-aws-vpc-cni"},"id":"51871","type":"Title"},{"attributes":{},"id":"51967","type":"NodesOnly"},{"attributes":{},"id":"51957","type":"BasicTickFormatter"},{"attributes":{},"id":"51894","type":"HelpTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"51969","type":"BoxAnnotation"},{"attributes":{},"id":"51877","type":"LinearScale"},{"attributes":{},"id":"51952","type":"AllLabels"},{"attributes":{},"id":"51973","type":"Selection"},{"attributes":{"overlay":{"id":"51895"}},"id":"51891","type":"BoxZoomTool"},{"attributes":{},"id":"51955","type":"AllLabels"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"51911"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"51949","type":"LabelSet"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"51939","type":"CategoricalColorMapper"},{"attributes":{"edge_renderer":{"id":"51916"},"inspection_policy":{"id":"51962"},"layout_provider":{"id":"51918"},"node_renderer":{"id":"51912"},"selection_policy":{"id":"51967"}},"id":"51909","type":"GraphRenderer"},{"attributes":{},"id":"51886","type":"BasicTicker"},{"attributes":{"data_source":{"id":"51915"},"glyph":{"id":"51914"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"51917"}},"id":"51916","type":"GlyphRenderer"},{"attributes":{},"id":"51971","type":"Selection"},{"attributes":{},"id":"51879","type":"LinearScale"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"51895","type":"BoxAnnotation"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"51939"}},"size":{"value":20}},"id":"51940","type":"Circle"},{"attributes":{},"id":"51954","type":"BasicTickFormatter"},{"attributes":{},"id":"51890","type":"WheelZoomTool"},{"attributes":{},"id":"51914","type":"MultiLine"},{"attributes":{"below":[{"id":"51881"}],"center":[{"id":"51884"},{"id":"51888"}],"height":768,"left":[{"id":"51885"}],"renderers":[{"id":"51909"},{"id":"51949"}],"title":{"id":"51871"},"toolbar":{"id":"51896"},"width":1024,"x_range":{"id":"51873"},"x_scale":{"id":"51877"},"y_range":{"id":"51875"},"y_scale":{"id":"51879"}},"id":"51870","subtype":"Figure","type":"Plot"},{"attributes":{"formatter":{"id":"51957"},"major_label_policy":{"id":"51955"},"ticker":{"id":"51886"}},"id":"51885","type":"LinearAxis"},{"attributes":{"source":{"id":"51911"}},"id":"51913","type":"CDSView"},{"attributes":{},"id":"51970","type":"UnionRenderers"},{"attributes":{"formatter":{"id":"51954"},"major_label_policy":{"id":"51952"},"ticker":{"id":"51882"}},"id":"51881","type":"LinearAxis"},{"attributes":{"callback":null},"id":"51904","type":"TapTool"},{"attributes":{"active_multi":null,"tools":[{"id":"51889"},{"id":"51890"},{"id":"51891"},{"id":"51892"},{"id":"51893"},{"id":"51894"},{"id":"51903"},{"id":"51904"},{"id":"51905"}]},"id":"51896","type":"Toolbar"},{"attributes":{},"id":"51889","type":"PanTool"},{"attributes":{},"id":"51893","type":"ResetTool"},{"attributes":{"axis":{"id":"51881"},"ticker":null},"id":"51884","type":"Grid"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"51903","type":"HoverTool"},{"attributes":{"source":{"id":"51915"}},"id":"51917","type":"CDSView"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_11","CKV_K8S_25","CKV_K8S_13","CKV_K8S_10","CKV_K8S_16","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_11","CKV_K8S_25","CKV_K8S_13","CKV_K8S_10","CKV_K8S_16"],"start":["aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","aws/aws-vpc-cni","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default"]},"selected":{"id":"51973"},"selection_policy":{"id":"51972"}},"id":"51915","type":"ColumnDataSource"},{"attributes":{"axis":{"id":"51885"},"dimension":1,"ticker":null},"id":"51888","type":"Grid"},{"attributes":{"data":{"description":["aws/aws-vpc-cni",null,"Containers should not share the host network namespace","DaemonSet.aws-node.default (container 0) - aws-vpc-cni-init","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability"

View BlastRadius Graph

azureorkestra-prometheus

Bokeh Plot Bokeh.set_log_level("info"); {"1f12cd8e-5c43-4ff2-a130-840ea088f5d1":{"defs":[],"roots":{"references":[{"attributes":{},"id":"57725","type":"ResetTool"},{"attributes":{"data_source":{"id":"57747"},"glyph":{"id":"57746"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"57749"}},"id":"57748","type":"GlyphRenderer"},{"attributes":{},"id":"57721","type":"PanTool"},{"attributes":{},"id":"57722","type":"WheelZoomTool"},{"attributes":{"data_source":{"id":"57743"},"glyph":{"id":"57772"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"57745"}},"id":"57744","type":"GlyphRenderer"},{"attributes":{},"id":"57802","type":"UnionRenderers"},{"attributes":{},"id":"57805","type":"Selection"},{"attributes":{"axis":{"id":"57717"},"dimension":1,"ticker":null},"id":"57720","type":"Grid"},{"attributes":{},"id":"57707","type":"DataRange1d"},{"attributes":{"data":{"color":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"red",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null],"end":["CKV_K8S_38","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_19","CKV_K8S_17","CKV_K8S_26","prometheus","Deployment.default","DaemonSet.default","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/prometheus:v2.26.0","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_17","CKV_K8S_26","quay.io/prometheus/node-exporter:v1.1.2","CVE-2021-33198","CVE-2021-33196","CVE-2021-33194","CVE-2021-29923","CVE-2021-28831","CVE-2021-27918","CVE-2021-33195","CVE-2021-34558","CVE-2021-36221","CVE-2021-31525","CVE-2021-33197","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/prometheus:v2.26.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/prometheus:v2.26.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/prometheus:v2.26.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/prometheus:v2.26.0","quay.io/prometheus/prometheus:v2.26.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/prometheus:v2.26.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/prometheus:v2.26.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/prometheus:v2.26.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/prometheus:v2.26.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/prometheus:v2.26.0","CVE-2018-1000500","CVE-2020-28367","CVE-2020-28366","CVE-2020-28362","CVE-2020-16845","CVE-2021-3114","CVE-2020-24553","CVE-2020-15586","CVE-2020-29510","CVE-2020-14039","CVE-2021-21334"],"start":["azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","azureorkestra/prometheus","deps","CKV_K8S_38","CKV_K8S_38","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","quay.io/prometheus/node-exporter:v1.1.2","quay.io/prometheus/node-exporter:v1.1.2","quay.io/prometheus/node-exporter:v1.1.2","quay.io/prometheus/node-exporter:v1.1.2","quay.io/prometheus/node-exporter:v1.1.2","quay.io/prometheus/node-exporter:v1.1.2","quay.io/prometheus/node-exporter:v1.1.2","quay.io/prometheus/node-exporter:v1.1.2","quay.io/prometheus/node-exporter:v1.1.2","quay.io/prometheus/node-exporter:v1.1.2","quay.io/prometheus/node-exporter:v1.1.2","CVE-2021-33198","CVE-2021-33198","CVE-2021-33196","CVE-2021-33196","CVE-2021-33194","CVE-2021-33194","CVE-2021-29923","CVE-2021-29923","CVE-2021-28831","CVE-2021-27918","CVE-2021-33195","CVE-2021-33195","CVE-2021-34558","CVE-2021-34558","CVE-2021-36221","CVE-2021-36221","CVE-2021-31525","CVE-2021-31525","CVE-2021-33197","CVE-2021-33197","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/alertmanager:v0.21.0","quay.io/prometheus/prometheus:v2.26.0"]},"selected":{"id":"57805"},"selection_policy":{"id":"57804"}},"id":"57747","type":"ColumnDataSource"},{"attributes":{"text":"azureorkestra-prometheus"},"id":"57703","type":"Title"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,7.5,7.5,7.5,7.5,7.5,7.5,7.3,6.5,5.9,5.9,5.3,null,8.1,7.5,7.5,7.5,7.5,6.5,6.1,5.9,5.6,5.3,null,6.3,null],"description":["azureorkestra/prometheus",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-kube-state-metrics.default (container 0) - kube-state-metrics","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability","Containers should not run with allowPrivilegeEscalation","Memory requests should be set","Minimize the admission of containers with capabilities assigned"

View BlastRadius Graph

banzaicloud-stable-prometheus

Bokeh Plot Bokeh.set_log_level("info"); {"27e8a210-eaba-4069-86cb-51b5a3a35828":{"defs":[],"roots":{"references":[{"attributes":{},"id":"62902","type":"BasicTicker"},{"attributes":{"overlay":{"id":"62911"}},"id":"62907","type":"BoxZoomTool"},{"attributes":{},"id":"62898","type":"BasicTicker"},{"attributes":{"below":[{"id":"62897"}],"center":[{"id":"62900"},{"id":"62904"}],"height":768,"left":[{"id":"62901"}],"renderers":[{"id":"62925"},{"id":"62965"}],"title":{"id":"62887"},"toolbar":{"id":"62912"},"width":1024,"x_range":{"id":"62889"},"x_scale":{"id":"62893"},"y_range":{"id":"62891"},"y_scale":{"id":"62895"}},"id":"62886","subtype":"Figure","type":"Plot"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,9.8,8.1,7.5,7.5,7.5,5.5,5.5],"description":["banzaicloud-stable/prometheus",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-prometheus-kube-state-metrics.default (container 0) - prometheus-kube-state-metrics","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible"

View BlastRadius Graph

bitnami-aks-kube-prometheus

Bokeh Plot Bokeh.set_log_level("info"); {"16d1d26d-8460-4497-8359-49872bcfb5b3":{"defs":[],"roots":{"references":[{"attributes":{"formatter":{"id":"118377"},"major_label_policy":{"id":"118375"},"ticker":{"id":"118306"}},"id":"118305","type":"LinearAxis"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"118331"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"118369","type":"LabelSet"},{"attributes":{"data_source":{"id":"118335"},"glyph":{"id":"118334"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"118337"}},"id":"118336","type":"GlyphRenderer"},{"attributes":{},"id":"118334","type":"MultiLine"},{"attributes":{"graph_layout":{"Alertmanager.default":[-0.08032150089455564,-0.003942748509656973],"CKV_K8S_1":[-0.4053202822361345,0.005751079479271234],"CKV_K8S_10":[-0.15922379571255785,-0.03740658587560249],"CKV_K8S_11":[-0.16932248470634056,0.03123525213249133],"CKV_K8S_12":[-0.16558209142422173,-0.017398415193769074],"CKV_K8S_13":[-0.14270971745158229,0.047541030561781],"CKV_K8S_14":[-0.16287029308393017,-0.07406387683329618],"CKV_K8S_15":[-0.13924003711594327,-0.039988268776446054],"CKV_K8S_17":[-0.2787901906891679,0.07632657029884811],"CKV_K8S_19":[-0.28680044211488365,0.035667101284645356],"CKV_K8S_20":[-0.1932864122073531,0.0936368772903791],"CKV_K8S_22":[-0.14095952131897205,-0.012530818812937982],"CKV_K8S_28":[-0.20981245849720032,0.08136249571429903],"CKV_K8S_30":[-0.2061403950004556,-0.045306663176266845],"CKV_K8S_31":[-0.22278755878029716,0.019507021524534297],"CKV_K8S_32":[-0.3728849539625812,-0.07740772363180108],"CKV_K8S_33":[-0.15794432245185863,0.06492048082596104],"CKV_K8S_36":[-0.3835862876188846,-0.006884980778131458],"CKV_K8S_37":[-0.2154408261590511,0.04673070283113859],"CKV_K8S_38":[-0.22714514109516637,0.06722604439709697],"CKV_K8S_4":[-0.35962887647633685,-0.0993719510964273],"CKV_K8S_40":[-0.21639902910686254,-0.016841461171502665],"CKV_K8S_43":[-0.1656533942439452,0.0034949941106036035],"CKV_K8S_5":[-0.36802489544831457,-0.04803602279411609],"CKV_K8S_7":[-0.39515115740597617,-0.037200807368321646],"CVE-2016-10228":[0.11635210047914459,0.08404314058838486],"CVE-2016-2781":[0.12236336593538763,-0.05459467823266874],"CVE-2018-12886":[0.17661156722315344,-0.03960182734225341],"CVE-2018-7169":[0.15437135293181115,-0.03423104656440691],"CVE-2019-12290":[0.1657472811440436,0.06956171493711928],"CVE-2019-13115":[0.08119855514878808,-0.01754871210830531],"CVE-2019-13627":[0.19287668611623401,-0.02499995168166721],"CVE-2019-14855":[0.20444325052786716,0.05688245556310856],"CVE-2019-15847":[0.10773509857743045,-0.03631858791261009],"CVE-2019-17498":[0.14135912884389132,0.0841189828522572],"CVE-2019-17543":[0.1934786279745095,0.0761251918477322],"CVE-2019-20454":[0.06657905230383974,0.002786171443807216],"CVE-2019-25013":[0.19055840959446527,0.046269055519760315],"CVE-2019-3843":[0.13906778351244434,0.10890835962517108],"CVE-2019-3844":[0.1780552751543921,0.08885547517970659],"CVE-2020-10029":[0.15995743325433148,0.09779804714540488],"CVE-2020-11080":[0.16593260275445454,-0.013107220689279187],"CVE-2020-14155":[0.1311875726243848,-0.032055823020164145],"CVE-2020-1751":[0.08698532283077641,-0.0404038869517665],"CVE-2020-1752":[0.17096736706809448,0.03714748133612479],"CVE-2020-27618":[0.20963832194269152,0.030752785654729227],"CVE-2020-6096":[0.11285426337573073,0.10603564622456534],"CVE-2021-22946":[0.1863773441864689,0.01525881207505475],"CVE-2021-22947":[0.19068267342013798,-0.006206504695988944],"CVE-2021-31879":[0.06465085953300559,0.032854395312857713],"CVE-2021-3326":[0.07759284361668803,0.08090855552646872],"CVE-2021-33574":[0.15040535236103128,-0.05419546477785947],"CVE-2021-35942":[0.09493447903648174,0.09002473357009318],"CVE-2021-37750":[0.0721009419476366,0.05819446467002327],"CVE-2021-40528":[0.20936672770802875,0.0063673296786980055],"DaemonSet.default":[-0.1502264666384685,0.02830068300984435],"Deployment.default":[-0.10560671056467442,0.026665692101622236],"PodSecurityPolicy.default":[-0.4285235161998838,-0.06429311199644752],"Prometheus.default":[-0.08971009211620205,0.0006619830405699245],"bitnami-aks/kube-prometheus":[-0.2565599377526248,-0.0056445637015313565],"deps":[1.0,-0.5152962778794966],"kube-prometheus":[0.9311395013708987,-0.47779241881830437],"marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33":[0.1322928424232481,0.024925976014212092],"marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1":[0.12065203541574794,0.0350880497617114],"marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47":[0.11078592093169479,0.02654130983673917],"marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0":[0.12195417422358609,0.026026343593800818],"marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13":[0.12439667298190443,0.018167913830409877]}},"id":"118338","type":"StaticLayoutProvider"},{"attributes":{"overlay":{"id":"118389"}},"id":"118325","type":"BoxSelectTool"},{"attributes":{},"id":"118375","type":"AllLabels"},{"attributes":{},"id":"118310","type":"WheelZoomTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"118315","type":"BoxAnnotation"},{"attributes":{"axis":{"id":"118305"},"dimension":1,"ticker":null},"id":"118308","type":"Grid"},{"attributes":{},"id":"118312","type":"SaveTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"118389","type":"BoxAnnotation"},{"attributes":{},"id":"118391","type":"Selection"},{"attributes":{},"id":"118313","type":"ResetTool"},{"attributes":{},"id":"118306","type":"BasicTicker"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"118359","type":"CategoricalColorMapper"},{"attributes":{"active_multi":null,"tools":[{"id":"118309"},{"id":"118310"},{"id":"118311"},{"id":"118312"},{"id":"118313"},{"id":"118314"},{"id":"118323"},{"id":"118324"},{"id":"118325"}]},"id":"118316","type":"Toolbar"},{"attributes":{},"id":"118374","type":"BasicTickFormatter"},{"attributes":{"source":{"id":"118335"}},"id":"118337","type":"CDSView"},{"attributes":{},"id":"118314","type":"HelpTool"},{"attributes":{"below":[{"id":"118301"}],"center":[{"id":"118304"},{"id":"118308"}],"height":768,"left":[{"id":"118305"}],"renderers":[{"id":"118329"},{"id":"118369"}],"title":{"id":"118291"},"toolbar":{"id":"118316"},"width":1024,"x_range":{"id":"118293"},"x_scale":{"id":"118297"},"y_range":{"id":"118295"},"y_scale":{"id":"118299"}},"id":"118290","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"118309","type":"PanTool"},{"attributes":{},"id":"118377","type":"BasicTickFormatter"},{"attributes":{},"id":"118390","type":"UnionRenderers"},{"attributes":{"formatter":{"id":"118374"},"major_label_policy":{"id":"118372"},"ticker":{"id":"118302"}},"id":"118301","type":"LinearAxis"},{"attributes":{},"id":"118372","type":"AllLabels"},{"attributes":{"data_source":{"id":"118331"},"glyph":{"id":"118360"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"118333"}},"id":"118332","type":"GlyphRenderer"},{"attributes":{"data":{"color":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"red",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null],"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_31","CKV_K8S_17","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_1","CKV_K8S_32","CKV_K8S_4","CKV_K8S_5","CKV_K8S_7","CKV_K8S_36","CKV_K8S_33","CKV_K8S_14","kube-prometheus","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_31","CKV_K8S_17","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Alertmanager.default","Prometheus.default","Deployment.default","Deployment.default","Alertmanager.default","Prometheus.default","Deployment.default","Deployment.default","Deployment.default","Alertmanager.default","Prometheus.default","Deployment.default","Deployment.default","Alertmanager.default","Prometheus.default","Deployment.default","Alertmanager.default","Prometheus.default","Deployment.default","Alertmanager.default","Prometheus.default","Deployment.default","Alertmanager.default","Prometheus.default","PodSecurityPolicy.default","CKV_K8S_32","CKV_K8S_4","CKV_K8S_5","CKV_K8S_7","CKV_K8S_36","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","CKV_K8S_33","CKV_K8S_14","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","Prometheus.default","Prometheus.default","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","CVE-2018-12886","CVE-2020-11080","CVE-2021-37750","CVE-2021-33574","CVE-2021-35942","CVE-2020-6096","CVE-2019-17543","CVE-2019-17498","CVE-2019-13115","CVE-2019-3844","CVE-2019-3843","CVE-2021-3326","CVE-2021-22946","CVE-2019-20454","CVE-2019-15847","CVE-2019-14855","CVE-2019-12290","CVE-2020-1752","CVE-2020-1751","CVE-2016-2781","CVE-2019-13627","CVE-2021-31879","CVE-2021-40528","CVE-2021-22947","CVE-2019-25013","CVE-2016-10228","CVE-2020-27618","CVE-2020-10029","CVE-2020-14155","CVE-2018-7169","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13","marketplace.azurecr.io/bitnami/kube-state-metrics:2.2.1-debian-10-r1","marketplace.azurecr.io/bitnami/prometheus-operator:0.51.1-debian-10-r0","marketplace.azurecr.io/bitnami/alertmanager:0.23.0-debian-10-r33","marketplace.azurecr.io/bitnami/prometheus:2.30.0-debian-10-r13"],"start":["bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","bitnami-aks/kube-prometheus","deps","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_31","CKV_K8S_43","CKV_K8S_43","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_22","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_12","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_15","CKV_K8S_15","CKV_K8S_10","CKV_K8S_10","CKV_K8S_10","CKV_K8S_11","CKV_K8S_11","CKV_K8S_11","CKV_K8S_13","CKV_K8S_13","CKV_K8S_13","CKV_K8S_1","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","Deployment.default","Deployment.default","Alertmanager.default","Alertmanager.default","Alertmanager.default","CKV_K8S_33","CKV_K8S_14","Prometheus.default","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","marketplace.azurecr.io/bitnami/node-exporter:1.2.2-debian-10-r47","CVE-2018-12886","CVE-2018-12886","CVE-2018-12886","CVE-2018-12886","CVE-2020-11080","CVE-2020-11080","CVE-2020-11080","CVE-2020-11080","CVE-2021-37750","CVE-2021-37750","CVE-2021-37750","CVE-2021-37750","CVE-2021-33574","CVE-2021-33574","CVE-2021-33574","CVE-2021-33574","CVE-2021-35942","CVE-2021-35942","CVE-2021-35942","CVE-2021-35942","CVE-2020-6096","CVE-2020-6096","CVE-2020-6096","CVE-2020-6096","CVE-2019-17543","CVE-2019-17543","CVE-2019-17543","CVE-2019-17543","CVE-2019-17498","CVE-2019-17498","CVE-2019-17498","CVE-2019-17498","CVE-2019-13115","CVE-2019-13115","CVE-2019-13115","CVE-2019-13115","CVE-2019-3844","CVE-2019-3844","CVE-2019-3844","CVE-2019-3844","CVE-2019-3843","CVE-2019-3843","CVE-2019-3843","CVE-2019-3843","CVE-2021-3326","CVE-2021-3326","CVE-2021-3326","CVE-2021-3326","CVE-2021-22946","CVE-2021-22946","CVE-2021-22946","CVE-2021-22946","CVE-2019-20454","CVE-2019-20454","CVE-2019-20454","CVE-2019-20454","CVE-2019-15847","CVE-2019-15847","CVE-2019-15847","CVE-2019-15847","CVE-2019-14855","CVE-2019-14855","CVE-2019-14855","CVE-2019-14855","CVE-2019-12290","CVE-2019-12290","CVE-2019-12290","CVE-2019-12290","CVE-2020-1752","CVE-2020-1752","CVE-2020-1752","CVE-2020-1752","CVE-2020-1751","CVE-2020-1751","CVE-2020-1751","CVE-2020-1751","CVE-2016-2781","CVE-2016-2781","CVE-2016-2781","CVE-2016-2781","CVE-2019-13627","CVE-2019-13627","CVE-2019-13627","CVE-2019-13627","CVE-2021-31879","CVE-2021-31879","CVE-2021-31879","CVE-2021-31879","CVE-2021-40528","CVE-2021-40528","CVE-2021-40528","CVE-2021-40528","CVE-2021-22947","CVE-2021-22947","CVE-2021-22947","CVE-2021-22947","CVE-2019-25013","CVE-2019-25013","CVE-2019-25013","CVE-2019-25013","CVE-2016-10228","CVE-2016-10228","CVE-2016-10228","CVE-2016-10228","CVE-2020-27618","CVE-2020-27618","CVE-2020-27618","CVE-2020-27618","CVE-2020-10029","CVE-2020-10029","CVE-2020-10029","CVE-2020-10029","CVE-2020-14155","CVE-2020-14155","CVE-2020-14155","CVE-2020-14155","CVE-2018-7169","CVE-2018-7169","CVE-2018-7169","CVE-2018-7169"]},"selected":{"id":"118393"},"selection_policy":{"id":"118392"}},"id":"118335","type":"ColumnDataSource"},{"attributes":{},"id":"118302","type":"BasicTicker"},{"attributes":{"overlay":{"id":"118315"}},"id":"118311","type":"BoxZoomTool"},{"attributes":{},"id":"118299","type":"LinearScale"},{"attributes":{},"id":"118387","type":"NodesOnly"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"118359"}},"size":{"value":20}},"id":"118360","type":"Circle"},{"attributes":{"axis":{"id":"118301"},"ticker":null},"id":"118304","type":"Grid"},{"attributes":{},"id":"118297","type":"LinearScale"},{"attributes":{},"id":"118293","type":"DataRange1d"},{"attributes":{},"id":"118392","type":"UnionRenderers"},{"attributes":{"source":{"id":"118331"}},"id":"118333","type":"CDSView"},{"attributes":{},"id":"118295","type":"DataRange1d"},{"attributes":{"text":"bitnami-aks-kube-prometheus"},"id":"118291","type":"Title"},{"attributes":{},"id":"118393","type":"Selection"},{"attributes":{"callback":null},"id":"118324","type":"TapTool"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"118323","type":"HoverTool"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,8.1,7.5,6.5,9.8,9.1,8.1,8.1,8.1,8.1,7.8,7.8,7.5,7.5,7.5,7.5,7.5,7.5,7,7,6.5,6.3,6.1,5.9,5.9,5.9,5.9,5.5,5.5,5.3,5.3,null,null,null,null,null],"description":["bitnami-aks/kube-prometheus",null,"Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-node-exporter.default (container 0) - node-exporter","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Ensure that the seccomp profile is set to docker/default or runtime/default","Containers should not share the host process ID namespace","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible"

View BlastRadius Graph

bitnami-aks-metallb

Bokeh Plot Bokeh.set_log_level("info"); {"444923d6-87a0-419f-95ea-08fa362253f8":{"defs":[],"roots":{"references":[{"attributes":{},"id":"121539","type":"LinearScale"},{"attributes":{"formatter":{"id":"121614"},"major_label_policy":{"id":"121612"},"ticker":{"id":"121542"}},"id":"121541","type":"LinearAxis"},{"attributes":{},"id":"121627","type":"NodesOnly"},{"attributes":{},"id":"121612","type":"AllLabels"},{"attributes":{},"id":"121632","type":"UnionRenderers"},{"attributes":{"callback":null},"id":"121564","type":"TapTool"},{"attributes":{},"id":"121615","type":"AllLabels"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,9.8,9.8,9.8,8.1,8.1,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.4,7.1,6.5,5.9,5.9,5.5,5.5,5.3,5.3,5.3,9.8,9.1,8.1,8.1,8.1,8.1,7.8,7.8,7.5,7.5,7.5,7.5,7.5,7.5,7,7,6.5,6.3,6.1,5.9,5.9,5.9,5.9,5.5,5.5,5.3,5.3,null,null],"description":["bitnami-aks/metallb",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-metallb-controller.default (container 0) - metallb-controller","Containers should run as a high UID to avoid host conflict","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Memory requests should be set","Image Pull Policy should be Always","CPU requests should be set","CPU limits should be set","Memory limits should be set","Containers should not share the host network namespace"

View BlastRadius Graph

bitnami-kube-prometheus

Bokeh Plot Bokeh.set_log_level("info"); {"2240c04c-ae2a-439e-ac70-df683b34c975":{"defs":[],"roots":{"references":[{"attributes":{},"id":"94337","type":"ResetTool"},{"attributes":{"source":{"id":"94355"}},"id":"94357","type":"CDSView"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"94383","type":"CategoricalColorMapper"},{"attributes":{},"id":"94323","type":"LinearScale"},{"attributes":{"axis":{"id":"94325"},"ticker":null},"id":"94328","type":"Grid"},{"attributes":{},"id":"94338","type":"HelpTool"},{"attributes":{},"id":"94415","type":"Selection"},{"attributes":{},"id":"94406","type":"NodesOnly"},{"attributes":{},"id":"94414","type":"UnionRenderers"},{"attributes":{},"id":"94417","type":"Selection"},{"attributes":{"below":[{"id":"94325"}],"center":[{"id":"94328"},{"id":"94332"}],"height":768,"left":[{"id":"94329"}],"renderers":[{"id":"94353"},{"id":"94393"}],"title":{"id":"94315"},"toolbar":{"id":"94340"},"width":1024,"x_range":{"id":"94317"},"x_scale":{"id":"94321"},"y_range":{"id":"94319"},"y_scale":{"id":"94323"}},"id":"94314","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"94399","type":"AllLabels"},{"attributes":{"formatter":{"id":"94401"},"major_label_policy":{"id":"94399"},"ticker":{"id":"94330"}},"id":"94329","type":"LinearAxis"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,8.1,7.5,6.5,9.8,9.1,8.1,8.1,8.1,8.1,7.8,7.8,7.5,7.5,7.5,7.5,7.5,7.5,7,7,6.5,6.3,6.1,5.9,5.9,5.9,5.9,5.5,5.5,5.3,5.3,null,null,null,null,null],"description":["bitnami/kube-prometheus",null,"Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-node-exporter.default (container 0) - node-exporter","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Ensure that the seccomp profile is set to docker/default or runtime/default","Containers should not share the host process ID namespace","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible"

View BlastRadius Graph

bitnami-metallb

Bokeh Plot Bokeh.set_log_level("info"); {"4b03bba2-7fd9-4171-80c4-50001682573b":{"defs":[],"roots":{"references":[{"attributes":{},"id":"89174","type":"MultiLine"},{"attributes":{},"id":"89150","type":"WheelZoomTool"},{"attributes":{},"id":"89139","type":"LinearScale"},{"attributes":{"text":"bitnami-metallb"},"id":"89131","type":"Title"},{"attributes":{},"id":"89137","type":"LinearScale"},{"attributes":{},"id":"89215","type":"AllLabels"},{"attributes":{},"id":"89231","type":"Selection"},{"attributes":{"formatter":{"id":"89217"},"major_label_policy":{"id":"89215"},"ticker":{"id":"89146"}},"id":"89145","type":"LinearAxis"},{"attributes":{},"id":"89230","type":"UnionRenderers"},{"attributes":{"data_source":{"id":"89175"},"glyph":{"id":"89174"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"89177"}},"id":"89176","type":"GlyphRenderer"},{"attributes":{},"id":"89142","type":"BasicTicker"},{"attributes":{},"id":"89153","type":"ResetTool"},{"attributes":{},"id":"89222","type":"NodesOnly"},{"attributes":{},"id":"89214","type":"BasicTickFormatter"},{"attributes":{"graph_layout":{"CKV_K8S_10":[0.2422489899286314,0.01439455951275079],"CKV_K8S_11":[0.21056025205108822,0.12165104431485331],"CKV_K8S_12":[0.19924214160381873,-0.00743984049212583],"CKV_K8S_13":[0.25491338723339035,0.08783226312482402],"CKV_K8S_15":[0.2477058979175254,-0.01991869803538527],"CKV_K8S_19":[0.3473372730551305,0.05659774572392519],"CKV_K8S_23":[0.33561726181189855,-0.013937949902102427],"CKV_K8S_25":[0.30927884665322425,-0.04218286026737063],"CKV_K8S_29":[0.3139314025798067,0.12391485551096812],"CKV_K8S_31":[0.19553071718275938,0.09150207359176703],"CKV_K8S_35":[0.33844829617270655,0.09231513020776548],"CKV_K8S_38":[0.2296831890513288,0.0660738364960277],"CKV_K8S_39":[0.34705040362990347,0.020289022330747145],"CKV_K8S_40":[0.21923679612472063,-0.035458326067898366],"CKV_K8S_43":[0.24100529595247475,0.11832006226890202],"CVE-2016-10228":[-0.23378584349188997,-0.056763916680567975],"CVE-2016-2781":[-0.19458164594923205,0.13385521542205644],"CVE-2018-12886":[-0.06209476189986498,0.06979563019155277],"CVE-2018-7169":[-0.26995923699664337,0.05513773697996611],"CVE-2019-12290":[-0.15279847251608975,0.13478589605879535],"CVE-2019-13115":[-0.2617273572429567,-0.03361958814016086],"CVE-2019-13627":[-0.22906474902257384,0.03043011299366475],"CVE-2019-14855":[-0.24888249875670038,0.11319326798373334],"CVE-2019-15847":[-0.1234660928699391,-0.035638063592348536],"CVE-2019-17498":[-0.05495663408436348,-0.005201199741861785],"CVE-2019-17543":[-0.08125345168331215,-0.028542563896041165],"CVE-2019-20454":[-0.2565981644331274,-0.00037861386426120603],"CVE-2019-25013":[-0.18618204765933039,0.09510911137768445],"CVE-2019-3843":[-0.26151665917922406,0.08533155121551943],"CVE-2019-3844":[-0.12598153379526963,0.15354790335714466],"CVE-2020-10029":[-0.12294673946317207,-0.08286329295273567],"CVE-2020-11080":[-0.08774342203110898,-0.06486251941828491],"CVE-2020-14155":[-0.19102596709374312,-0.03956948177746101],"CVE-2020-1751":[-0.12091329272603177,0.10125748684817068],"CVE-2020-1752":[-0.09166265927575201,0.13654540433878806],"CVE-2020-27618":[-0.20490705261365283,-0.0783453844923629],"CVE-2020-6096":[-0.21848377582927003,-0.01349666325563756],"CVE-2021-22946":[-0.2789507594408488,0.023118808993830967],"CVE-2021-22947":[-0.22485023009401955,0.1329942378371062],"CVE-2021-31879":[-0.16686085005454873,-0.09191416915042365],"CVE-2021-3326":[-0.07411464620296015,0.10348635823042857],"CVE-2021-33574":[-0.15791196218495118,-0.059924503475087064],"CVE-2021-35942":[-0.17745072050665506,0.1618390694095116],"CVE-2021-37750":[-0.22252129289010938,0.07178083268130883],"CVE-2021-40528":[-0.060179010586848,0.03264800785148012],"DaemonSet.default":[0.20378366122025346,0.040967510070078206],"Deployment.default":[0.1372153671031264,0.044848232267842014],"bitnami/metallb":[0.27935815742238784,0.0442714216990118],"deps":[0.4066098363305379,-0.9999999999999999],"docker.io/bitnami/metallb-controller:0.10.3-debian-10-r0":[-0.15196243546522087,0.03445102567622675],"docker.io/bitnami/metallb-speaker:0.10.2-debian-10-r110":[-0.13863186517845022,0.03600929227591005],"metallb":[0.37520865819314664,-0.9182370716402241]}},"id":"89178","type":"StaticLayoutProvider"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"89199","type":"CategoricalColorMapper"},{"attributes":{"source":{"id":"89175"}},"id":"89177","type":"CDSView"},{"attributes":{"axis":{"id":"89141"},"ticker":null},"id":"89144","type":"Grid"},{"attributes":{"axis":{"id":"89145"},"dimension":1,"ticker":null},"id":"89148","type":"Grid"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"89163","type":"HoverTool"},{"attributes":{},"id":"89227","type":"NodesOnly"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"89199"}},"size":{"value":20}},"id":"89200","type":"Circle"},{"attributes":{},"id":"89149","type":"PanTool"},{"attributes":{"source":{"id":"89171"}},"id":"89173","type":"CDSView"},{"attributes":{},"id":"89217","type":"BasicTickFormatter"},{"attributes":{"overlay":{"id":"89155"}},"id":"89151","type":"BoxZoomTool"},{"attributes":{"formatter":{"id":"89214"},"major_label_policy":{"id":"89212"},"ticker":{"id":"89142"}},"id":"89141","type":"LinearAxis"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"89155","type":"BoxAnnotation"},{"attributes":{},"id":"89233","type":"Selection"},{"attributes":{"edge_renderer":{"id":"89176"},"inspection_policy":{"id":"89222"},"layout_provider":{"id":"89178"},"node_renderer":{"id":"89172"},"selection_policy":{"id":"89227"}},"id":"89169","type":"GraphRenderer"},{"attributes":{"overlay":{"id":"89229"}},"id":"89165","type":"BoxSelectTool"},{"attributes":{},"id":"89146","type":"BasicTicker"},{"attributes":{},"id":"89135","type":"DataRange1d"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"89229","type":"BoxAnnotation"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,8.1,7.5,6.5,9.8,9.1,8.1,8.1,8.1,8.1,7.8,7.8,7.5,7.5,7.5,7.5,7.5,7.5,7,7,6.5,6.3,6.1,5.9,5.9,5.9,5.9,5.5,5.5,5.3,5.3,null,null],"description":["bitnami/metallb",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-metallb-controller.default (container 0) - metallb-controller","Containers should run as a high UID to avoid host conflict","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Memory requests should be set","Image Pull Policy should be Always","CPU requests should be set","CPU limits should be set","Memory limits should be set","Containers should not share the host network namespace"

View BlastRadius Graph

bryanalves-ipmi-exporter

Bokeh Plot Bokeh.set_log_level("info"); {"29e3e4d2-1821-4ea3-8442-f90c11af38e4":{"defs":[],"roots":{"references":[{"attributes":{"formatter":{"id":"130365"},"major_label_policy":{"id":"130363"},"ticker":{"id":"130294"}},"id":"130293","type":"LinearAxis"},{"attributes":{"below":[{"id":"130289"}],"center":[{"id":"130292"},{"id":"130296"}],"height":768,"left":[{"id":"130293"}],"renderers":[{"id":"130317"},{"id":"130357"}],"title":{"id":"130279"},"toolbar":{"id":"130304"},"width":1024,"x_range":{"id":"130281"},"x_scale":{"id":"130285"},"y_range":{"id":"130283"},"y_scale":{"id":"130287"}},"id":"130278","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"130302","type":"HelpTool"},{"attributes":{},"id":"130294","type":"BasicTicker"},{"attributes":{"source":{"id":"130323"}},"id":"130325","type":"CDSView"},{"attributes":{},"id":"130285","type":"LinearScale"},{"attributes":{},"id":"130362","type":"BasicTickFormatter"},{"attributes":{"formatter":{"id":"130362"},"major_label_policy":{"id":"130360"},"ticker":{"id":"130290"}},"id":"130289","type":"LinearAxis"},{"attributes":{},"id":"130287","type":"LinearScale"},{"attributes":{},"id":"130365","type":"BasicTickFormatter"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"130347"}},"size":{"value":20}},"id":"130348","type":"Circle"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"130319"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"130357","type":"LabelSet"},{"attributes":{},"id":"130290","type":"BasicTicker"},{"attributes":{},"id":"130297","type":"PanTool"},{"attributes":{},"id":"130380","type":"UnionRenderers"},{"attributes":{"data_source":{"id":"130319"},"glyph":{"id":"130348"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"130321"}},"id":"130320","type":"GlyphRenderer"},{"attributes":{"axis":{"id":"130289"},"ticker":null},"id":"130292","type":"Grid"},{"attributes":{},"id":"130283","type":"DataRange1d"},{"attributes":{},"id":"130378","type":"UnionRenderers"},{"attributes":{},"id":"130298","type":"WheelZoomTool"},{"attributes":{"edge_renderer":{"id":"130324"},"inspection_policy":{"id":"130370"},"layout_provider":{"id":"130326"},"node_renderer":{"id":"130320"},"selection_policy":{"id":"130375"}},"id":"130317","type":"GraphRenderer"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_14","CKV_K8S_11","CKV_K8S_16","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_14","CKV_K8S_11","CKV_K8S_16","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9"],"start":["bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","bryanalves/ipmi-exporter","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default"]},"selected":{"id":"130381"},"selection_policy":{"id":"130380"}},"id":"130323","type":"ColumnDataSource"},{"attributes":{"overlay":{"id":"130303"}},"id":"130299","type":"BoxZoomTool"},{"attributes":{"text":"bryanalves-ipmi-exporter"},"id":"130279","type":"Title"},{"attributes":{},"id":"130363","type":"AllLabels"},{"attributes":{"source":{"id":"130319"}},"id":"130321","type":"CDSView"},{"attributes":{"axis":{"id":"130293"},"dimension":1,"ticker":null},"id":"130296","type":"Grid"},{"attributes":{},"id":"130322","type":"MultiLine"},{"attributes":{},"id":"130379","type":"Selection"},{"attributes":{},"id":"130381","type":"Selection"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"130377","type":"BoxAnnotation"},{"attributes":{"active_multi":null,"tools":[{"id":"130297"},{"id":"130298"},{"id":"130299"},{"id":"130300"},{"id":"130301"},{"id":"130302"},{"id":"130311"},{"id":"130312"},{"id":"130313"}]},"id":"130304","type":"Toolbar"},{"attributes":{"graph_layout":{"CKV_K8S_10":[0.05075885996020689,-0.01325756195014344],"CKV_K8S_11":[-0.09497622018832336,-0.07975108714496762],"CKV_K8S_12":[-0.13038057136250478,0.1029673707512024],"CKV_K8S_13":[-0.06046826035982616,0.10070110527328563],"CKV_K8S_14":[-0.08636037040349462,-0.13669917920711427],"CKV_K8S_15":[0.08423897775884591,-0.06033788169613002],"CKV_K8S_16":[-0.16837180789104483,0.07106103571437739],"CKV_K8S_19":[-0.022067270551722844,0.1472177452767733],"CKV_K8S_20":[0.00993305597970605,-0.12897409493476664],"CKV_K8S_22":[0.05922931717639615,0.10899908570325377],"CKV_K8S_23":[0.10061150157702504,0.01091544538865015],"CKV_K8S_28":[0.03908452802059685,-0.08736303219071406],"CKV_K8S_29":[-0.1903862747582642,0.014804300502791926],"CKV_K8S_31":[0.01192749857347535,0.10411313810129923],"CKV_K8S_37":[-0.09225242271042977,0.1423452775110859],"CKV_K8S_38":[-0.13933131673326699,0.00931291515360271],"CKV_K8S_40":[0.07273590634634425,0.05782380569353815],"CKV_K8S_43":[-0.14634795541887693,-0.09446467855619833],"CKV_K8S_8":[-0.03631577803168316,-0.11300944241230261],"CKV_K8S_9":[-0.17252678637766952,-0.04529239317063328],"DaemonSet.default":[-0.05114611175770605,0.003520133972864988],"bryanalves/ipmi-exporter":[-0.03758849884778309,0.008173163712948944],"deps":[1.0,-0.12280517149270348]}},"id":"130326","type":"StaticLayoutProvider"},{"attributes":{"callback":null},"id":"130312","type":"TapTool"},{"attributes":{},"id":"130360","type":"AllLabels"},{"attributes":{},"id":"130375","type":"NodesOnly"},{"attributes":{},"id":"130301","type":"ResetTool"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"130347","type":"CategoricalColorMapper"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"130311","type":"HoverTool"},{"attributes":{},"id":"130370","type":"NodesOnly"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"130303","type":"BoxAnnotation"},{"attributes":{"overlay":{"id":"130377"}},"id":"130313","type":"BoxSelectTool"},{"attributes":{},"id":"130300","type":"SaveTool"},{"attributes":{"data_source":{"id":"130323"},"glyph":{"id":"130322"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"130325"}},"id":"130324","type":"GlyphRenderer"},{"attributes":{},"id":"130281","type":"DataRange1d"},{"attributes":{"data":{"description":["bryanalves/ipmi-exporter",null,"Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-ipmi-exporter.default (container 0) - ipmi-exporter","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Use read-only filesystem for containers where possible"

View BlastRadius Graph

camptocamp-prometheus-puppetdb-sd

Bokeh Plot Bokeh.set_log_level("info"); {"a280d39a-2c36-4fe6-b184-cbb983f49f54":{"defs":[],"roots":{"references":[{"attributes":{"edge_renderer":{"id":"144580"},"inspection_policy":{"id":"144626"},"layout_provider":{"id":"144582"},"node_renderer":{"id":"144576"},"selection_policy":{"id":"144631"}},"id":"144573","type":"GraphRenderer"},{"attributes":{},"id":"144618","type":"BasicTickFormatter"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"144603","type":"CategoricalColorMapper"},{"attributes":{},"id":"144553","type":"PanTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"144559","type":"BoxAnnotation"},{"attributes":{},"id":"144619","type":"AllLabels"},{"attributes":{},"id":"144550","type":"BasicTicker"},{"attributes":{"source":{"id":"144579"}},"id":"144581","type":"CDSView"},{"attributes":{"data_source":{"id":"144575"},"glyph":{"id":"144604"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"144577"}},"id":"144576","type":"GlyphRenderer"},{"attributes":{"axis":{"id":"144549"},"dimension":1,"ticker":null},"id":"144552","type":"Grid"},{"attributes":{"below":[{"id":"144545"}],"center":[{"id":"144548"},{"id":"144552"}],"height":768,"left":[{"id":"144549"}],"renderers":[{"id":"144573"},{"id":"144613"}],"title":{"id":"144535"},"toolbar":{"id":"144560"},"width":1024,"x_range":{"id":"144537"},"x_scale":{"id":"144541"},"y_range":{"id":"144539"},"y_scale":{"id":"144543"}},"id":"144534","subtype":"Figure","type":"Plot"},{"attributes":{"data_source":{"id":"144579"},"glyph":{"id":"144578"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"144581"}},"id":"144580","type":"GlyphRenderer"},{"attributes":{},"id":"144631","type":"NodesOnly"},{"attributes":{},"id":"144558","type":"HelpTool"},{"attributes":{},"id":"144626","type":"NodesOnly"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"144567","type":"HoverTool"},{"attributes":{"data":{"description":["camptocamp/prometheus-puppetdb-sd",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-prometheus-kube-state-metrics.default (container 0) - prometheus-kube-state-metrics","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability","Containers should not run with allowPrivilegeEscalation","Memory requests should be set","Minimize the admission of containers with capabilities assigned"

View BlastRadius Graph

ceph-csi-ceph-csi-cephfs

Bokeh Plot Bokeh.set_log_level("info"); {"32465bc4-dd0c-43be-9688-d4d44b6ec868":{"defs":[],"roots":{"references":[{"attributes":{"formatter":{"id":"148185"},"major_label_policy":{"id":"148183"},"ticker":{"id":"148114"}},"id":"148113","type":"LinearAxis"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"148131","type":"HoverTool"},{"attributes":{"axis":{"id":"148109"},"ticker":null},"id":"148112","type":"Grid"},{"attributes":{"callback":null},"id":"148132","type":"TapTool"},{"attributes":{},"id":"148183","type":"AllLabels"},{"attributes":{"data":{"end":["CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_16","CKV_K8S_25","CKV_K8S_39","CKV_K8S_19","Deployment.default","DaemonSet.default","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_16","CKV_K8S_25","CKV_K8S_39","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","quay.io/cephcsi/cephcsi:v3.4.0","CVE-2017-18342","CVE-2019-16789","CVE-2019-16792","CVE-2019-16786","CVE-2019-16785","CVE-2019-14806","CVE-2019-1010083","CVE-2018-1000656","CVE-2021-33910","CVE-2021-35942","CVE-2020-12762","CVE-2021-36222","CVE-2021-3580","CVE-2021-33560","CVE-2021-27218","CVE-2021-22946","CVE-2021-41617","CVE-2021-38185","CVE-2021-37750","CVE-2021-3487","CVE-2021-22922","CVE-2021-3445","CVE-2021-22947","CVE-2020-25658","CVE-2020-14145","CVE-2021-22923","CVE-2019-20838","CVE-2021-33574","CVE-2021-28153","CVE-2020-14155"],"start":["ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","ceph-csi/ceph-csi-cephfs","CKV_K8S_38","CKV_K8S_38","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_16","CKV_K8S_25","CKV_K8S_39","CKV_K8S_19","DaemonSet.default","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0"]},"selected":{"id":"148201"},"selection_policy":{"id":"148200"}},"id":"148143","type":"ColumnDataSource"},{"attributes":{},"id":"148107","type":"LinearScale"},{"attributes":{},"id":"148103","type":"DataRange1d"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"148197","type":"BoxAnnotation"},{"attributes":{},"id":"148142","type":"MultiLine"},{"attributes":{},"id":"148200","type":"UnionRenderers"},{"attributes":{"data_source":{"id":"148139"},"glyph":{"id":"148168"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"148141"}},"id":"148140","type":"GlyphRenderer"},{"attributes":{"text":"ceph-csi-ceph-csi-cephfs"},"id":"148099","type":"Title"},{"attributes":{},"id":"148110","type":"BasicTicker"},{"attributes":{},"id":"148105","type":"LinearScale"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,8.2,7.5,7.5,7.5,7.5,7.5,7.5,5.5,9.1,7.8,7.5,7.5,7.5,7.5,7.5,7,7,6.5,6.5,6.5,6.4,6.1,5.9,5.9,5.7,7.5,5.9,5.3,5.3],"description":["ceph-csi/ceph-csi-cephfs",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-ceph-csi-cephfs-provisioner.default (container 5) - liveness-prometheus","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible"

View BlastRadius Graph

ceph-csi-ceph-csi-rbd

Bokeh Plot Bokeh.set_log_level("info"); {"6338d038-9c74-417e-9095-0805546ca35e":{"defs":[],"roots":{"references":[{"attributes":{},"id":"148524","type":"UnionRenderers"},{"attributes":{},"id":"148431","type":"LinearScale"},{"attributes":{"formatter":{"id":"148509"},"major_label_policy":{"id":"148507"},"ticker":{"id":"148438"}},"id":"148437","type":"LinearAxis"},{"attributes":{},"id":"148525","type":"Selection"},{"attributes":{},"id":"148522","type":"UnionRenderers"},{"attributes":{},"id":"148506","type":"BasicTickFormatter"},{"attributes":{"axis":{"id":"148437"},"dimension":1,"ticker":null},"id":"148440","type":"Grid"},{"attributes":{"edge_renderer":{"id":"148468"},"inspection_policy":{"id":"148514"},"layout_provider":{"id":"148470"},"node_renderer":{"id":"148464"},"selection_policy":{"id":"148519"}},"id":"148461","type":"GraphRenderer"},{"attributes":{"axis":{"id":"148433"},"ticker":null},"id":"148436","type":"Grid"},{"attributes":{"overlay":{"id":"148447"}},"id":"148443","type":"BoxZoomTool"},{"attributes":{},"id":"148444","type":"SaveTool"},{"attributes":{"active_multi":null,"tools":[{"id":"148441"},{"id":"148442"},{"id":"148443"},{"id":"148444"},{"id":"148445"},{"id":"148446"},{"id":"148455"},{"id":"148456"},{"id":"148457"}]},"id":"148448","type":"Toolbar"},{"attributes":{},"id":"148438","type":"BasicTicker"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"148455","type":"HoverTool"},{"attributes":{"data_source":{"id":"148467"},"glyph":{"id":"148466"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"148469"}},"id":"148468","type":"GlyphRenderer"},{"attributes":{},"id":"148429","type":"LinearScale"},{"attributes":{"data":{"end":["CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_16","CKV_K8S_25","CKV_K8S_39","CKV_K8S_19","CKV_K8S_17","Deployment.default","DaemonSet.default","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_16","CKV_K8S_25","CKV_K8S_39","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_17","quay.io/cephcsi/cephcsi:v3.4.0","CVE-2017-18342","CVE-2019-16789","CVE-2019-16792","CVE-2019-16786","CVE-2019-16785","CVE-2019-14806","CVE-2019-1010083","CVE-2018-1000656","CVE-2021-33910","CVE-2021-35942","CVE-2020-12762","CVE-2021-36222","CVE-2021-3580","CVE-2021-33560","CVE-2021-27218","CVE-2021-22946","CVE-2021-41617","CVE-2021-38185","CVE-2021-37750","CVE-2021-3487","CVE-2021-22922","CVE-2021-3445","CVE-2021-22947","CVE-2020-25658","CVE-2020-14145","CVE-2021-22923","CVE-2019-20838","CVE-2021-33574","CVE-2021-28153","CVE-2020-14155"],"start":["ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","ceph-csi/ceph-csi-rbd","CKV_K8S_38","CKV_K8S_38","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_16","CKV_K8S_25","CKV_K8S_39","CKV_K8S_19","DaemonSet.default","DaemonSet.default","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0","quay.io/cephcsi/cephcsi:v3.4.0"]},"selected":{"id":"148525"},"selection_policy":{"id":"148524"}},"id":"148467","type":"ColumnDataSource"},{"attributes":{},"id":"148427","type":"DataRange1d"},{"attributes":{},"id":"148434","type":"BasicTicker"},{"attributes":{},"id":"148523","type":"Selection"},{"attributes":{},"id":"148466","type":"MultiLine"},{"attributes":{"text":"ceph-csi-ceph-csi-rbd"},"id":"148423","type":"Title"},{"attributes":{},"id":"148442","type":"WheelZoomTool"},{"attributes":{"callback":null},"id":"148456","type":"TapTool"},{"attributes":{"data_source":{"id":"148463"},"glyph":{"id":"148492"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"148465"}},"id":"148464","type":"GlyphRenderer"},{"attributes":{},"id":"148514","type":"NodesOnly"},{"attributes":{},"id":"148507","type":"AllLabels"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"148491","type":"CategoricalColorMapper"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,8.2,7.5,7.5,7.5,7.5,7.5,7.5,5.5,9.1,7.8,7.5,7.5,7.5,7.5,7.5,7,7,6.5,6.5,6.5,6.4,6.1,5.9,5.9,5.7,7.5,5.9,5.3,5.3],"description":["ceph-csi/ceph-csi-rbd",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-ceph-csi-rbd-provisioner.default (container 6) - liveness-prometheus","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible"

View BlastRadius Graph

choerodon-choerodon-monitoring

CVE-2019-14697, CVE-2018-1000517, CVE-2021-30139, CVE-2019-5747, CVE-2018-20679, CVE-2021-41581, CVE-2020-28928, CVE-2017-16544, CVE-2018-1000500, CVE-2015-9261, CVE-2021-3520, CVE-2019-5482, CVE-2019-5481, CVE-2019-12900, CVE-2017-14062, CVE-2017-12424, CVE-2020-10878, CVE-2020-10543, CVE-2021-20305, CVE-2018-12886, CVE-2020-1712, CVE-2019-5436, CVE-2017-20002, CVE-2021-3580, CVE-2021-33560, CVE-2021-27212, CVE-2021-23840, CVE-2021-22946, CVE-2020-8286, CVE-2020-8285, CVE-2020-8231, CVE-2020-36230, CVE-2020-36229, CVE-2020-36228, CVE-2020-36227, CVE-2020-36226, CVE-2020-36225, CVE-2020-36224, CVE-2020-36223, CVE-2020-36222, CVE-2020-36221, CVE-2020-29361, CVE-2020-28196, CVE-2020-25710, CVE-2020-25709, CVE-2020-25692, CVE-2020-12723, CVE-2020-12243, CVE-2020-11080, CVE-2019-9513, CVE-2019-9511, CVE-2019-3829, CVE-2019-19906, CVE-2019-15903, CVE-2019-13565, CVE-2018-20843, CVE-2021-3712, CVE-2019-1543, CVE-2020-8177, CVE-2019-5188, CVE-2019-5094, CVE-2021-37750, CVE-2020-15999, CVE-2021-23841, CVE-2021-22947, CVE-2020-1971, CVE-2020-27350, CVE-2021-33910, CVE-2020-3810, CVE-2021-22876, CVE-2020-29362, CVE-2019-1551, CVE-2018-20217, CVE-2021-33574, CVE-2019-9169, CVE-2018-6551, CVE-2018-6485, CVE-2017-12652, CVE-2017-11462, CVE-2021-35942, CVE-2018-1000858, CVE-2020-6096, CVE-2019-17543, CVE-2019-17498, CVE-2019-13115, CVE-2019-3844, CVE-2019-3843, CVE-2018-6954, CVE-2018-1000001, CVE-2016-2779, CVE-2021-3326, CVE-2019-14855, CVE-2018-9234, CVE-2018-1000168, CVE-2009-5155, CVE-2020-1752, CVE-2020-1751, CVE-2018-5710, CVE-2016-2781, CVE-2019-13627, CVE-2021-40528, CVE-2019-25013, CVE-2017-12132, CVE-2016-10228, CVE-2018-16869, CVE-2018-16868, CVE-2020-27618, CVE-2020-10029, CVE-2018-19211, CVE-2019-17595, CVE-2020-14155, CVE-2019-17594, CVE-2018-7169, CVE-2016-10739, CVE-2017-15874, CVE-2017-15873, CVE-2016-2148, CVE-2016-2147, CKV_K8S_38, CKV_K8S_40, CKV_K8S_29, CKV_K8S_23, CKV_K8S_31, CKV_K8S_43, CKV_K8S_30, CKV_K8S_22, CKV_K8S_28, CKV_K8S_20, CKV_K8S_37, CKV_K8S_15, CKV_K8S_12, CKV_K8S_10, CKV_K8S_11, CKV_K8S_13, CKV_K8S_19, CKV_K8S_17, CKV_K8S_26, CKV_K8S_8, CKV_K8S_9, CKV_K8S_16, CKV_K8S_49

October 00, 1011

Bokeh Plot Bokeh.set_log_level("info"); {"b058b8d5-58cf-41fa-89ce-feadadcbc213":{"defs":[],"roots":{"references":[{"attributes":{},"id":"167871","type":"LinearScale"},{"attributes":{"below":[{"id":"167873"}],"center":[{"id":"167876"},{"id":"167880"}],"height":768,"left":[{"id":"167877"}],"renderers":[{"id":"167901"},{"id":"167941"}],"title":{"id":"167863"},"toolbar":{"id":"167888"},"width":1024,"x_range":{"id":"167865"},"x_scale":{"id":"167869"},"y_range":{"id":"167867"},"y_scale":{"id":"167871"}},"id":"167862","subtype":"Figure","type":"Plot"},{"attributes":{"overlay":{"id":"167961"}},"id":"167897","type":"BoxSelectTool"},{"attributes":{},"id":"167885","type":"ResetTool"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"167895","type":"HoverTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"167887","type":"BoxAnnotation"},{"attributes":{},"id":"167949","type":"BasicTickFormatter"},{"attributes":{},"id":"167959","type":"NodesOnly"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"167961","type":"BoxAnnotation"},{"attributes":{"source":{"id":"167903"}},"id":"167905","type":"CDSView"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"167931"}},"size":{"value":20}},"id":"167932","type":"Circle"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"167903"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"167941","type":"LabelSet"},{"attributes":{},"id":"167869","type":"LinearScale"},{"attributes":{},"id":"167881","type":"PanTool"},{"attributes":{},"id":"167906","type":"MultiLine"},{"attributes":{"axis":{"id":"167877"},"dimension":1,"ticker":null},"id":"167880","type":"Grid"},{"attributes":{},"id":"167964","type":"UnionRenderers"},{"attributes":{},"id":"167884","type":"SaveTool"},{"attributes":{},"id":"167954","type":"NodesOnly"},{"attributes":{},"id":"167963","type":"Selection"},{"attributes":{},"id":"167946","type":"BasicTickFormatter"},{"attributes":{"data_source":{"id":"167907"},"glyph":{"id":"167906"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"167909"}},"id":"167908","type":"GlyphRenderer"},{"attributes":{"active_multi":null,"tools":[{"id":"167881"},{"id":"167882"},{"id":"167883"},{"id":"167884"},{"id":"167885"},{"id":"167886"},{"id":"167895"},{"id":"167896"},{"id":"167897"}]},"id":"167888","type":"Toolbar"},{"attributes":{"text":"choerodon-choerodon-monitoring"},"id":"167863","type":"Title"},{"attributes":{},"id":"167865","type":"DataRange1d"},{"attributes":{"source":{"id":"167907"}},"id":"167909","type":"CDSView"},{"attributes":{"graph_layout":{"CKV_K8S_10":[-0.2508281563612014,0.2643380107515969],"CKV_K8S_11":[-0.22929496579189995,0.23160637810829818],"CKV_K8S_12":[-0.24753534133656008,0.24385874034410387],"CKV_K8S_13":[-0.23482029384239977,0.251151579971801],"CKV_K8S_15":[-0.21518890674469957,0.24342498897598802],"CKV_K8S_16":[-0.2807492095144918,0.23501002881815616],"CKV_K8S_17":[-0.3402456348124489,0.2502427991617496],"CKV_K8S_19":[-0.3460074968633517,0.22906320087408083],"CKV_K8S_20":[-0.2686154079007662,0.25694998232691213],"CKV_K8S_22":[-0.24564515990655836,0.21631269617262222],"CKV_K8S_23":[-0.27952084735941873,0.1845143992323531],"CKV_K8S_26":[-0.3443506045383888,0.20614213263608586],"CKV_K8S_28":[-0.24968310543022842,0.1784719672536321],"CKV_K8S_29":[-0.2407214958785961,0.15907966801336204],"CKV_K8S_30":[-0.21944851300113793,0.21970028219519497],"CKV_K8S_31":[-0.23120324741557188,0.1840713486920749],"CKV_K8S_37":[-0.2662279470516451,0.17211203247352333],"CKV_K8S_38":[-0.2219358094752478,0.20166085904667722],"CKV_K8S_40":[-0.26482915150100633,0.19361387686485862],"CKV_K8S_43":[-0.24371013085463958,0.19820227225723994],"CKV_K8S_49":[-0.4082908290941364,0.2214903131796516],"CKV_K8S_8":[-0.26130093679480476,0.23898590397719063],"CKV_K8S_9":[-0.22730912384941782,0.2620748414393545],"CVE-2009-5155":[0.11502461361573692,0.003684901433458908],"CVE-2015-9261":[-0.16155929187016466,0.45876220345885693],"CVE-2016-10228":[0.1486562974260507,-0.07027932798147514],"CVE-2016-10739":[0.21024890961461884,-0.030147313036113125],"CVE-2016-2147":[-0.06075753741645636,0.4057920284634302],"CVE-2016-2148":[-0.08225462428577507,0.4183607188997157],"CVE-2016-2779":[0.2303882843429967,-0.18306497211243075],"CVE-2016-2781":[0.06758685191488568,-0.22457169123407233],"CVE-2017-11462":[0.12496063378067729,-0.25745920964664504],"CVE-2017-12132":[0.028430193632301447,-0.23061052152476325],"CVE-2017-12424":[0.1412090339410813,-0.14263657504962152],"CVE-2017-12652":[0.01890289587699797,-0.17526880876045808],"CVE-2017-14062":[0.11881624782358138,-0.06517648193318158],"CVE-2017-15873":[-0.22713819758509024,0.4738076409431618],"CVE-2017-15874":[-0.1992095931295737,0.47779588897916553],"CVE-2017-16544":[-0.19237796488690145,0.4346595628573244],"CVE-2017-20002":[0.14411712480308866,-0.25292944359450314],"CVE-2018-1000001":[0.13040959148365944,-0.23306997736640647],"CVE-2018-1000168":[0.22517964594944484,-0.05021745792145767],"CVE-2018-1000500":[-0.16867794718408105,0.4278397021467378],"CVE-2018-1000517":[-0.2281090748608093,0.38774953874860624],"CVE-2018-1000858":[0.05055527506233323,-0.016131252238633688],"CVE-2018-12886":[-0.017977748826116177,-0.12215719436410961],"CVE-2018-16868":[0.24637031274836174,-0.11606890937766116],"CVE-2018-16869":[-0.000927484574903459,-0.19782738263549984],"CVE-2018-19211":[0.19434244678101,-0.1656628785423523],"CVE-2018-20217":[0.03316689827000401,-0.1040402014532579],"CVE-2018-20679":[-0.24273714355514664,0.39732763360650303],"CVE-2018-20843":[0.10307761663252105,-0.02123370980841588],"CVE-2018-5710":[0.06063284783694398,-0.20380193397361576],"CVE-2018-6485":[0.21694077623286934,-0.06756263370862575],"CVE-2018-6551":[0.17152334791922547,-0.0351692356343913],"CVE-2018-6954":[0.09279129818189065,-0.042425979071177525],"CVE-2018-7169":[0.05832245151221821,-0.13307384701339917],"CVE-2018-9234":[0.08794262901624761,-0.06954364717676927],"CVE-2019-12900":[0.04032246145695766,-0.16212863043190623],"CVE-2019-13115":[0.09426484333815274,-0.0008420169892407514],"CVE-2019-13565":[-0.005638102405194935,-0.13786943153928302],"CVE-2019-13627":[-0.005228415205050115,-0.07868964831117567],"CVE-2019-14697":[-0.29948231351644483,0.3939536360386767],"CVE-2019-14855":[0.23743430641609672,-0.07478819032573224],"CVE-2019-1543":[0.18196311601979737,-0.009047783113177426],"CVE-2019-1551":[0.07265037095055459,-0.004790700897551998],"CVE-2019-15903":[0.19086224185624298,-0.02596691795551788],"CVE-2019-17498":[0.24228782707475838,-0.09611035450006229],"CVE-2019-17543":[0.06048459333287256,-0.1785249350795711],"CVE-2019-17594":[0.08750731135193868,-0.23682688759354478],"CVE-2019-17595":[0.03877239437024979,-0.19560242558669477],"CVE-2019-19906":[0.16465948345766976,-0.2035518337039596],"CVE-2019-25013":[0.1457961619364317,-0.04381856108617212],"CVE-2019-3829":[0.20116381306838868,-0.10831350383768233],"CVE-2019-3843":[0.17722336377253795,-0.11484334629639374],"CVE-2019-3844":[0.08215929128847685,-0.15980395684720738],"CVE-2019-5094":[-0.012490282718526936,-0.1788696607978841],"CVE-2019-5188":[0.16152227525953589,-0.0011135189742736478],"CVE-2019-5436":[0.05715281213964215,-0.059899448059090296],"CVE-2019-5481":[0.03610489526837842,-0.031781044744977685],"CVE-2019-5482":[0.15372923444869757,-0.021092550413995336],"CVE-2019-5747":[-0.22789208894268836,0.4040424351176122],"CVE-2019-9169":[0.014146514077572482,-0.21612756858853785],"CVE-2019-9511":[0.030988139202311492,-0.13171674656619536],"CVE-2019-9513":[0.20885599334777968,-0.1836923086589964],"CVE-2020-10029":[0.08995527525424549,-0.21398510522092062],"CVE-2020-10543":[0.06753643554352125,-0.24985606245933636],"CVE-2020-10878":[0.1746619704097901,-0.13894605232310553],"CVE-2020-11080":[0.2186322480508213,-0.08790979953003221],"CVE-2020-12243":[0.006516432793834553,-0.05815034858587126],"CVE-2020-12723":[0.07513611418025987,-0.023486728144586837],"CVE-2020-14155":[0.08647569925950378,-0.258638038066101],"CVE-2020-15999":[0.02092502423142954,-0.0701033506409656],"CVE-2020-1712":[0.14665804103029645,-0.17994618642625576],"CVE-2020-1751":[0.106327779744092,-0.25572986498140493],"CVE-2020-1752":[0.048758402452323296,-0.2433470290959005],"CVE-2020-1971":[0.02278227514543394,-0.0444128383538747],"CVE-2020-25692":[0.23879782517780845,-0.1476888584535451],"CVE-2020-25709":[0.20097180305157528,-0.14286250547084717],"CVE-2020-25710":[0.21594822066573618,-0.13038231794247546],"CVE-2020-27350":[0.04129594479111647,-0.0782501736977777],"CVE-2020-27618":[0.11639610296220818,-0.17667251025079006],"CVE-2020-28196":[0.12406753722699414,-0.03302426916233053],"CVE-2020-28928":[-0.3155876991382267,0.38509381017346794],"CVE-2020-29361":[0.2018450071470431,-0.20213980434343726],"CVE-2020-29362":[-0.019148360553681864,-0.15228829289191184],"CVE-2020-36221":[0.08865969601938352,-0.1909913168326105],"CVE-2020-36222":[0.1676444216740619,-0.16497296421274832],"CVE-2020-36223":[0.17303970664509485,-0.05702989510694948],"CVE-2020-36224":[0.1563289853724724,-0.09520314839358267],"CVE-2020-36225":[0.22373599342226927,-0.10905794876038477],"CVE-2020-36226":[0.1291529781416758,-0.012390420301629653],"CVE-2020-36227":[0.23827566551938514,-0.1315156263217156],"CVE-2020-36228":[0.18652082543933393,-0.08748281938347212],"CVE-2020-36229":[0.007339001181055192,-0.11896083661241603],"CVE-2020-36230":[0.06664494612455671,-0.09553852233536281],"CVE-2020-3810":[0.10958936998451098,-0.23055460416647527],"CVE-2020-6096":[0.00014457532237110987,-0.16534272294221244],"CVE-2020-8177":[0.008759670829000895,-0.09575834596302575],"CVE-2020-8231":[0.2043682960678466,-0.22321523610799354],"CVE-2020-8285":[0.14740507960289717,-0.22500189626460762],"CVE-2020-8286":[0.20071841011246258,-0.04768313093938977],"CVE-2021-20305":[0.16758475956084198,-0.22811076980743453],"CVE-2021-22876":[0.1942014595682227,-0.0678763828159596],"CVE-2021-22946":[0.16269885350005608,-0.24747658964246658],"CVE-2021-22947":[0.18412989823671386,-0.2376593384148405],"CVE-2021-23840":[-0.013968962774468319,-0.10076480967836415],"CVE-2021-23841":[0.13840483033245524,-0.20402146337193705],"CVE-2021-27212":[0.05893372784383897,-0.03888695554460193],"CVE-2021-30139":[-0.3023421167127937,0.41133543214739116],"CVE-2021-3326":[0.14029462190133055,0.00523639063678391],"CVE-2021-33560":[0.018990629394820838,-0.19685535580121727],"CVE-2021-33574":[0.1152673366799945,-0.20760069674849105],"CVE-2021-33910":[0.014911103588806684,-0.14890674631297007],"CVE-2021-3520":[0.22183653292210737,-0.20310773867981724],"CVE-2021-3580":[0.18151937667141785,-0.18754552874479002],"CVE-2021-35942":[0.2401606851767827,-0.16537016374766036],"CVE-2021-3712":[0.18568067019871992,-0.21541950443069616],"CVE-2021-37750":[0.04380773709678463,-0.22086879608058008],"CVE-2021-40528":[0.2185405801678738,-0.16072937076164426],"CVE-2021-41581":[-0.2825780234989981,0.4161789810422818],"ClusterRole.default":[-0.4938817380234728,0.2227469689715164],"DaemonSet.default":[-0.2705233108262993,0.22122775357940128],"Deployment.default":[-0.17670531110114213,0.20543194640803528],"choerodon/choerodon-monitoring":[-0.28122079964981067,0.21689189486231453],"deps":[-1.0,0.16145058972923165],"registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:init":[-0.2583720213331314,0.35042684303174454],"registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:v0.7.1":[-0.18670617237117065,0.36591149626670466],"registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:init":[-0.2505804301757131,0.35397448772103973],"registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:v2.2.1":[-0.19722497252947327,0.38002174712204834],"registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2":[0.10847924768410253,-0.11993391187474492],"weaveworks/watch:master-5b2a6e5":[-0.10834543396514958,0.3338137140504062]}},"id":"167910","type":"StaticLayoutProvider"},{"attributes":{},"id":"167886","type":"HelpTool"},{"attributes":{"overlay":{"id":"167887"}},"id":"167883","type":"BoxZoomTool"},{"attributes":{},"id":"167882","type":"WheelZoomTool"},{"attributes":{},"id":"167944","type":"AllLabels"},{"attributes":{},"id":"167874","type":"BasicTicker"},{"attributes":{"callback":null},"id":"167896","type":"TapTool"},{"attributes":{"data":{"end":["CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_37","CKV_K8S_15","CKV_K8S_12","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_19","CKV_K8S_17","CKV_K8S_26","CKV_K8S_8","CKV_K8S_9","CKV_K8S_16","CKV_K8S_49","Deployment.default","DaemonSet.default","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_37","CKV_K8S_15","CKV_K8S_12","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_16","CKV_K8S_8","CKV_K8S_9","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:v0.7.1","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:v2.2.1","weaveworks/watch:master-5b2a6e5","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_17","CKV_K8S_26","CKV_K8S_8","CKV_K8S_9","ClusterRole.default","CVE-2019-14697","CVE-2018-1000517","CVE-2021-30139","CVE-2019-5747","CVE-2018-20679","CVE-2021-41581","CVE-2020-28928","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:v0.7.1","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:v2.2.1","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:v0.7.1","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:v2.2.1","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:v0.7.1","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:v2.2.1","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:init","CVE-2017-16544","CVE-2018-1000500","CVE-2015-9261","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:v2.2.1","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:v2.2.1","CVE-2021-3520","CVE-2019-5482","CVE-2019-5481","CVE-2019-12900","CVE-2017-14062","CVE-2017-12424","CVE-2020-10878","CVE-2020-10543","CVE-2021-20305","CVE-2018-12886","CVE-2020-1712","CVE-2019-5436","CVE-2017-20002","CVE-2021-3580","CVE-2021-33560","CVE-2021-27212","CVE-2021-23840","CVE-2021-22946","CVE-2020-8286","CVE-2020-8285","CVE-2020-8231","CVE-2020-36230","CVE-2020-36229","CVE-2020-36228","CVE-2020-36227","CVE-2020-36226","CVE-2020-36225","CVE-2020-36224","CVE-2020-36223","CVE-2020-36222","CVE-2020-36221","CVE-2020-29361","CVE-2020-28196","CVE-2020-25710","CVE-2020-25709","CVE-2020-25692","CVE-2020-12723","CVE-2020-12243","CVE-2020-11080","CVE-2019-9513","CVE-2019-9511","CVE-2019-3829","CVE-2019-19906","CVE-2019-15903","CVE-2019-13565","CVE-2018-20843","CVE-2021-3712","CVE-2019-1543","CVE-2020-8177","CVE-2019-5188","CVE-2019-5094","CVE-2021-37750","CVE-2020-15999","CVE-2021-23841","CVE-2021-22947","CVE-2020-1971","CVE-2020-27350","CVE-2021-33910","CVE-2020-3810","CVE-2021-22876","CVE-2020-29362","CVE-2019-1551","CVE-2018-20217","CVE-2021-33574","CVE-2019-9169","CVE-2018-6551","CVE-2018-6485","CVE-2017-12652","CVE-2017-11462","CVE-2021-35942","CVE-2018-1000858","CVE-2020-6096","CVE-2019-17543","CVE-2019-17498","CVE-2019-13115","CVE-2019-3844","CVE-2019-3843","CVE-2018-6954","CVE-2018-1000001","CVE-2016-2779","CVE-2021-3326","CVE-2019-14855","CVE-2018-9234","CVE-2018-1000168","CVE-2009-5155","CVE-2020-1752","CVE-2020-1751","CVE-2018-5710","CVE-2016-2781","CVE-2019-13627","CVE-2021-40528","CVE-2019-25013","CVE-2017-12132","CVE-2016-10228","CVE-2018-16869","CVE-2018-16868","CVE-2020-27618","CVE-2020-10029","CVE-2018-19211","CVE-2019-17595","CVE-2020-14155","CVE-2019-17594","CVE-2018-7169","CVE-2016-10739","CVE-2017-15874","CVE-2017-15873","CVE-2016-2148","CVE-2016-2147"],"start":["choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","choerodon/choerodon-monitoring","CKV_K8S_38","CKV_K8S_38","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_40","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_37","CKV_K8S_15","CKV_K8S_12","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_49","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:init","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:init","CVE-2019-14697","CVE-2018-1000517","CVE-2018-1000517","CVE-2018-1000517","CVE-2021-30139","CVE-2019-5747","CVE-2019-5747","CVE-2019-5747","CVE-2018-20679","CVE-2018-20679","CVE-2018-20679","CVE-2021-41581","CVE-2020-28928","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:v0.7.1","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:v0.7.1","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/alertmanager:v0.7.1","CVE-2017-16544","CVE-2018-1000500","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-shanghai.aliyuncs.com/choerodon/grafana:6.2.2","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:v2.2.1","registry.cn-hangzhou.aliyuncs.com/choerodon-tools/prometheus:v2.2.1","weaveworks/watch:master-5b2a6e5","weaveworks/watch:master-5b2a6e5"]},"selected":{"id":"167965"},"selection_policy":{"id":"167964"}},"id":"167907","type":"ColumnDataSource"},{"attributes":{},"id":"167878","type":"BasicTicker"},{"attributes":{"formatter":{"id":"167949"},"major_label_policy":{"id":"167947"},"ticker":{"id":"167878"}},"id":"167877","type":"LinearAxis"},{"attributes":{},"id":"167947","type":"AllLabels"},{"attributes":{},"id":"167867","type":"DataRange1d"},{"attributes":{},"id":"167962","type":"UnionRenderers"},{"attributes":{"formatter":{"id":"167946"},"major_label_policy":{"id":"167944"},"ticker":{"id":"167874"}},"id":"167873","type":"LinearAxis"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"167931","type":"CategoricalColorMapper"},{"attributes":{},"id":"167965","type":"Selection"},{"attributes":{"axis":{"id":"167873"},"ticker":null},"id":"167876","type":"Grid"},{"attributes":{"data_source":{"id":"167903"},"glyph":{"id":"167932"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"167905"}},"id":"167904","type":"GlyphRenderer"},{"attributes":{"edge_renderer":{"id":"167908"},"inspection_policy":{"id":"167954"},"layout_provider":{"id":"167910"},"node_renderer":{"id":"167904"},"selection_policy":{"id":"167959"}},"id":"167901","type":"GraphRenderer"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,9.8,7.5,7.5,7.5,5.5,5.5,null,8.8,8.1,5.5,null,9.8,9.8,9.8,9.8,9.8,9.8,8.6,8.2,8.1,8.1,7.8,7.8,7.8,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.4,7.4,7.1,6.7,6.7,6.5,6.5,5.9,5.9,5.9,5.7,5.5,5.5,5.3,5.3,5.3,5.3,9.8,9.8,9.8,9.8,9.8,9.8,9.1,8.8,8.1,8.1,8.1,8.1,7.8,7.8,7.8,7.8,7.8,7.5,7.5,7.5,7.5,7.5,7,7,6.5,6.5,6.3,5.9,5.9,5.9,5.9,5.7,5.6,5.5,5.5,5.5,5.4,5.3,5.3,5.3,5.3,null,null,5.5,5.5,null,9.8,7.5],"description":["choerodon/choerodon-monitoring",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-kube-state.default (container 0) - kube-state-metrics","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible"

View BlastRadius Graph

choerodon-kube-prometheus

Bokeh Plot Bokeh.set_log_level("info"); {"0bd18eb8-5208-4f5a-b56b-640f1dad5baf":{"defs":[],"roots":{"references":[{"attributes":{},"id":"158810","type":"WheelZoomTool"},{"attributes":{},"id":"158875","type":"AllLabels"},{"attributes":{},"id":"158806","type":"BasicTicker"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"158831"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"158869","type":"LabelSet"},{"attributes":{"edge_renderer":{"id":"158836"},"inspection_policy":{"id":"158882"},"layout_provider":{"id":"158838"},"node_renderer":{"id":"158832"},"selection_policy":{"id":"158887"}},"id":"158829","type":"GraphRenderer"},{"attributes":{},"id":"158834","type":"MultiLine"},{"attributes":{},"id":"158799","type":"LinearScale"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"158823","type":"HoverTool"},{"attributes":{},"id":"158890","type":"UnionRenderers"},{"attributes":{"data_source":{"id":"158835"},"glyph":{"id":"158834"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"158837"}},"id":"158836","type":"GlyphRenderer"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"158859","type":"CategoricalColorMapper"},{"attributes":{},"id":"158887","type":"NodesOnly"},{"attributes":{},"id":"158877","type":"BasicTickFormatter"},{"attributes":{"text":"choerodon-kube-prometheus"},"id":"158791","type":"Title"},{"attributes":{"below":[{"id":"158801"}],"center":[{"id":"158804"},{"id":"158808"}],"height":768,"left":[{"id":"158805"}],"renderers":[{"id":"158829"},{"id":"158869"}],"title":{"id":"158791"},"toolbar":{"id":"158816"},"width":1024,"x_range":{"id":"158793"},"x_scale":{"id":"158797"},"y_range":{"id":"158795"},"y_scale":{"id":"158799"}},"id":"158790","subtype":"Figure","type":"Plot"},{"attributes":{"graph_layout":{"CKV_K8S_1":[-0.20372264442975166,0.3306425002968399],"CKV_K8S_10":[-0.14182618066477531,0.1278284448002483],"CKV_K8S_11":[-0.06825599553333374,0.11671143409831608],"CKV_K8S_12":[-0.03580432129354525,0.151193848484585],"CKV_K8S_13":[-0.1709228815330965,0.07647144125888845],"CKV_K8S_15":[-0.08511333189457722,0.17330782470939687],"CKV_K8S_17":[-0.21957044970934034,0.14118566246825787],"CKV_K8S_19":[-0.023700266369537315,0.19093647117917595],"CKV_K8S_20":[-0.11481701989054519,0.07521078110383064],"CKV_K8S_22":[-0.03413327367011852,0.12315073440694463],"CKV_K8S_28":[-0.09369531567377017,0.14163666206784428],"CKV_K8S_30":[-0.1652865539610715,0.11153081714898551],"CKV_K8S_31":[-0.1446721669473097,0.09016250121616419],"CKV_K8S_32":[-0.29445412068789395,0.29131099623430873],"CKV_K8S_35":[-0.07297260655933864,0.23563142975859275],"CKV_K8S_36":[-0.1707339006947843,0.3632805776596816],"CKV_K8S_37":[-0.12261807550555943,0.15550669352246135],"CKV_K8S_38":[-0.1433997661308334,0.05952289259686872],"CKV_K8S_4":[-0.28227204234260794,0.3271793442339768],"CKV_K8S_40":[-0.16750472301572647,0.17061668199830765],"CKV_K8S_43":[-0.062125236463476695,0.1547047130777168],"CKV_K8S_49":[-0.08374986409125654,0.40357578999594257],"CKV_K8S_5":[-0.20003560634216297,0.3764433318185941],"CKV_K8S_6":[-0.2367082605895313,0.3438787843637918],"CKV_K8S_7":[-0.25702874407937976,0.30096536522148554],"CKV_K8S_8":[-0.0347737349086491,0.23139218994608157],"CKV_K8S_9":[-0.21240507966409058,0.11368016348050654],"CVE-2018-1000500":[0.14033622904122145,-0.29600270725528965],"CVE-2020-14039":[-0.013634444792024213,-0.24062588966456436],"CVE-2020-15586":[0.17806269236812566,-0.21562645716013487],"CVE-2020-16845":[0.20781891294906243,-0.24513684607117245],"CVE-2020-24553":[0.15391286404609072,-0.33124859458279904],"CVE-2020-26160":[0.23393411327900115,0.2422437721244964],"CVE-2020-28362":[0.15447104240043166,-0.16630493450645709],"CVE-2020-28366":[0.047703628675515704,-0.30348180338597547],"CVE-2020-28367":[0.19248033015985058,-0.186195514824562],"CVE-2020-29510":[0.1815833503414326,-0.267817635236709],"CVE-2021-27918":[0.08614635916763802,-0.3459025419505534],"CVE-2021-29923":[0.182959563515031,-0.3018041097663055],"CVE-2021-3114":[0.14705668322090437,-0.24333670226806414],"CVE-2021-31525":[0.09448865535979269,-0.30393035395936563],"CVE-2021-33194":[-0.011149240726582146,-0.2936152779028774],"CVE-2021-33195":[0.018937365484761062,-0.19714744614878105],"CVE-2021-33196":[0.11975791609378121,-0.3421901259383601],"CVE-2021-33197":[0.015440146658810779,-0.3257709890818921],"CVE-2021-33198":[0.05129018378601903,-0.34514505708854787],"CVE-2021-34558":[0.110966289175516,-0.15659019358738835],"CVE-2021-36221":[0.016927974052606817,-0.26644847530724985],"ClusterRole.default":[-0.03764431039916325,0.5295910483196866],"DaemonSet.default":[-0.07346811894923833,0.05486306898840708],"Deployment.default":[-0.057909456019665725,0.08318549520384322],"Job.default":[-0.1102811991287703,0.11421600463811227],"PodSecurityPolicy.default":[-0.2647281860798184,0.38006304777568173],"choerodon/kube-prometheus":[-0.1507618573915341,0.21741091292524586],"deps":[0.9438556250115763,-0.65510831943406],"kube-prometheus":[1.0,-0.6905577022064213],"quay.io/coreos/kube-state-metrics:v1.9.7":[0.11739011954739965,0.17116477472402225],"quay.io/coreos/prometheus-operator:v0.38.1":[0.08534858102535627,-0.2196497287572165],"quay.io/prometheus/node-exporter:v1.0.0":[0.08101035077293545,-0.23075879576254243]}},"id":"158838","type":"StaticLayoutProvider"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"158815","type":"BoxAnnotation"},{"attributes":{"axis":{"id":"158801"},"ticker":null},"id":"158804","type":"Grid"},{"attributes":{},"id":"158892","type":"UnionRenderers"},{"attributes":{"source":{"id":"158831"}},"id":"158833","type":"CDSView"},{"attributes":{},"id":"158891","type":"Selection"},{"attributes":{"data_source":{"id":"158831"},"glyph":{"id":"158860"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"158833"}},"id":"158832","type":"GlyphRenderer"},{"attributes":{"overlay":{"id":"158889"}},"id":"158825","type":"BoxSelectTool"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,8.1,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.3,6.5,6.5,6.1,5.9,5.9,5.9,5.6,5.3,5.3,null,7.7,null,null],"description":["choerodon/kube-prometheus",null,"Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-prometheus-node-exporter.default (container 0) - node-exporter","Ensure that Service Account Tokens are only mounted where necessary","Ensure that the seccomp profile is set to docker/default or runtime/default","Containers should not share the host process ID namespace","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability"

View BlastRadius Graph

chubaofs-chubaofs

Bokeh Plot Bokeh.set_log_level("info"); {"9d9a1deb-8b92-4658-bf8d-e112b064077f":{"defs":[],"roots":{"references":[{"attributes":{},"id":"178559","type":"DataRange1d"},{"attributes":{"callback":null},"id":"178588","type":"TapTool"},{"attributes":{},"id":"178574","type":"WheelZoomTool"},{"attributes":{},"id":"178557","type":"DataRange1d"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"178653","type":"BoxAnnotation"},{"attributes":{"edge_renderer":{"id":"178600"},"inspection_policy":{"id":"178646"},"layout_provider":{"id":"178602"},"node_renderer":{"id":"178596"},"selection_policy":{"id":"178651"}},"id":"178593","type":"GraphRenderer"},{"attributes":{"axis":{"id":"178565"},"ticker":null},"id":"178568","type":"Grid"},{"attributes":{},"id":"178598","type":"MultiLine"},{"attributes":{},"id":"178651","type":"NodesOnly"},{"attributes":{},"id":"178576","type":"SaveTool"},{"attributes":{"source":{"id":"178599"}},"id":"178601","type":"CDSView"},{"attributes":{"formatter":{"id":"178641"},"major_label_policy":{"id":"178639"},"ticker":{"id":"178570"}},"id":"178569","type":"LinearAxis"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"178587","type":"HoverTool"},{"attributes":{},"id":"178639","type":"AllLabels"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_17","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_16","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_30","CKV_K8S_14","DaemonSet.default","StatefulSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_17","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_16","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_30","CKV_K8S_14","chubaofs/cfs-server:1.5.1","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","Deployment.default","StatefulSet.default","chubaofs/cfs-client:1.5.1","CVE-2021-27219","CVE-2019-13734","CVE-2020-8616","CVE-2020-8625","CVE-2019-11745","CVE-2021-25215","CVE-2020-8617","CVE-2019-11729","CVE-2020-12049","CVE-2020-1971","CVE-2017-15412","CVE-2016-5131","CVE-2019-17006","CVE-2019-9924","CVE-2021-23840","CVE-2020-8623","CVE-2020-7595","CVE-2020-29573","CVE-2020-25692","CVE-2020-25648","CVE-2020-12243","CVE-2019-6477","CVE-2019-5188","CVE-2019-20907","CVE-2019-20388","CVE-2019-19956","CVE-2019-15903","CVE-2019-11719","CVE-2018-20843","CVE-2020-12403","CVE-2019-16056","CVE-2019-11756","CVE-2019-12749","CVE-2015-2716","CVE-2019-14866","CVE-2019-12450","CVE-2021-25214","CVE-2020-8622","CVE-2019-17498","CVE-2018-14404","CVE-2019-5094","CVE-2019-5482","CVE-2019-16935","CVE-2019-14822","CVE-2021-23841","CVE-2020-10029","CVE-2020-8177","CVE-2020-14039","CVE-2019-17023","CVE-2018-20852","CVE-2016-4658","CVE-2019-5436","CVE-2018-10360","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1","chubaofs/cfs-client:1.5.1"],"start":["chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","chubaofs/chubaofs","CKV_K8S_19","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_38","CKV_K8S_38","CKV_K8S_40","CKV_K8S_40","CKV_K8S_29","CKV_K8S_29","CKV_K8S_23","CKV_K8S_23","CKV_K8S_31","CKV_K8S_31","CKV_K8S_17","CKV_K8S_43","CKV_K8S_43","CKV_K8S_22","CKV_K8S_22","CKV_K8S_28","CKV_K8S_28","CKV_K8S_20","CKV_K8S_20","CKV_K8S_12","CKV_K8S_12","CKV_K8S_37","CKV_K8S_37","CKV_K8S_15","CKV_K8S_15","CKV_K8S_10","CKV_K8S_10","CKV_K8S_11","CKV_K8S_11","CKV_K8S_16","CKV_K8S_16","CKV_K8S_13","CKV_K8S_13","CKV_K8S_8","CKV_K8S_8","CKV_K8S_9","CKV_K8S_9","CKV_K8S_30","CKV_K8S_30","Deployment.default","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","chubaofs/cfs-server:1.5.1","CVE-2021-27219","CVE-2019-13734","CVE-2020-8616","CVE-2020-8625","CVE-2019-11745","CVE-2021-25215","CVE-2020-8617","CVE-2019-11729","CVE-2020-12049","CVE-2020-1971","CVE-2017-15412","CVE-2016-5131","CVE-2019-17006","CVE-2019-9924","CVE-2021-23840","CVE-2020-8623","CVE-2020-7595","CVE-2020-29573","CVE-2020-25692","CVE-2020-25648","CVE-2020-12243","CVE-2019-6477","CVE-2019-5188","CVE-2019-20907","CVE-2019-20388","CVE-2019-19956","CVE-2019-15903","CVE-2019-11719","CVE-2018-20843","CVE-2020-12403","CVE-2019-16056","CVE-2019-11756","CVE-2019-12749","CVE-2015-2716","CVE-2019-14866","CVE-2019-12450","CVE-2021-25214","CVE-2020-8622","CVE-2019-17498","CVE-2018-14404","CVE-2019-5094","CVE-2019-5482","CVE-2019-16935","CVE-2019-14822","CVE-2021-23841","CVE-2020-10029","CVE-2020-8177","CVE-2020-14039","CVE-2019-17023","CVE-2018-20852","CVE-2016-4658","CVE-2019-5436","CVE-2018-10360"]},"selected":{"id":"178657"},"selection_policy":{"id":"178656"}},"id":"178599","type":"ColumnDataSource"},{"attributes":{},"id":"178656","type":"UnionRenderers"},{"attributes":{},"id":"178561","type":"LinearScale"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"178579","type":"BoxAnnotation"},{"attributes":{"source":{"id":"178595"}},"id":"178597","type":"CDSView"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"178623","type":"CategoricalColorMapper"},{"attributes":{"overlay":{"id":"178579"}},"id":"178575","type":"BoxZoomTool"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"178595"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"178633","type":"LabelSet"},{"attributes":{"text":"chubaofs-chubaofs"},"id":"178555","type":"Title"},{"attributes":{"formatter":{"id":"178638"},"major_label_policy":{"id":"178636"},"ticker":{"id":"178566"}},"id":"178565","type":"LinearAxis"},{"attributes":{"axis":{"id":"178569"},"dimension":1,"ticker":null},"id":"178572","type":"Grid"},{"attributes":{"active_multi":null,"tools":[{"id":"178573"},{"id":"178574"},{"id":"178575"},{"id":"178576"},{"id":"178577"},{"id":"178578"},{"id":"178587"},{"id":"178588"},{"id":"178589"}]},"id":"178580","type":"Toolbar"},{"attributes":{},"id":"178563","type":"LinearScale"},{"attributes":{},"id":"178577","type":"ResetTool"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"178623"}},"size":{"value":20}},"id":"178624","type":"Circle"},{"attributes":{"overlay":{"id":"178653"}},"id":"178589","type":"BoxSelectTool"},{"attributes":{},"id":"178657","type":"Selection"},{"attributes":{},"id":"178636","type":"AllLabels"},{"attributes":{},"id":"178566","type":"BasicTicker"},{"attributes":{"graph_layout":{"CKV_K8S_10":[0.03368894253256487,-0.38055765744893005],"CKV_K8S_11":[-0.02302242160341013,-0.39634313557710915],"CKV_K8S_12":[-0.0010792061582827355,-0.31789802772287845],"CKV_K8S_13":[0.037389175343657786,-0.2956957927902557],"CKV_K8S_14":[-0.024788197718175958,-0.45279955847486625],"CKV_K8S_15":[0.010349102184103868,-0.38734737844064737],"CKV_K8S_16":[0.06094068020166226,-0.34420587491089283],"CKV_K8S_17":[-0.06190545139047436,-0.4301257211757965],"CKV_K8S_19":[0.015008577087357073,-0.43352422933482],"CKV_K8S_20":[0.021096931453348615,-0.34967297029489525],"CKV_K8S_22":[0.048504758124442444,-0.36333819180453325],"CKV_K8S_23":[-0.06375334231015425,-0.29650416370448457],"CKV_K8S_28":[0.02962210254275908,-0.3217578625204806],"CKV_K8S_29":[-0.06527231888637895,-0.356310655291794],"CKV_K8S_30":[-0.1049758349041784,-0.3317238565933004],"CKV_K8S_31":[-0.09454334980540305,-0.3552997334864602],"CKV_K8S_37":[-0.05667806219503235,-0.3867653973371381],"CKV_K8S_38":[-0.07977779319267003,-0.32732060164473004],"CKV_K8S_40":[-0.04649156268703951,-0.32660504950599617],"CKV_K8S_43":[-0.09341679985209901,-0.30229077228461143],"CKV_K8S_8":[0.057379394094068184,-0.3196740809208118],"CKV_K8S_9":[-0.08417364807770729,-0.3788892769001117],"CVE-2015-2716":[0.08875804950764368,0.16683368743060356],"CVE-2016-4658":[0.1074628096750534,0.22422197688986933],"CVE-2016-5131":[0.09913295927992738,0.10177187154803977],"CVE-2017-15412":[0.05406940056753258,0.029173462427917088],"CVE-2018-10360":[-0.11356448753459622,0.06335069797049656],"CVE-2018-14404":[0.0714353920607337,0.2471982058653411],"CVE-2018-20843":[-0.11464832597982326,0.11309233417482634],"CVE-2018-20852":[-0.13345306273586166,0.0886314322369859],"CVE-2019-11719":[-0.14151720784238114,0.1242099123105639],"CVE-2019-11729":[0.04909398520681968,0.2634195793470946],"CVE-2019-11745":[0.02481113442097834,0.013092120093959672],"CVE-2019-11756":[-0.0652775442422328,0.20701892766912366],"CVE-2019-12450":[-0.09403072971121389,0.239477767634117],"CVE-2019-12749":[0.1275254124927565,0.0914106907874105],"CVE-2019-13734":[-0.009657466391160349,0.017905614389647193],"CVE-2019-14822":[-0.08879057538353764,0.08623643776489207],"CVE-2019-14866":[-0.09260184380364753,0.04131407264186223],"CVE-2019-15903":[0.1003871995486148,0.1373094859377834],"CVE-2019-16056":[-0.09958951345867818,0.2154484537871388],"CVE-2019-16935":[-0.14255421274308555,0.15364780006214754],"CVE-2019-17006":[0.02005041890242818,0.04658427162873295],"CVE-2019-17023":[-0.057989056780987216,0.07201220226405304],"CVE-2019-17498":[-0.035373188872758574,0.22231248427235273],"CVE-2019-19956":[-0.011422480888531638,0.19467254327324823],"CVE-2019-20388":[-0.06390733537768438,0.03531869970153393],"CVE-2019-20907":[0.0706902045297808,0.19602037751589751],"CVE-2019-5094":[0.1096066855936242,0.19606272211446577],"CVE-2019-5188":[0.08181582913094705,0.07001869913947864],"CVE-2019-5436":[0.08308715298707238,0.03660268775242368],"CVE-2019-5482":[0.01914802832888403,0.268736495199953],"CVE-2019-6477":[-0.040525284959623965,0.018346096584482472],"CVE-2019-9924":[-0.0065544543452474395,0.2701346138212036],"CVE-2020-10029":[-0.07942870995766109,0.12590057558710677],"CVE-2020-12049":[-0.10815759448142422,0.15090232422261618],"CVE-2020-12243":[0.12954904643349197,0.15171927046231248],"CVE-2020-12403":[0.13302595281385735,0.12254903200190707],"CVE-2020-14039":[-0.12749400947318978,0.17868901494649406],"CVE-2020-1971":[-0.019553376945754816,0.05865236982013469],"CVE-2020-25648":[0.0003202389299645247,0.23315325274247425],"CVE-2020-25692":[-0.1259019170702642,0.20521550335757105],"CVE-2020-29573":[0.034087868214145924,0.2086947543179616],"CVE-2020-7595":[-0.04995882187627518,0.24842656669279645],"CVE-2020-8177":[0.08011106731446986,0.22361633251663177],"CVE-2020-8616":[0.11132530896009847,0.062259067682368635],"CVE-2020-8617":[0.06607762809886382,0.11822850104444685],"CVE-2020-8622":[0.12958128569401936,0.17873338023981683],"CVE-2020-8623":[-0.09194856856880143,0.18453447416974508],"CVE-2020-8625":[0.04730439148855256,0.168742529782412],"CVE-2021-23840":[-0.07214528699335232,0.2563014416386501],"CVE-2021-23841":[-0.029762913824839726,0.2650380878981085],"CVE-2021-25214":[-0.061173733783619094,0.16481460296247422],"CVE-2021-25215":[0.04795825195418145,0.07401243064292959],"CVE-2021-27219":[0.03387475869299542,0.23973883635521614],"DaemonSet.default":[-0.01916192893797987,-0.2855813338685379],"Deployment.default":[-0.019769083431945854,-0.2630848223875267],"StatefulSet.default":[-0.01979510675315333,-0.3553227619344747],"chubaofs/cfs-client:1.5.1":[-0.004891061422651614,0.1290822811464339],"chubaofs/cfs-server:1.5.1":[-0.0010339824114730712,0.12670274719525312],"chubaofs/chubaofs":[-0.020658664281553222,-0.36865489530742235],"deps":[0.7278993956545954,1.0]}},"id":"178602","type":"StaticLayoutProvider"},{"attributes":{},"id":"178654","type":"UnionRenderers"},{"attributes":{},"id":"178641","type":"BasicTickFormatter"},{"attributes":{},"id":"178646","type":"NodesOnly"},{"attributes":{},"id":"178655","type":"Selection"},{"attributes":{},"id":"178573","type":"PanTool"},{"attributes":{},"id":"178578","type":"HelpTool"},{"attributes":{"below":[{"id":"178565"}],"center":[{"id":"178568"},{"id":"178572"}],"height":768,"left":[{"id":"178569"}],"renderers":[{"id":"178593"},{"id":"178633"}],"title":{"id":"178555"},"toolbar":{"id":"178580"},"width":1024,"x_range":{"id":"178557"},"x_scale":{"id":"178561"},"y_range":{"id":"178559"},"y_scale":{"id":"178563"}},"id":"178554","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"178570","type":"BasicTicker"},{"attributes":{"data_source":{"id":"178599"},"glyph":{"id":"178598"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"178601"}},"id":"178600","type":"GlyphRenderer"},{"attributes":{"data_source":{"id":"178595"},"glyph":{"id":"178624"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"178597"}},"id":"178596","type":"GlyphRenderer"},{"attributes":{},"id":"178638","type":"BasicTickFormatter"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,8.8,8.6,8.1,8.1,7.5,7.5,7.5,6.5,5.9,8.8,8.8,8.1,7.8,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.4,7.3,7.1,7,6.8,6.7,6.6,6.5,6.5,6.5,6.5,6.4,6.3,6.1,6.1,5.9,5.7,5.4,5.3,5.3,5.3,5.3,7,5.4,null],"description":["chubaofs/chubaofs",null,"Containers should not share the host network namespace","DaemonSet.datanode.chubaofs (container 1) - prepare-pod","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Containers should not share the host process ID namespace"

View BlastRadius Graph

cilium-cilium

Bokeh Plot Bokeh.set_log_level("info"); {"a6698d33-80df-43c2-8cb6-fb95807d153b":{"defs":[],"roots":{"references":[{"attributes":{},"id":"178898","type":"WheelZoomTool"},{"attributes":{},"id":"178978","type":"UnionRenderers"},{"attributes":{},"id":"178883","type":"DataRange1d"},{"attributes":{"callback":null},"id":"178912","type":"TapTool"},{"attributes":{},"id":"178962","type":"BasicTickFormatter"},{"attributes":{},"id":"178975","type":"NodesOnly"},{"attributes":{"edge_renderer":{"id":"178924"},"inspection_policy":{"id":"178970"},"layout_provider":{"id":"178926"},"node_renderer":{"id":"178920"},"selection_policy":{"id":"178975"}},"id":"178917","type":"GraphRenderer"},{"attributes":{},"id":"178885","type":"LinearScale"},{"attributes":{"source":{"id":"178923"}},"id":"178925","type":"CDSView"},{"attributes":{"axis":{"id":"178889"},"ticker":null},"id":"178892","type":"Grid"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"178947"}},"size":{"value":20}},"id":"178948","type":"Circle"},{"attributes":{},"id":"178902","type":"HelpTool"},{"attributes":{"axis":{"id":"178893"},"dimension":1,"ticker":null},"id":"178896","type":"Grid"},{"attributes":{},"id":"178965","type":"BasicTickFormatter"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"178977","type":"BoxAnnotation"},{"attributes":{},"id":"178922","type":"MultiLine"},{"attributes":{},"id":"178894","type":"BasicTicker"},{"attributes":{"active_multi":null,"tools":[{"id":"178897"},{"id":"178898"},{"id":"178899"},{"id":"178900"},{"id":"178901"},{"id":"178902"},{"id":"178911"},{"id":"178912"},{"id":"178913"}]},"id":"178904","type":"Toolbar"},{"attributes":{"graph_layout":{"CKV_K8S_10":[0.1666442402084151,0.08632807042192035],"CKV_K8S_11":[0.11206307927786306,0.15978761497483007],"CKV_K8S_12":[0.07892858731320147,0.19274088133989148],"CKV_K8S_13":[0.07860809189711306,0.013594346768035203],"CKV_K8S_15":[-0.01997433537123912,0.1300693800025489],"CKV_K8S_16":[-0.06773981711130882,0.15841375369925662],"CKV_K8S_19":[0.04123558135259581,0.2105494549452193],"CKV_K8S_20":[0.13874315307296575,0.17944894191439523],"CKV_K8S_22":[0.014913505379191535,0.18788730437283185],"CKV_K8S_23":[0.16189157209722946,0.13699336107858412],"CKV_K8S_28":[0.14410941187160073,0.05105241406060729],"CKV_K8S_29":[0.13426227476275754,0.10284595576470061],"CKV_K8S_30":[-0.024398042859828946,0.032196978283285174],"CKV_K8S_31":[-0.04349126366948214,0.09678899685163622],"CKV_K8S_37":[0.11536376258962176,0.028202372842735055],"CKV_K8S_38":[0.032747139311463704,0.018888469119315025],"CKV_K8S_40":[-0.012300068702381073,0.16895379776694236],"CKV_K8S_43":[-0.01191670863905025,0.07144513652690046],"CKV_K8S_9":[0.10830006599437071,0.24445298911707353],"CVE-2016-2781":[-0.14198882163534718,-0.24986511173698553],"CVE-2019-18276":[0.030954570550583562,-0.3262261874344561],"CVE-2019-20838":[0.08192480760767948,-0.3037643234289875],"CVE-2019-25013":[-0.13474362806837262,-0.3150773102093057],"CVE-2020-27618":[-0.0762962803888842,-0.31518616290549406],"CVE-2020-6096":[0.0005676684219317101,-0.36998270155815755],"CVE-2021-3326":[-0.06266837019155969,-0.36814980432987515],"DaemonSet.default":[0.050099635387988325,0.07404091419085117],"Deployment.default":[0.07147646850319948,0.11559814759786315],"cilium/cilium":[0.05498183674415775,0.12200206899617354],"deps":[-1.0,-0.10723699518715456],"quay.io/cilium/cilium:v1.11.0-rc0":[-0.022298115706476513,-0.22679275384518052]}},"id":"178926","type":"StaticLayoutProvider"},{"attributes":{},"id":"178981","type":"Selection"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,8.1,7.8,7.5,7.5,6.5,5.9,5.5],"description":["cilium/cilium",null,"Containers should not share the host network namespace","Deployment.cilium-operator.default (container 0) - cilium-operator","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers"

View BlastRadius Graph

cloudve-cloudman

Bokeh Plot Bokeh.set_log_level("info"); {"68e225a1-427c-46fa-a85d-fe51347f3956":{"defs":[],"roots":{"references":[{"attributes":{"formatter":{"id":"208221"},"major_label_policy":{"id":"208219"},"ticker":{"id":"208150"}},"id":"208149","type":"LinearAxis"},{"attributes":{"edge_renderer":{"id":"208180"},"inspection_policy":{"id":"208226"},"layout_provider":{"id":"208182"},"node_renderer":{"id":"208176"},"selection_policy":{"id":"208231"}},"id":"208173","type":"GraphRenderer"},{"attributes":{"formatter":{"id":"208218"},"major_label_policy":{"id":"208216"},"ticker":{"id":"208146"}},"id":"208145","type":"LinearAxis"},{"attributes":{},"id":"208153","type":"PanTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"208233","type":"BoxAnnotation"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"208203"}},"size":{"value":20}},"id":"208204","type":"Circle"},{"attributes":{},"id":"208216","type":"AllLabels"},{"attributes":{"data":{"color":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"red",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null],"end":["CKV_K8S_38","CKV_K8S_40","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_35","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_23","CKV_K8S_14","CKV_K8S_29","CKV_K8S_19","CKV_K8S_17","CKV_K8S_6","CKV_K8S_1","CKV_K8S_5","CKV_K8S_32","CKV_K8S_7","CKV_K8S_36","CKV_K8S_4","CKV_K8S_8","CKV_K8S_9","CKV_K8S_49","cloudman","StatefulSet.default","Deployment.default","Job.default","CKV_K8S_40","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_35","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_29","CKV_K8S_23","Deployment.default","Job.default","Deployment.default","DaemonSet.default","Job.default","Deployment.default","DaemonSet.default","Job.default","Deployment.default","DaemonSet.default","Job.default","Deployment.default","DaemonSet.default","Job.default","Deployment.default","DaemonSet.default","Job.default","Deployment.default","DaemonSet.default","Job.default","Deployment.default","Deployment.default","DaemonSet.default","Job.default","Deployment.default","DaemonSet.default","Job.default","Deployment.default","DaemonSet.default","Job.default","Deployment.default","DaemonSet.default","Job.default","Deployment.default","DaemonSet.default","Job.default","Deployment.default","DaemonSet.default","Job.default","CKV_K8S_23","CKV_K8S_14","CKV_K8S_29","CKV_K8S_8","CKV_K8S_9","DaemonSet.default","CKV_K8S_17","PodSecurityPolicy.default","CKV_K8S_1","CKV_K8S_5","CKV_K8S_32","CKV_K8S_7","CKV_K8S_36","CKV_K8S_4","ClusterRole.default"],"start":["cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","cloudve/cloudman","deps","CKV_K8S_38","CKV_K8S_38","CKV_K8S_38","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","CKV_K8S_40","CKV_K8S_40","CKV_K8S_31","CKV_K8S_31","CKV_K8S_31","CKV_K8S_43","CKV_K8S_43","CKV_K8S_43","CKV_K8S_30","CKV_K8S_30","CKV_K8S_30","CKV_K8S_22","CKV_K8S_22","CKV_K8S_22","CKV_K8S_28","CKV_K8S_28","CKV_K8S_28","CKV_K8S_20","CKV_K8S_20","CKV_K8S_20","CKV_K8S_35","CKV_K8S_12","CKV_K8S_12","CKV_K8S_12","CKV_K8S_37","CKV_K8S_37","CKV_K8S_37","CKV_K8S_15","CKV_K8S_15","CKV_K8S_15","CKV_K8S_10","CKV_K8S_10","CKV_K8S_10","CKV_K8S_11","CKV_K8S_11","CKV_K8S_11","CKV_K8S_13","CKV_K8S_13","CKV_K8S_13","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_19","DaemonSet.default","CKV_K8S_6","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","CKV_K8S_49"]},"selected":{"id":"208237"},"selection_policy":{"id":"208236"}},"id":"208179","type":"ColumnDataSource"},{"attributes":{},"id":"208231","type":"NodesOnly"},{"attributes":{},"id":"208141","type":"LinearScale"},{"attributes":{},"id":"208236","type":"UnionRenderers"},{"attributes":{"data":{"description":["cloudve/cloudman",null,"Ensure that Service Account Tokens are only mounted where necessary","StatefulSet.RELEASE-NAME-influxdb.default (container 0) - RELEASE-NAME-influxdb","Containers should run as a high UID to avoid host conflict","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability","Containers should not run with allowPrivilegeEscalation"

View BlastRadius Graph

cloudve-csi-rclone

Bokeh Plot Bokeh.set_log_level("info"); {"f6b1b315-aff9-4c33-9c34-c619c5f0ebed":{"defs":[],"roots":{"references":[{"attributes":{},"id":"208482","type":"HelpTool"},{"attributes":{"overlay":{"id":"208483"}},"id":"208479","type":"BoxZoomTool"},{"attributes":{"text":"cloudve-csi-rclone"},"id":"208459","type":"Title"},{"attributes":{"source":{"id":"208499"}},"id":"208501","type":"CDSView"},{"attributes":{"overlay":{"id":"208557"}},"id":"208493","type":"BoxSelectTool"},{"attributes":{},"id":"208461","type":"DataRange1d"},{"attributes":{},"id":"208465","type":"LinearScale"},{"attributes":{},"id":"208467","type":"LinearScale"},{"attributes":{"source":{"id":"208503"}},"id":"208505","type":"CDSView"},{"attributes":{"data_source":{"id":"208503"},"glyph":{"id":"208502"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"208505"}},"id":"208504","type":"GlyphRenderer"},{"attributes":{},"id":"208481","type":"ResetTool"},{"attributes":{},"id":"208550","type":"NodesOnly"},{"attributes":{},"id":"208559","type":"Selection"},{"attributes":{"callback":null},"id":"208492","type":"TapTool"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"208527","type":"CategoricalColorMapper"},{"attributes":{"formatter":{"id":"208542"},"major_label_policy":{"id":"208540"},"ticker":{"id":"208470"}},"id":"208469","type":"LinearAxis"},{"attributes":{},"id":"208561","type":"Selection"},{"attributes":{"axis":{"id":"208469"},"ticker":null},"id":"208472","type":"Grid"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"208499"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"208537","type":"LabelSet"},{"attributes":{},"id":"208540","type":"AllLabels"},{"attributes":{},"id":"208477","type":"PanTool"},{"attributes":{"below":[{"id":"208469"}],"center":[{"id":"208472"},{"id":"208476"}],"height":768,"left":[{"id":"208473"}],"renderers":[{"id":"208497"},{"id":"208537"}],"title":{"id":"208459"},"toolbar":{"id":"208484"},"width":1024,"x_range":{"id":"208461"},"x_scale":{"id":"208465"},"y_range":{"id":"208463"},"y_scale":{"id":"208467"}},"id":"208458","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"208555","type":"NodesOnly"},{"attributes":{},"id":"208560","type":"UnionRenderers"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"208491","type":"HoverTool"},{"attributes":{"active_multi":null,"tools":[{"id":"208477"},{"id":"208478"},{"id":"208479"},{"id":"208480"},{"id":"208481"},{"id":"208482"},{"id":"208491"},{"id":"208492"},{"id":"208493"}]},"id":"208484","type":"Toolbar"},{"attributes":{"graph_layout":{"CKV_K8S_10":[0.06056347984820437,0.19882475122684315],"CKV_K8S_11":[0.1389554324454441,0.08006096632612265],"CKV_K8S_12":[0.04547793284034578,0.17698486647836356],"CKV_K8S_13":[0.11648024136107103,0.06180138533003275],"CKV_K8S_15":[0.07021684919821529,0.15195558518095195],"CKV_K8S_16":[0.17837160836597787,0.25127795621711724],"CKV_K8S_19":[0.2291215947092607,0.1871414922527846],"CKV_K8S_20":[0.11053622296825401,0.21052988340870993],"CKV_K8S_22":[0.1048984180838221,0.08522221058031851],"CKV_K8S_23":[0.18940843884206895,0.11198142008445684],"CKV_K8S_25":[0.14018216352300672,0.2627128482545316],"CKV_K8S_28":[0.14059390771432834,0.1982191203978224],"CKV_K8S_29":[0.1596360347149988,0.06520523887657577],"CKV_K8S_30":[0.18829453129453402,0.13898198022642744],"CKV_K8S_31":[0.04051863148459652,0.1456089696253466],"CKV_K8S_37":[0.14939713149400313,0.11454934793414799],"CKV_K8S_38":[0.17435191309611395,0.16984335501576334],"CKV_K8S_39":[0.20816233832749179,0.22768667745374824],"CKV_K8S_40":[0.05785970712259199,0.11779718032160609],"CKV_K8S_43":[0.08408435822734264,0.20978129553320737],"CKV_K8S_8":[0.17899018520689666,0.08697197173315509],"CKV_K8S_9":[0.08972650403048477,0.17422888679540016],"CVE-2018-1000517":[0.34943343144663763,0.05007098030502246],"CVE-2018-20679":[0.3398034261717272,0.08887655488441588],"CVE-2019-14697":[0.34869372602168636,0.007930517607029869],"CVE-2019-14860":[-0.145260328868505,-0.2810880087529447],"CVE-2019-17594":[-0.1941606524512182,-0.03642646442329094],"CVE-2019-17595":[-0.2077790131360932,-0.16192793064031208],"CVE-2019-18276":[-0.07145461988500952,-0.16189632072080684],"CVE-2019-5747":[0.33223767329457543,-0.037740161373687076],"CVE-2020-1971":[-0.10872891796639039,-0.22023842089069587],"CVE-2020-28928":[0.04116909438311398,-0.06694739046609224],"CVE-2020-8169":[-0.2837274182859836,-0.13964371096095346],"CVE-2020-8177":[-0.1443647754266823,-0.06339199662528856],"CVE-2020-8231":[-0.24184641205494684,-0.055717629921791294],"CVE-2021-22897":[-0.2086195893892773,-0.2366250544040135],"CVE-2021-22922":[-0.27633026379892933,-0.18612205324106304],"CVE-2021-22923":[-0.15447622251029258,-0.24595779044342914],"CVE-2021-22925":[-0.273015156019196,-0.09337675828600081],"CVE-2021-22926":[-0.06849029866641955,-0.24629478396115204],"CVE-2021-22946":[-0.2430036397377932,-0.20118640028676293],"CVE-2021-22947":[-0.24844496467165075,-0.147252844339248],"CVE-2021-23840":[-0.054114639625750374,-0.2055705223691002],"CVE-2021-23841":[-0.19388310968087658,-0.27156391034477684],"CVE-2021-30139":[0.0530628836536168,-0.08850237376943637],"CVE-2021-3449":[-0.19801877090839362,-0.07767091929533317],"CVE-2021-3450":[-0.17369137140841615,-0.20449508922316786],"CVE-2021-3711":[-0.24541406805896088,-0.240070891159118],"CVE-2021-3712":[-0.10436248379233647,-0.2686448909553106],"CVE-2021-39537":[-0.2344801231976172,-0.1028406441552568],"CVE-2021-41581":[0.3193213910760888,0.12264664714796902],"DaemonSet.default":[0.13636606605567306,0.15858909030254154],"StatefulSet.default":[0.08366820681883784,0.09023039133523578],"cloudve/csi-rclone":[0.1298823347381683,0.151821532002864],"cloudve/csi-rclone:v1.2.7":[-0.1372159417412828,-0.13871347166362508],"deps":[-1.0,0.07452892433181825],"quay.io/k8scsi/csi-cluster-driver-registrar:v1.0.1":[0.22141692272284275,0.007844405502326441]}},"id":"208506","type":"StaticLayoutProvider"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_25","CKV_K8S_16","CKV_K8S_39","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_25","CKV_K8S_16","CKV_K8S_39","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","quay.io/k8scsi/csi-cluster-driver-registrar:v1.0.1","cloudve/csi-rclone:v1.2.7","CVE-2019-14697","CVE-2018-1000517","CVE-2021-30139","CVE-2019-5747","CVE-2018-20679","CVE-2021-41581","CVE-2020-28928","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","CVE-2021-3711","CVE-2021-39537","CVE-2019-18276","CVE-2021-23840","CVE-2021-22946","CVE-2021-22926","CVE-2020-8231","CVE-2020-8169","CVE-2021-3712","CVE-2021-3450","CVE-2020-8177","CVE-2021-22922","CVE-2019-14860","CVE-2021-3449","CVE-2021-23841","CVE-2021-22947","CVE-2020-1971","CVE-2019-17595","CVE-2021-22925","CVE-2021-22923","CVE-2021-22897","CVE-2019-17594"],"start":["cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","cloudve/csi-rclone","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","StatefulSet.default","StatefulSet.default","quay.io/k8scsi/csi-cluster-driver-registrar:v1.0.1","quay.io/k8scsi/csi-cluster-driver-registrar:v1.0.1","quay.io/k8scsi/csi-cluster-driver-registrar:v1.0.1","quay.io/k8scsi/csi-cluster-driver-registrar:v1.0.1","quay.io/k8scsi/csi-cluster-driver-registrar:v1.0.1","quay.io/k8scsi/csi-cluster-driver-registrar:v1.0.1","quay.io/k8scsi/csi-cluster-driver-registrar:v1.0.1","CVE-2021-30139","CVE-2020-28928","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7","cloudve/csi-rclone:v1.2.7"]},"selected":{"id":"208561"},"selection_policy":{"id":"208560"}},"id":"208503","type":"ColumnDataSource"},{"attributes":{},"id":"208478","type":"WheelZoomTool"},{"attributes":{},"id":"208474","type":"BasicTicker"},{"attributes":{},"id":"208502","type":"MultiLine"},{"attributes":{"formatter":{"id":"208545"},"major_label_policy":{"id":"208543"},"ticker":{"id":"208474"}},"id":"208473","type":"LinearAxis"},{"attributes":{},"id":"208480","type":"SaveTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"208483","type":"BoxAnnotation"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,9.8,7.5,7.5,7.5,5.5,5.5,null,9.8,8.8,7.8,7.5,7.5,7.5,7.5,7.5,7.4,7.4,7.1,6.5,6.5,5.9,5.9,5.9,5.9,5.4,5.3,5.3,5.3,5.3],"description":["cloudve/csi-rclone",null,"Containers should not share the host network namespace","DaemonSet.csi-nodeplugin-rclone.default (container 1) - rclone","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers"

View BlastRadius Graph

cloudve-galaxy

Bokeh Plot Bokeh.set_log_level("info"); {"a26d50d9-6cc1-459f-b5cb-762a3af8ae1d":{"defs":[],"roots":{"references":[{"attributes":{},"id":"208883","type":"Selection"},{"attributes":{"axis":{"id":"208793"},"ticker":null},"id":"208796","type":"Grid"},{"attributes":{"source":{"id":"208827"}},"id":"208829","type":"CDSView"},{"attributes":{"data":{"color":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"red",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null],"end":["CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_31","CKV_K8S_43","CKV_K8S_28","CKV_K8S_37","CKV_K8S_15","CKV_K8S_8","CKV_K8S_9","CKV_K8S_23","CKV_K8S_30","CKV_K8S_22","CKV_K8S_20","CKV_K8S_14","CKV_K8S_12","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_35","CKV_K8S_19","CKV_K8S_25","CKV_K8S_16","CKV_K8S_39","galaxy","Deployment.default","Job.default","DaemonSet.default","StatefulSet.default","CKV_K8S_40","CKV_K8S_29","CKV_K8S_31","CKV_K8S_43","CKV_K8S_28","CKV_K8S_37","CKV_K8S_15","CKV_K8S_8","CKV_K8S_9","CKV_K8S_23","CKV_K8S_30","CKV_K8S_22","CKV_K8S_20","CKV_K8S_14","CKV_K8S_12","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_35","registry.opensource.zalan.do/acid/postgres-operator:v1.6.3","Job.default","DaemonSet.default","StatefulSet.default","DaemonSet.default","StatefulSet.default","Job.default","DaemonSet.default","StatefulSet.default","Job.default","DaemonSet.default","StatefulSet.default","Job.default","DaemonSet.default","StatefulSet.default","Job.default","DaemonSet.default","StatefulSet.default","Job.default","DaemonSet.default","StatefulSet.default","DaemonSet.default","StatefulSet.default","DaemonSet.default","StatefulSet.default","Job.default","DaemonSet.default","StatefulSet.default","Job.default","DaemonSet.default","StatefulSet.default","Job.default","DaemonSet.default","StatefulSet.default","Job.default","DaemonSet.default","StatefulSet.default","Job.default","DaemonSet.default","StatefulSet.default","Job.default","DaemonSet.default","StatefulSet.default","Job.default","DaemonSet.default","StatefulSet.default","Job.default","DaemonSet.default","StatefulSet.default","CKV_K8S_35","DaemonSet.default","CKV_K8S_25","CKV_K8S_16","CKV_K8S_39","CVE-2021-3711","CVE-2021-36159","CVE-2021-22945","CVE-2021-22946","CVE-2021-22926","CVE-2021-3712","CVE-2021-22922","CVE-2021-22947","CVE-2021-22925","CVE-2021-22923"],"start":["cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","cloudve/galaxy","deps","CKV_K8S_38","CKV_K8S_38","CKV_K8S_38","CKV_K8S_38","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_40","CKV_K8S_40","CKV_K8S_40","CKV_K8S_29","CKV_K8S_29","CKV_K8S_31","CKV_K8S_31","CKV_K8S_31","CKV_K8S_43","CKV_K8S_43","CKV_K8S_43","CKV_K8S_28","CKV_K8S_28","CKV_K8S_28","CKV_K8S_37","CKV_K8S_37","CKV_K8S_37","CKV_K8S_15","CKV_K8S_15","CKV_K8S_15","CKV_K8S_8","CKV_K8S_8","CKV_K8S_9","CKV_K8S_9","CKV_K8S_23","CKV_K8S_23","CKV_K8S_23","CKV_K8S_30","CKV_K8S_30","CKV_K8S_30","CKV_K8S_22","CKV_K8S_22","CKV_K8S_22","CKV_K8S_20","CKV_K8S_20","CKV_K8S_20","CKV_K8S_12","CKV_K8S_12","CKV_K8S_12","CKV_K8S_10","CKV_K8S_10","CKV_K8S_10","CKV_K8S_11","CKV_K8S_11","CKV_K8S_11","CKV_K8S_13","CKV_K8S_13","CKV_K8S_13","Job.default","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","registry.opensource.zalan.do/acid/postgres-operator:v1.6.3","registry.opensource.zalan.do/acid/postgres-operator:v1.6.3","registry.opensource.zalan.do/acid/postgres-operator:v1.6.3","registry.opensource.zalan.do/acid/postgres-operator:v1.6.3","registry.opensource.zalan.do/acid/postgres-operator:v1.6.3","registry.opensource.zalan.do/acid/postgres-operator:v1.6.3","registry.opensource.zalan.do/acid/postgres-operator:v1.6.3","registry.opensource.zalan.do/acid/postgres-operator:v1.6.3","registry.opensource.zalan.do/acid/postgres-operator:v1.6.3","registry.opensource.zalan.do/acid/postgres-operator:v1.6.3"]},"selected":{"id":"208885"},"selection_policy":{"id":"208884"}},"id":"208827","type":"ColumnDataSource"},{"attributes":{},"id":"208805","type":"ResetTool"},{"attributes":{"below":[{"id":"208793"}],"center":[{"id":"208796"},{"id":"208800"}],"height":768,"left":[{"id":"208797"}],"renderers":[{"id":"208821"},{"id":"208861"}],"title":{"id":"208783"},"toolbar":{"id":"208808"},"width":1024,"x_range":{"id":"208785"},"x_scale":{"id":"208789"},"y_range":{"id":"208787"},"y_scale":{"id":"208791"}},"id":"208782","subtype":"Figure","type":"Plot"},{"attributes":{"formatter":{"id":"208866"},"major_label_policy":{"id":"208864"},"ticker":{"id":"208794"}},"id":"208793","type":"LinearAxis"},{"attributes":{"axis":{"id":"208797"},"dimension":1,"ticker":null},"id":"208800","type":"Grid"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"208815","type":"HoverTool"},{"attributes":{},"id":"208866","type":"BasicTickFormatter"},{"attributes":{"callback":null},"id":"208816","type":"TapTool"},{"attributes":{"text":"cloudve-galaxy"},"id":"208783","type":"Title"},{"attributes":{},"id":"208791","type":"LinearScale"},{"attributes":{},"id":"208885","type":"Selection"},{"attributes":{},"id":"208874","type":"NodesOnly"},{"attributes":{},"id":"208869","type":"BasicTickFormatter"},{"attributes":{},"id":"208801","type":"PanTool"},{"attributes":{"overlay":{"id":"208807"}},"id":"208803","type":"BoxZoomTool"},{"attributes":{},"id":"208867","type":"AllLabels"},{"attributes":{},"id":"208794","type":"BasicTicker"},{"attributes":{},"id":"208798","type":"BasicTicker"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"208823"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"208861","type":"LabelSet"},{"attributes":{"active_multi":null,"tools":[{"id":"208801"},{"id":"208802"},{"id":"208803"},{"id":"208804"},{"id":"208805"},{"id":"208806"},{"id":"208815"},{"id":"208816"},{"id":"208817"}]},"id":"208808","type":"Toolbar"},{"attributes":{},"id":"208802","type":"WheelZoomTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"208881","type":"BoxAnnotation"},{"attributes":{"edge_renderer":{"id":"208828"},"inspection_policy":{"id":"208874"},"layout_provider":{"id":"208830"},"node_renderer":{"id":"208824"},"selection_policy":{"id":"208879"}},"id":"208821","type":"GraphRenderer"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,9.1,9.1,7.5,7.5,7.4,6.5,5.9,5.3,5.3,null],"description":["cloudve/galaxy",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-postgres-operator.default (container 0) - postgres-operator","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Minimize the admission of containers with the NET_RAW capability","Minimize the admission of containers with capabilities assigned","Image Pull Policy should be Always"

View BlastRadius Graph

cloudve-galaxy-cvmfs-csi

Bokeh Plot Bokeh.set_log_level("info"); {"b88ca6d0-39c8-41d5-be9d-7999c67357be":{"defs":[],"roots":{"references":[{"attributes":{},"id":"209208","type":"UnionRenderers"},{"attributes":{},"id":"209118","type":"BasicTicker"},{"attributes":{},"id":"209191","type":"AllLabels"},{"attributes":{"data_source":{"id":"209151"},"glyph":{"id":"209150"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"209153"}},"id":"209152","type":"GlyphRenderer"},{"attributes":{"formatter":{"id":"209193"},"major_label_policy":{"id":"209191"},"ticker":{"id":"209122"}},"id":"209121","type":"LinearAxis"},{"attributes":{"axis":{"id":"209121"},"dimension":1,"ticker":null},"id":"209124","type":"Grid"},{"attributes":{},"id":"209115","type":"LinearScale"},{"attributes":{},"id":"209111","type":"DataRange1d"},{"attributes":{},"id":"209206","type":"UnionRenderers"},{"attributes":{},"id":"209125","type":"PanTool"},{"attributes":{"source":{"id":"209151"}},"id":"209153","type":"CDSView"},{"attributes":{},"id":"209207","type":"Selection"},{"attributes":{},"id":"209130","type":"HelpTool"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"209175","type":"CategoricalColorMapper"},{"attributes":{},"id":"209198","type":"NodesOnly"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"209175"}},"size":{"value":20}},"id":"209176","type":"Circle"},{"attributes":{"edge_renderer":{"id":"209152"},"inspection_policy":{"id":"209198"},"layout_provider":{"id":"209154"},"node_renderer":{"id":"209148"},"selection_policy":{"id":"209203"}},"id":"209145","type":"GraphRenderer"},{"attributes":{},"id":"209113","type":"LinearScale"},{"attributes":{},"id":"209193","type":"BasicTickFormatter"},{"attributes":{"overlay":{"id":"209131"}},"id":"209127","type":"BoxZoomTool"},{"attributes":{"graph_layout":{"CKV_K8S_10":[-0.08148372527297802,-0.04559968298545802],"CKV_K8S_11":[0.008891135964671006,0.07360212476098794],"CKV_K8S_12":[-0.042032649250951605,-0.0682744995632488],"CKV_K8S_13":[-0.12904442796640814,-0.05046022057322058],"CKV_K8S_15":[-0.013657715743644864,-0.09179960303012612],"CKV_K8S_16":[-0.1188385125435358,0.14705533051864939],"CKV_K8S_19":[-0.19732962020859976,-0.008532189540038194],"CKV_K8S_20":[0.0017636194460134706,0.11724182044896223],"CKV_K8S_22":[-0.03521890875240895,0.08560906611798504],"CKV_K8S_23":[-0.03971040361881614,0.12451375752394331],"CKV_K8S_25":[-0.1915615666281376,0.05586421623745543],"CKV_K8S_28":[-0.07672792811971746,0.10113617051127036],"CKV_K8S_29":[-0.12921811258225363,0.028398456053788525],"CKV_K8S_30":[-0.06794736056582142,-0.09909441931561605],"CKV_K8S_31":[0.015106058749328828,-0.0578500069355403],"CKV_K8S_37":[0.04243547720639401,0.08702315174808452],"CKV_K8S_38":[-0.13015278632568283,-0.013727505325549002],"CKV_K8S_39":[-0.1666406957967005,0.10716875251172137],"CKV_K8S_40":[-0.10550115953643227,-0.08160646703767815],"CKV_K8S_43":[-0.10786401732628,0.07052277418352977],"CKV_K8S_8":[0.04699948988766036,0.0407013252342025],"CKV_K8S_9":[0.0453766359274869,-0.007823503036119648],"CVE-2018-1000517":[0.28898294327079366,-0.14229216791395236],"CVE-2018-20679":[0.27231645700962376,-0.01128574633888392],"CVE-2019-14697":[0.2576941956802639,-0.16413863957096195],"CVE-2019-5747":[0.3147301562266251,-0.07596645181004466],"CVE-2020-28928":[0.3021859337878321,-0.03975971918119094],"CVE-2021-30139":[0.30214384134553623,-0.10946734940914377],"CVE-2021-41581":[0.21696074292438225,-0.16904381677387192],"DaemonSet.default":[-0.0473546329280639,0.016678105959439516],"StatefulSet.default":[0.0005987029643785161,-0.0040500890016108015],"cloudve/galaxy-cvmfs-csi":[-0.07109237602959724,0.02416362949346602],"deps":[-1.0,0.39488116436866505],"quay.io/k8scsi/csi-attacher:v1.0.1":[0.2237663787560953,-0.06880122883076022],"quay.io/k8scsi/csi-node-driver-registrar:v1.0.2":[0.19487213200663397,-0.07151619035430103],"quay.io/k8scsi/csi-provisioner:v1.0.1":[0.21655269804231128,-0.09347034914483625]}},"id":"209154","type":"StaticLayoutProvider"},{"attributes":{"axis":{"id":"209117"},"ticker":null},"id":"209120","type":"Grid"},{"attributes":{},"id":"209128","type":"SaveTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"209131","type":"BoxAnnotation"},{"attributes":{},"id":"209129","type":"ResetTool"},{"attributes":{"callback":null},"id":"209140","type":"TapTool"},{"attributes":{"active_multi":null,"tools":[{"id":"209125"},{"id":"209126"},{"id":"209127"},{"id":"209128"},{"id":"209129"},{"id":"209130"},{"id":"209139"},{"id":"209140"},{"id":"209141"}]},"id":"209132","type":"Toolbar"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_25","CKV_K8S_16","CKV_K8S_39","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_25","CKV_K8S_16","CKV_K8S_39","quay.io/k8scsi/csi-node-driver-registrar:v1.0.2","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","StatefulSet.default","quay.io/k8scsi/csi-attacher:v1.0.1","quay.io/k8scsi/csi-provisioner:v1.0.1","CVE-2019-14697","CVE-2018-1000517","CVE-2021-30139","CVE-2019-5747","CVE-2018-20679","CVE-2021-41581","CVE-2020-28928","quay.io/k8scsi/csi-attacher:v1.0.1","quay.io/k8scsi/csi-provisioner:v1.0.1","quay.io/k8scsi/csi-attacher:v1.0.1","quay.io/k8scsi/csi-provisioner:v1.0.1","quay.io/k8scsi/csi-attacher:v1.0.1","quay.io/k8scsi/csi-provisioner:v1.0.1","quay.io/k8scsi/csi-attacher:v1.0.1","quay.io/k8scsi/csi-provisioner:v1.0.1","quay.io/k8scsi/csi-attacher:v1.0.1","quay.io/k8scsi/csi-provisioner:v1.0.1","quay.io/k8scsi/csi-attacher:v1.0.1","quay.io/k8scsi/csi-provisioner:v1.0.1","quay.io/k8scsi/csi-attacher:v1.0.1","quay.io/k8scsi/csi-provisioner:v1.0.1"],"start":["cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","cloudve/galaxy-cvmfs-csi","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","StatefulSet.default","StatefulSet.default","quay.io/k8scsi/csi-node-driver-registrar:v1.0.2","quay.io/k8scsi/csi-node-driver-registrar:v1.0.2","quay.io/k8scsi/csi-node-driver-registrar:v1.0.2","quay.io/k8scsi/csi-node-driver-registrar:v1.0.2","quay.io/k8scsi/csi-node-driver-registrar:v1.0.2","quay.io/k8scsi/csi-node-driver-registrar:v1.0.2","quay.io/k8scsi/csi-node-driver-registrar:v1.0.2","CVE-2019-14697","CVE-2019-14697","CVE-2018-1000517","CVE-2018-1000517","CVE-2021-30139","CVE-2021-30139","CVE-2019-5747","CVE-2019-5747","CVE-2018-20679","CVE-2018-20679","CVE-2021-41581","CVE-2021-41581","CVE-2020-28928","CVE-2020-28928"]},"selected":{"id":"209209"},"selection_policy":{"id":"209208"}},"id":"209151","type":"ColumnDataSource"},{"attributes":{},"id":"209190","type":"BasicTickFormatter"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"209147"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"209185","type":"LabelSet"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"209139","type":"HoverTool"},{"attributes":{"overlay":{"id":"209205"}},"id":"209141","type":"BoxSelectTool"},{"attributes":{},"id":"209126","type":"WheelZoomTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"209205","type":"BoxAnnotation"},{"attributes":{"formatter":{"id":"209190"},"major_label_policy":{"id":"209188"},"ticker":{"id":"209118"}},"id":"209117","type":"LinearAxis"},{"attributes":{"text":"cloudve-galaxy-cvmfs-csi"},"id":"209107","type":"Title"},{"attributes":{},"id":"209188","type":"AllLabels"},{"attributes":{"source":{"id":"209147"}},"id":"209149","type":"CDSView"},{"attributes":{},"id":"209109","type":"DataRange1d"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,9.8,7.5,7.5,7.5,5.5,5.5,null,null],"description":["cloudve/galaxy-cvmfs-csi",null,"Containers should not share the host network namespace","DaemonSet.csi-cvmfsplugin.default (container 1) - csi-cvmfsplugin","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers"

View BlastRadius Graph

cloudve-openstack-cinder-csi

Bokeh Plot Bokeh.set_log_level("info"); {"34d4e983-3361-4168-b143-7fe7e5060ab3":{"defs":[],"roots":{"references":[{"attributes":{"source":{"id":"210443"}},"id":"210445","type":"CDSView"},{"attributes":{"data_source":{"id":"210447"},"glyph":{"id":"210446"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"210449"}},"id":"210448","type":"GlyphRenderer"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"210443"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"210481","type":"LabelSet"},{"attributes":{},"id":"210425","type":"ResetTool"},{"attributes":{"text":"cloudve-openstack-cinder-csi"},"id":"210403","type":"Title"},{"attributes":{"formatter":{"id":"210489"},"major_label_policy":{"id":"210487"},"ticker":{"id":"210418"}},"id":"210417","type":"LinearAxis"},{"attributes":{"below":[{"id":"210413"}],"center":[{"id":"210416"},{"id":"210420"}],"height":768,"left":[{"id":"210417"}],"renderers":[{"id":"210441"},{"id":"210481"}],"title":{"id":"210403"},"toolbar":{"id":"210428"},"width":1024,"x_range":{"id":"210405"},"x_scale":{"id":"210409"},"y_range":{"id":"210407"},"y_scale":{"id":"210411"}},"id":"210402","subtype":"Figure","type":"Plot"},{"attributes":{"active_multi":null,"tools":[{"id":"210421"},{"id":"210422"},{"id":"210423"},{"id":"210424"},{"id":"210425"},{"id":"210426"},{"id":"210435"},{"id":"210436"},{"id":"210437"}]},"id":"210428","type":"Toolbar"},{"attributes":{},"id":"210486","type":"BasicTickFormatter"},{"attributes":{},"id":"210414","type":"BasicTicker"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"210501","type":"BoxAnnotation"},{"attributes":{},"id":"210407","type":"DataRange1d"},{"attributes":{},"id":"210484","type":"AllLabels"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,9.8,9.8,9.8,8.8,8.1,8.1,7.5,7.5,7.5,7.5,7.5,7.4,5.7,5.5,5.5,5.5,5.3,9.8,9.1,8.1,8.1,7.8,7.8,7.5,7.5,7.5,7.5,7.5,7,7,6.5,6.3,5.9,5.9,5.9,5.9,5.7,5.5,5.5,5.5,5.5,5.3,5.3,5.3],"description":["cloudve/openstack-cinder-csi",null,"Ensure that Service Account Tokens are only mounted where necessary","StatefulSet.openstack-cinder-csi-controllerplugin.default (container 4) - cinder-csi-plugin","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible"

View BlastRadius Graph

cloudve-prometheus

Bokeh Plot Bokeh.set_log_level("info"); {"01ab8557-0f83-41d7-bffb-5f4689531cbd":{"defs":[],"roots":{"references":[{"attributes":{"data":{"color":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"red",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null],"end":["CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_35","CKV_K8S_37","CKV_K8S_15","CKV_K8S_8","CKV_K8S_9","CKV_K8S_6","CKV_K8S_1","CKV_K8S_5","CKV_K8S_32","CKV_K8S_7","CKV_K8S_36","CKV_K8S_4","CKV_K8S_12","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_19","CKV_K8S_17","CKV_K8S_26","CKV_K8S_14","prometheus","Deployment.default","DaemonSet.default","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_35","CKV_K8S_37","CKV_K8S_15","CKV_K8S_8","CKV_K8S_9","CKV_K8S_12","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_14","quay.io/coreos/grafana-watcher:v0.0.8","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","PodSecurityPolicy.default","CKV_K8S_1","CKV_K8S_5","CKV_K8S_32","CKV_K8S_7","CKV_K8S_36","CKV_K8S_4","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_17","CKV_K8S_26","CVE-2018-1000517","CVE-2017-16544","CVE-2018-1000500","CVE-2019-5747","CVE-2018-20679","CVE-2015-9261"],"start":["cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","cloudve/prometheus","deps","CKV_K8S_38","CKV_K8S_38","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_37","CKV_K8S_15","CKV_K8S_8","CKV_K8S_9","CKV_K8S_6","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","CKV_K8S_12","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_19","DaemonSet.default","DaemonSet.default","quay.io/coreos/grafana-watcher:v0.0.8","quay.io/coreos/grafana-watcher:v0.0.8","quay.io/coreos/grafana-watcher:v0.0.8","quay.io/coreos/grafana-watcher:v0.0.8","quay.io/coreos/grafana-watcher:v0.0.8","quay.io/coreos/grafana-watcher:v0.0.8"]},"selected":{"id":"211477"},"selection_policy":{"id":"211476"}},"id":"211419","type":"ColumnDataSource"},{"attributes":{},"id":"211383","type":"LinearScale"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"211407","type":"HoverTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"211473","type":"BoxAnnotation"},{"attributes":{},"id":"211394","type":"WheelZoomTool"},{"attributes":{"formatter":{"id":"211461"},"major_label_policy":{"id":"211459"},"ticker":{"id":"211390"}},"id":"211389","type":"LinearAxis"},{"attributes":{"overlay":{"id":"211399"}},"id":"211395","type":"BoxZoomTool"},{"attributes":{"text":"cloudve-prometheus"},"id":"211375","type":"Title"},{"attributes":{"data_source":{"id":"211419"},"glyph":{"id":"211418"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"211421"}},"id":"211420","type":"GlyphRenderer"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"211399","type":"BoxAnnotation"},{"attributes":{},"id":"211396","type":"SaveTool"},{"attributes":{},"id":"211474","type":"UnionRenderers"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"211443","type":"CategoricalColorMapper"},{"attributes":{"below":[{"id":"211385"}],"center":[{"id":"211388"},{"id":"211392"}],"height":768,"left":[{"id":"211389"}],"renderers":[{"id":"211413"},{"id":"211453"}],"title":{"id":"211375"},"toolbar":{"id":"211400"},"width":1024,"x_range":{"id":"211377"},"x_scale":{"id":"211381"},"y_range":{"id":"211379"},"y_scale":{"id":"211383"}},"id":"211374","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"211379","type":"DataRange1d"},{"attributes":{"axis":{"id":"211389"},"dimension":1,"ticker":null},"id":"211392","type":"Grid"},{"attributes":{},"id":"211475","type":"Selection"},{"attributes":{"graph_layout":{"CKV_K8S_1":[0.18179328520080285,0.007496648960956706],"CKV_K8S_10":[0.07039811521177299,-0.12262937074166796],"CKV_K8S_11":[-0.039039912454136474,-0.127704291514243],"CKV_K8S_12":[0.05913489827522945,-0.0031563350768951124],"CKV_K8S_13":[-0.02171438887151766,-0.15376804531350968],"CKV_K8S_14":[0.05960188047966238,-0.16316360855838571],"CKV_K8S_15":[0.024153945896070117,0.01098521925279279],"CKV_K8S_17":[0.05687810247939415,-0.20423728391924129],"CKV_K8S_19":[-0.011992234665981412,-0.20766284628802417],"CKV_K8S_20":[-0.07445086823020645,-0.016582041070245596],"CKV_K8S_22":[-0.04961669861559403,-0.04739877406927777],"CKV_K8S_23":[0.01274136796202011,-0.1519523197685101],"CKV_K8S_26":[-0.08207394219216263,-0.16805060952153045],"CKV_K8S_28":[-0.08806952184490752,-0.048541281717943585],"CKV_K8S_29":[0.0844507259153617,-0.08329838306301035],"CKV_K8S_30":[-0.0725584585445042,-0.11702100580762696],"CKV_K8S_31":[-0.09018119320146883,-0.08253903328369953],"CKV_K8S_32":[0.21602130334420122,-0.11745047568113802],"CKV_K8S_35":[0.056506982492195476,0.052995741353759056],"CKV_K8S_36":[0.17223447606146688,-0.0313023154378057],"CKV_K8S_37":[0.07619386186762299,-0.03422530936342289],"CKV_K8S_38":[-0.028751030731636013,-0.0096778847348201],"CKV_K8S_4":[0.19404512299471718,-0.1582160973725553],"CKV_K8S_40":[-0.0541270960528189,-0.08673983942095605],"CKV_K8S_43":[-0.01097382227784027,0.024805673870601924],"CKV_K8S_5":[0.20762516004483897,-0.029601677607161474],"CKV_K8S_6":[0.17982806441106805,-0.1267820125743144],"CKV_K8S_7":[0.18935940014214342,-0.07999135973229535],"CKV_K8S_8":[0.02614458651366117,-0.11997825090792727],"CKV_K8S_9":[-0.05226932970399172,0.011937120468428956],"CVE-2015-9261":[0.019810251318563028,0.3686816485123714],"CVE-2017-16544":[0.15637103189805063,0.3233709558593373],"CVE-2018-1000500":[0.053137377252031784,0.40139945635508173],"CVE-2018-1000517":[0.09117174238090223,0.37333976416230497],"CVE-2018-20679":[0.13679349116339706,0.36890557663226964],"CVE-2019-5747":[-0.02769974109570423,0.35496139002469507],"DaemonSet.default":[-0.010273178744225358,-0.08565158234595417],"Deployment.default":[0.003915102640586585,-0.029438571685949624],"PodSecurityPolicy.default":[0.24248191201102443,-0.06588351832766434],"cloudve/prometheus":[0.04729377711151759,-0.07940539757121208],"deps":[-0.9588095167887416,0.07647155514139864],"prometheus":[-1.0,0.11509847630575251],"quay.io/coreos/grafana-watcher:v0.0.8":[0.054514968947134694,0.2616002955772385]}},"id":"211422","type":"StaticLayoutProvider"},{"attributes":{},"id":"211418","type":"MultiLine"},{"attributes":{},"id":"211386","type":"BasicTicker"},{"attributes":{},"id":"211471","type":"NodesOnly"},{"attributes":{"axis":{"id":"211385"},"ticker":null},"id":"211388","type":"Grid"},{"attributes":{"callback":null},"id":"211408","type":"TapTool"},{"attributes":{"source":{"id":"211419"}},"id":"211421","type":"CDSView"},{"attributes":{},"id":"211377","type":"DataRange1d"},{"attributes":{},"id":"211466","type":"NodesOnly"},{"attributes":{},"id":"211458","type":"BasicTickFormatter"},{"attributes":{},"id":"211393","type":"PanTool"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"211415"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"211453","type":"LabelSet"},{"attributes":{"active_multi":null,"tools":[{"id":"211393"},{"id":"211394"},{"id":"211395"},{"id":"211396"},{"id":"211397"},{"id":"211398"},{"id":"211407"},{"id":"211408"},{"id":"211409"}]},"id":"211400","type":"Toolbar"},{"attributes":{},"id":"211397","type":"ResetTool"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,8.8,8.1,7.5,7.5,5.5,null],"description":["cloudve/prometheus",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-grafana.default (container 1) - grafana-watcher","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible"

View BlastRadius Graph

dacruz21-matrix

CVE-2021-3711, CVE-2021-36159, CVE-2021-22945, CVE-2021-32765, CVE-2021-32027, CVE-2020-25695, CVE-2021-22901, CVE-2020-25694, CVE-2021-30139, CVE-2021-28831, CVE-2021-27212, CVE-2021-23840, CVE-2021-22946, CVE-2021-22926, CVE-2020-8286, CVE-2020-8285, CVE-2020-8231, CVE-2020-8169, CVE-2020-36230, CVE-2020-36229, CVE-2020-36228, CVE-2020-36227, CVE-2020-36226, CVE-2020-36225, CVE-2020-36224, CVE-2020-36223, CVE-2020-36222, CVE-2020-36221, CVE-2020-25710, CVE-2020-25709, CVE-2020-25696, CVE-2020-25692, CVE-2021-3712, CVE-2021-3450, CVE-2020-14350, CVE-2020-8177, CVE-2020-14349, CVE-2021-22922, CVE-2021-3449, CVE-2021-23841, CVE-2021-22947, CVE-2020-1971, CVE-2021-20227, CVE-2020-28928, CVE-2020-15358, CVE-2021-22925, CVE-2021-22923, CVE-2021-22876, CVE-2019-12900, CVE-2018-12886, CVE-2020-1712, CVE-2021-33574, CVE-2019-9169, CVE-2018-6551, CVE-2018-6485, CVE-2021-35942, CVE-2018-1000858, CVE-2020-6096, CVE-2019-17543, CVE-2019-3844, CVE-2019-3843, CVE-2018-6954, CVE-2018-1000001, CVE-2016-2779, CVE-2021-3326, CVE-2019-14855, CVE-2018-9234, CVE-2009-5155, CVE-2020-1752, CVE-2020-1751, CVE-2016-2781, CVE-2019-13627, CVE-2021-40528, CVE-2019-25013, CVE-2017-12132, CVE-2016-10228, CVE-2020-27618, CVE-2020-10029, CVE-2018-19211, CVE-2019-17595, CVE-2020-14155, CVE-2019-17594, CVE-2018-7169, CVE-2016-10739, CVE-2021-3520, CVE-2019-5482, CVE-2019-5481, CVE-2017-14062, CVE-2017-12424, CVE-2019-20367, CVE-2017-8872, CVE-2021-3518, CVE-2020-10531, CVE-2019-5827, CVE-2021-3517, CVE-2020-10878, CVE-2020-10543, CVE-2021-20305, CVE-2018-20506, CVE-2018-20346, CVE-2021-3516, CVE-2019-5436, CVE-2017-20002, CVE-2021-3580, CVE-2021-33560, CVE-2020-7595, CVE-2020-29361, CVE-2020-28196, CVE-2020-13871, CVE-2020-12723, CVE-2020-12243, CVE-2020-11655, CVE-2020-11080, CVE-2019-9937, CVE-2019-9936, CVE-2019-3829, CVE-2019-20388, CVE-2019-20218, CVE-2019-19956, CVE-2019-19906, CVE-2019-18197, CVE-2018-8740, CVE-2018-14404, CVE-2020-13630, CVE-2019-5188, CVE-2021-37750, CVE-2021-3541, CVE-2020-24977, CVE-2019-16168, CVE-2018-14567, CVE-2017-18258, CVE-2021-3537, CVE-2020-27350, CVE-2021-33910, CVE-2020-3810, CVE-2020-21913, CVE-2020-13632, CVE-2020-13434, CVE-2020-29362, CVE-2019-1551, CVE-2018-20217, CVE-2019-8457, CVE-2017-11462, CVE-2017-5130, CVE-2019-17498, CVE-2019-13115, CVE-2018-1000168, CVE-2017-16932, CVE-2018-5710, CVE-2018-16869, CVE-2018-16868, CVE-2016-9318, CKV_K8S_38, CKV_K8S_40, CKV_K8S_31, CKV_K8S_43, CKV_K8S_22, CKV_K8S_28, CKV_K8S_20, CKV_K8S_35, CKV_K8S_37, CKV_K8S_15, CKV_K8S_11, CKV_K8S_13, CKV_K8S_19, CKV_K8S_12, CKV_K8S_10, CKV_K8S_26, CKV_K8S_8, CKV_K8S_9, CKV_K8S_30

October 00, 1011

Bokeh Plot Bokeh.set_log_level("info"); {"68886acb-33fb-467a-8815-c8b319558c8d":{"defs":[],"roots":{"references":[{"attributes":{},"id":"258681","type":"DataRange1d"},{"attributes":{},"id":"258765","type":"BasicTickFormatter"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"258719"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"258757","type":"LabelSet"},{"attributes":{},"id":"258701","type":"ResetTool"},{"attributes":{},"id":"258687","type":"LinearScale"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,9.1,9.1,8.8,8.8,8.8,8.1,8.1,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.4,7.4,7.3,7.1,7.1,6.5,5.9,5.9,5.9,5.9,5.5,5.5,5.5,5.3,5.3,5.3,null,9.8,8.1,7.8,9.8,9.8,9.8,9.8,9.1,8.8,8.1,8.1,7.8,7.8,7.8,7.8,7.8,7.5,7.5,7.5,7.5,7,7,6.5,6.3,5.9,5.9,5.9,5.9,5.5,5.5,5.5,5.4,5.3,5.3,5.3,5.3,null,9.8,9.8,9.8,9.8,9.8,9.1,9.1,8.8,8.8,8.8,8.6,8.6,8.2,8.1,8.1,8.1,7.8,7.8,7.8,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7,6.7,6.5,6.5,6.5,6.5,6.5,6.5,5.9,5.7,5.5,5.5,5.5,5.5,5.5,5.3,5.3,5.3,9.8,9.8,8.8,8.1,8.1,7.5,7.5,6.5,5.7,5.6,5.5,null],"description":["dacruz21/matrix",null,"Ensure that Service Account Tokens are only mounted where necessary","StatefulSet.RELEASE-NAME-postgresql.default (container 0) - init-chmod-data","Containers should run as a high UID to avoid host conflict","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability","Containers should not run with allowPrivilegeEscalation","Prefer using secrets as files over secrets as environment variables"

View BlastRadius Graph

devtron-calico

Bokeh Plot Bokeh.set_log_level("info"); {"a2f91938-68e7-425d-8620-bdb4a9f1b7d1":{"defs":[],"roots":{"references":[{"attributes":{"data_source":{"id":"289827"},"glyph":{"id":"289826"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"289829"}},"id":"289828","type":"GlyphRenderer"},{"attributes":{},"id":"289794","type":"BasicTicker"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"289851"}},"size":{"value":20}},"id":"289852","type":"Circle"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.3,6.5,6.5,5.9,5.9,5.3,null,null],"description":["devtron/calico",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.calico-kube-controllers.kube-system (container 0) - calico-kube-controllers","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible"

View BlastRadius Graph

dnationcloud-dnation-kubernetes-monitoring-stack

Bokeh Plot Bokeh.set_log_level("info"); {"44a6ed6c-a055-4cf0-9dc9-e1a9026d1341":{"defs":[],"roots":{"references":[{"attributes":{"graph_layout":{"CKV_K8S_1":[-0.24219372467279557,0.06340983450121032],"CKV_K8S_10":[-0.062162660178421064,0.1334572874369369],"CKV_K8S_11":[-0.05338844742325128,0.08664861780450518],"CKV_K8S_12":[0.07798796461240548,0.06915915966102516],"CKV_K8S_13":[-0.077057586891261,0.06951292062966956],"CKV_K8S_15":[0.07255685864884856,0.03321835282514765],"CKV_K8S_17":[-0.11203283246222256,-0.07640372853332307],"CKV_K8S_19":[-0.04814649336415691,-0.11720520691883658],"CKV_K8S_20":[0.046949115781125234,0.057326271181916744],"CKV_K8S_22":[-0.037617364312489555,0.11859477374190285],"CKV_K8S_23":[0.010719292208026794,0.14188421975754223],"CKV_K8S_26":[0.060670110242798544,-0.0889330177420785],"CKV_K8S_27":[0.09632777190956371,-0.03989636834949273],"CKV_K8S_28":[0.060232166606185134,0.09573075897172569],"CKV_K8S_29":[0.006628945184409286,-0.11315406948218076],"CKV_K8S_30":[-0.0983196763079829,0.04060664414429995],"CKV_K8S_31":[-0.08391938987170477,0.10624832826360724],"CKV_K8S_32":[-0.21355646268720668,-0.11107281162877296],"CKV_K8S_35":[-0.07367805458057272,-0.06867406967875567],"CKV_K8S_36":[-0.21785370225125783,0.030925380719851778],"CKV_K8S_37":[0.0065925988997131285,-0.0008829909313747331],"CKV_K8S_38":[-0.021302770604349337,0.14285781150413426],"CKV_K8S_4":[-0.2428168451007783,-0.07612571229592158],"CKV_K8S_40":[0.04366337243313179,0.12317888889882901],"CKV_K8S_43":[0.04627204518029859,0.015543696471259114],"CKV_K8S_49":[0.007586690578274791,-0.2163967136241173],"CKV_K8S_5":[-0.22609876059137493,-0.026028916762185102],"CKV_K8S_6":[-0.2524719115137508,0.01498517753790229],"CKV_K8S_7":[-0.20353974089654672,-0.06934110493981277],"CKV_K8S_8":[-0.018198759263509254,-0.057633419100183825],"CKV_K8S_9":[0.037508293216062416,-0.047700913447117306],"ClusterRole.default":[0.070117559611416,-0.351372878300725],"DaemonSet.default":[-0.006458195574440933,0.023636382111178165],"Deployment.default":[-0.008220535000771691,0.05379413412536403],"Job.default":[-0.004969507489749116,0.08857506781195039],"PodSecurityPolicy.default":[-0.2900957333028895,-0.031250072979567355],"StatefulSet.default":[0.015280675588862922,0.10003400682622342],"deps":[1.0,-0.02720691399754274],"dnation-kubernetes-monitoring-stack":[0.9996147188046176,-0.08994217900414037],"dnationcloud/dnation-kubernetes-monitoring-stack":[-0.06460902516425633,-0.00010662721005362252]}},"id":"297930","type":"StaticLayoutProvider"},{"attributes":{},"id":"297906","type":"HelpTool"},{"attributes":{"below":[{"id":"297893"}],"center":[{"id":"297896"},{"id":"297900"}],"height":768,"left":[{"id":"297897"}],"renderers":[{"id":"297921"},{"id":"297961"}],"title":{"id":"297883"},"toolbar":{"id":"297908"},"width":1024,"x_range":{"id":"297885"},"x_scale":{"id":"297889"},"y_range":{"id":"297887"},"y_scale":{"id":"297891"}},"id":"297882","subtype":"Figure","type":"Plot"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"297907","type":"BoxAnnotation"},{"attributes":{},"id":"297891","type":"LinearScale"},{"attributes":{"active_multi":null,"tools":[{"id":"297901"},{"id":"297902"},{"id":"297903"},{"id":"297904"},{"id":"297905"},{"id":"297906"},{"id":"297915"},{"id":"297916"},{"id":"297917"}]},"id":"297908","type":"Toolbar"},{"attributes":{},"id":"297964","type":"AllLabels"},{"attributes":{"edge_renderer":{"id":"297928"},"inspection_policy":{"id":"297974"},"layout_provider":{"id":"297930"},"node_renderer":{"id":"297924"},"selection_policy":{"id":"297979"}},"id":"297921","type":"GraphRenderer"},{"attributes":{},"id":"297926","type":"MultiLine"},{"attributes":{"data_source":{"id":"297923"},"glyph":{"id":"297952"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"297925"}},"id":"297924","type":"GlyphRenderer"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"297923"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"297961","type":"LabelSet"},{"attributes":{},"id":"297966","type":"BasicTickFormatter"},{"attributes":{},"id":"297898","type":"BasicTicker"},{"attributes":{"formatter":{"id":"297969"},"major_label_policy":{"id":"297967"},"ticker":{"id":"297898"}},"id":"297897","type":"LinearAxis"},{"attributes":{"data_source":{"id":"297927"},"glyph":{"id":"297926"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"297929"}},"id":"297928","type":"GlyphRenderer"},{"attributes":{},"id":"297901","type":"PanTool"},{"attributes":{},"id":"297967","type":"AllLabels"},{"attributes":{},"id":"297885","type":"DataRange1d"},{"attributes":{},"id":"297887","type":"DataRange1d"},{"attributes":{"formatter":{"id":"297966"},"major_label_policy":{"id":"297964"},"ticker":{"id":"297894"}},"id":"297893","type":"LinearAxis"},{"attributes":{},"id":"297905","type":"ResetTool"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"297915","type":"HoverTool"},{"attributes":{},"id":"297969","type":"BasicTickFormatter"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"297951"}},"size":{"value":20}},"id":"297952","type":"Circle"},{"attributes":{"source":{"id":"297927"}},"id":"297929","type":"CDSView"},{"attributes":{},"id":"297984","type":"UnionRenderers"},{"attributes":{},"id":"297974","type":"NodesOnly"},{"attributes":{"source":{"id":"297923"}},"id":"297925","type":"CDSView"},{"attributes":{},"id":"297904","type":"SaveTool"},{"attributes":{},"id":"297985","type":"Selection"},{"attributes":{},"id":"297979","type":"NodesOnly"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"297981","type":"BoxAnnotation"},{"attributes":{"overlay":{"id":"297981"}},"id":"297917","type":"BoxSelectTool"},{"attributes":{},"id":"297894","type":"BasicTicker"},{"attributes":{},"id":"297889","type":"LinearScale"},{"attributes":{"callback":null},"id":"297916","type":"TapTool"},{"attributes":{"data":{"description":["dnationcloud/dnation-kubernetes-monitoring-stack",null,"Do not admit root containers","PodSecurityPolicy.RELEASE-NAME-fluent-bit-loki","Ensure default seccomp profile set to docker/default or runtime/default","Ensure that Service Account Tokens are only mounted where necessary","DaemonSet.RELEASE-NAME-prometheus-node-exporter.default (container 0) - prometheus-node-exporter","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest"

View BlastRadius Graph

dnationcloud-dnation-ping

Bokeh Plot Bokeh.set_log_level("info"); {"d7539553-ddbb-42e7-b2cc-256fa6479972":{"defs":[],"roots":{"references":[{"attributes":{},"id":"296591","type":"DataRange1d"},{"attributes":{},"id":"296606","type":"WheelZoomTool"},{"attributes":{"data":{"color":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"red",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null],"end":["CKV_K8S_38","CKV_K8S_40","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_35","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_6","CKV_K8S_8","CKV_K8S_9","CKV_K8S_29","CKV_K8S_25","CKV_K8S_24","CKV_K8S_32","CKV_K8S_7","CKV_K8S_36","CKV_K8S_19","CKV_K8S_17","CKV_K8S_26","dnation-ping","Deployment.default","DaemonSet.default","CKV_K8S_40","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_35","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_29","CKV_K8S_25","curlimages/curl:7.73.0","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","PodSecurityPolicy.default","CKV_K8S_24","CKV_K8S_32","CKV_K8S_7","CKV_K8S_36","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_17","CKV_K8S_26","CVE-2021-3711","CVE-2021-36159","CVE-2021-30139","CVE-2021-28831","CVE-2021-23840","CVE-2021-3712","CVE-2021-3450","CVE-2021-3449","CVE-2021-23841","CVE-2020-1971","CVE-2020-28928"],"start":["dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","dnationcloud/dnation-ping","deps","CKV_K8S_38","CKV_K8S_38","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_40","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_6","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","CKV_K8S_8","CKV_K8S_9","CKV_K8S_29","CKV_K8S_19","DaemonSet.default","DaemonSet.default","curlimages/curl:7.73.0","curlimages/curl:7.73.0","curlimages/curl:7.73.0","curlimages/curl:7.73.0","curlimages/curl:7.73.0","curlimages/curl:7.73.0","curlimages/curl:7.73.0","curlimages/curl:7.73.0","curlimages/curl:7.73.0","curlimages/curl:7.73.0","curlimages/curl:7.73.0"]},"selected":{"id":"296689"},"selection_policy":{"id":"296688"}},"id":"296631","type":"ColumnDataSource"},{"attributes":{},"id":"296673","type":"BasicTickFormatter"},{"attributes":{},"id":"296670","type":"BasicTickFormatter"},{"attributes":{"data_source":{"id":"296631"},"glyph":{"id":"296630"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"296633"}},"id":"296632","type":"GlyphRenderer"},{"attributes":{},"id":"296602","type":"BasicTicker"},{"attributes":{},"id":"296686","type":"UnionRenderers"},{"attributes":{"text":"dnationcloud-dnation-ping"},"id":"296587","type":"Title"},{"attributes":{"formatter":{"id":"296673"},"major_label_policy":{"id":"296671"},"ticker":{"id":"296602"}},"id":"296601","type":"LinearAxis"},{"attributes":{},"id":"296678","type":"NodesOnly"},{"attributes":{"overlay":{"id":"296611"}},"id":"296607","type":"BoxZoomTool"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"296619","type":"HoverTool"},{"attributes":{"source":{"id":"296627"}},"id":"296629","type":"CDSView"},{"attributes":{},"id":"296598","type":"BasicTicker"},{"attributes":{"overlay":{"id":"296685"}},"id":"296621","type":"BoxSelectTool"},{"attributes":{},"id":"296668","type":"AllLabels"},{"attributes":{"axis":{"id":"296601"},"dimension":1,"ticker":null},"id":"296604","type":"Grid"},{"attributes":{"callback":null},"id":"296620","type":"TapTool"},{"attributes":{"formatter":{"id":"296670"},"major_label_policy":{"id":"296668"},"ticker":{"id":"296598"}},"id":"296597","type":"LinearAxis"},{"attributes":{"source":{"id":"296631"}},"id":"296633","type":"CDSView"},{"attributes":{},"id":"296610","type":"HelpTool"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"296655","type":"CategoricalColorMapper"},{"attributes":{},"id":"296689","type":"Selection"},{"attributes":{"axis":{"id":"296597"},"ticker":null},"id":"296600","type":"Grid"},{"attributes":{},"id":"296683","type":"NodesOnly"},{"attributes":{"graph_layout":{"CKV_K8S_10":[0.01998191836328603,-0.011042332029923085],"CKV_K8S_11":[0.14034986296882354,-0.12508696312557213],"CKV_K8S_12":[0.09999818109096464,-0.004504084244037452],"CKV_K8S_13":[0.008819130928754875,-0.13042305145306918],"CKV_K8S_15":[0.10402421455755956,-0.04522029592572338],"CKV_K8S_17":[-0.06738538169620342,-0.07697675414649154],"CKV_K8S_19":[0.20751729665390367,-0.10262570554881022],"CKV_K8S_20":[0.01465554515998394,-0.18439808719883558],"CKV_K8S_22":[0.1185813273000048,-0.08782688487950426],"CKV_K8S_23":[0.062040208568890316,-0.013429684686134253],"CKV_K8S_24":[0.1775526909582923,-0.33307010486153643],"CKV_K8S_25":[0.08831293270783813,-0.22700914784191373],"CKV_K8S_26":[0.19466410134331313,-0.1626341674328469],"CKV_K8S_28":[-0.05096560533199519,-0.14104543130176747],"CKV_K8S_29":[0.15464339934672416,-0.06864144369533376],"CKV_K8S_30":[0.09359777373452223,-0.18226675575907306],"CKV_K8S_31":[-0.02128581786835535,-0.03899483905727288],"CKV_K8S_32":[0.18874443642470912,-0.2962716565892596],"CKV_K8S_35":[-0.014035805178510065,-0.23368711783961674],"CKV_K8S_36":[0.2574418944991777,-0.25179753412138833],"CKV_K8S_37":[0.14280125910123775,-0.030065877120968018],"CKV_K8S_38":[-0.01595391525399935,-0.1757973681524024],"CKV_K8S_40":[0.04525878821278078,-0.19769506834595085],"CKV_K8S_43":[-0.017811052076490492,-0.08811585733388036],"CKV_K8S_6":[0.22962884205124692,-0.28129977705711473],"CKV_K8S_7":[0.13697810710834205,-0.3436206012831615],"CKV_K8S_8":[-0.05450262261010145,-0.10922781607595165],"CKV_K8S_9":[-0.04711854843997981,-0.17465495939047476],"CVE-2020-1971":[-0.12873930624016783,0.4791792312961534],"CVE-2020-28928":[-0.16980690126388923,0.4429190507807399],"CVE-2021-23840":[-0.09277926835103088,0.4264221011998175],"CVE-2021-23841":[-0.180968069351255,0.3895236542563318],"CVE-2021-28831":[-0.07971469643917739,0.5047125738197893],"CVE-2021-30139":[-0.011977886891063069,0.44334066709893605],"CVE-2021-3449":[-0.16155506118799737,0.3372341162692917],"CVE-2021-3450":[0.034902125367332996,0.4883943394537509],"CVE-2021-36159":[-0.024678822164490643,0.5071255914308643],"CVE-2021-3711":[0.06541928728121656,0.4405074429608768],"CVE-2021-3712":[0.07365491807330048,0.3850173896011701],"DaemonSet.default":[0.05710796888704849,-0.10349892189318442],"Deployment.default":[0.027707231367367222,-0.05626188830667793],"PodSecurityPolicy.default":[0.24989416781375656,-0.3584709192304695],"curlimages/curl:7.73.0":[-0.043992005562249976,0.34176505337009294],"deps":[-1.0,-0.20774535492723753],"dnation-ping":[-0.8969442377489529,-0.1868233544001807],"dnationcloud/dnation-ping":[0.08593739378552952,-0.15591140628205263]}},"id":"296634","type":"StaticLayoutProvider"},{"attributes":{"data_source":{"id":"296627"},"glyph":{"id":"296656"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"296629"}},"id":"296628","type":"GlyphRenderer"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"296611","type":"BoxAnnotation"},{"attributes":{},"id":"296605","type":"PanTool"},{"attributes":{"below":[{"id":"296597"}],"center":[{"id":"296600"},{"id":"296604"}],"height":768,"left":[{"id":"296601"}],"renderers":[{"id":"296625"},{"id":"296665"}],"title":{"id":"296587"},"toolbar":{"id":"296612"},"width":1024,"x_range":{"id":"296589"},"x_scale":{"id":"296593"},"y_range":{"id":"296591"},"y_scale":{"id":"296595"}},"id":"296586","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"296671","type":"AllLabels"},{"attributes":{},"id":"296595","type":"LinearScale"},{"attributes":{},"id":"296687","type":"Selection"},{"attributes":{},"id":"296630","type":"MultiLine"},{"attributes":{"active_multi":null,"tools":[{"id":"296605"},{"id":"296606"},{"id":"296607"},{"id":"296608"},{"id":"296609"},{"id":"296610"},{"id":"296619"},{"id":"296620"},{"id":"296621"}]},"id":"296612","type":"Toolbar"},{"attributes":{"edge_renderer":{"id":"296632"},"inspection_policy":{"id":"296678"},"layout_provider":{"id":"296634"},"node_renderer":{"id":"296628"},"selection_policy":{"id":"296683"}},"id":"296625","type":"GraphRenderer"},{"attributes":{},"id":"296608","type":"SaveTool"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"296655"}},"size":{"value":20}},"id":"296656","type":"Circle"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"296685","type":"BoxAnnotation"},{"attributes":{},"id":"296609","type":"ResetTool"},{"attributes":{},"id":"296688","type":"UnionRenderers"},{"attributes":{},"id":"296593","type":"LinearScale"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,9.1,7.5,7.5,7.5,7.4,7.4,5.9,5.9,5.9,5.5,null],"description":["dnationcloud/dnation-ping",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-prometheus-blackbox-exporter.default (container 0) - blackbox-exporter","Containers should run as a high UID to avoid host conflict","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability"

View BlastRadius Graph

dr300481-shield

Bokeh Plot Bokeh.set_log_level("info"); {"7fdc3c59-b01a-4917-8a40-c6cf8449c06d":{"defs":[],"roots":{"references":[{"attributes":{"axis":{"id":"305393"},"ticker":null},"id":"305396","type":"Grid"},{"attributes":{},"id":"305464","type":"AllLabels"},{"attributes":{},"id":"305401","type":"PanTool"},{"attributes":{},"id":"305394","type":"BasicTicker"},{"attributes":{},"id":"305391","type":"LinearScale"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"305451"}},"size":{"value":20}},"id":"305452","type":"Circle"},{"attributes":{},"id":"305385","type":"DataRange1d"},{"attributes":{"callback":null},"id":"305416","type":"TapTool"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_16","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_16","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9"],"start":["dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","dr300481/shield","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default"]},"selected":{"id":"305485"},"selection_policy":{"id":"305484"}},"id":"305427","type":"ColumnDataSource"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"305407","type":"BoxAnnotation"},{"attributes":{"source":{"id":"305427"}},"id":"305429","type":"CDSView"},{"attributes":{},"id":"305482","type":"UnionRenderers"},{"attributes":{},"id":"305483","type":"Selection"},{"attributes":{},"id":"305387","type":"DataRange1d"},{"attributes":{"formatter":{"id":"305466"},"major_label_policy":{"id":"305464"},"ticker":{"id":"305394"}},"id":"305393","type":"LinearAxis"},{"attributes":{"data_source":{"id":"305427"},"glyph":{"id":"305426"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"305429"}},"id":"305428","type":"GlyphRenderer"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"305423"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"305461","type":"LabelSet"},{"attributes":{},"id":"305485","type":"Selection"},{"attributes":{},"id":"305466","type":"BasicTickFormatter"},{"attributes":{},"id":"305398","type":"BasicTicker"},{"attributes":{"below":[{"id":"305393"}],"center":[{"id":"305396"},{"id":"305400"}],"height":768,"left":[{"id":"305397"}],"renderers":[{"id":"305421"},{"id":"305461"}],"title":{"id":"305383"},"toolbar":{"id":"305408"},"width":1024,"x_range":{"id":"305385"},"x_scale":{"id":"305389"},"y_range":{"id":"305387"},"y_scale":{"id":"305391"}},"id":"305382","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"305474","type":"NodesOnly"},{"attributes":{"active_multi":null,"tools":[{"id":"305401"},{"id":"305402"},{"id":"305403"},{"id":"305404"},{"id":"305405"},{"id":"305406"},{"id":"305415"},{"id":"305416"},{"id":"305417"}]},"id":"305408","type":"Toolbar"},{"attributes":{"formatter":{"id":"305469"},"major_label_policy":{"id":"305467"},"ticker":{"id":"305398"}},"id":"305397","type":"LinearAxis"},{"attributes":{"overlay":{"id":"305407"}},"id":"305403","type":"BoxZoomTool"},{"attributes":{"data":{"description":["dr300481/shield",null,"Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-shield.default (container 0) - shield","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Use read-only filesystem for containers where possible"

View BlastRadius Graph

drycc-canary-cilium

Bokeh Plot Bokeh.set_log_level("info"); {"2a67e468-9c90-49f7-81cf-d49d8f8b2745":{"defs":[],"roots":{"references":[{"attributes":{"graph_layout":{"CKV_K8S_10":[0.08672095637720513,0.032733665599486796],"CKV_K8S_11":[-0.07114087628171335,-0.04119620352056102],"CKV_K8S_12":[-0.11300638645897,-0.021975760674653684],"CKV_K8S_13":[-0.036386964742087566,0.14147218971333353],"CKV_K8S_15":[0.043557543778152255,-0.025285512945820612],"CKV_K8S_16":[-0.17664356950427956,0.029330917297059705],"CKV_K8S_19":[-0.11578953277316834,0.028843164156088428],"CKV_K8S_20":[0.08727464583773283,-0.01960532126239912],"CKV_K8S_22":[-0.019902606774181132,-0.06020143611930506],"CKV_K8S_23":[0.04235811464265895,0.12319758408978809],"CKV_K8S_25":[0.06228534004987381,0.17533462064581293],"CKV_K8S_28":[0.029067928086380052,-0.06751967856737395],"CKV_K8S_29":[-0.0006148430279776724,0.16404464452147766],"CKV_K8S_30":[-0.06230602358713288,-0.10549136198265968],"CKV_K8S_31":[-0.10735988679959205,0.12091928206456679],"CKV_K8S_37":[-0.12415528956132817,0.07961694493938896],"CKV_K8S_38":[-0.0768121196467012,0.15503299077720975],"CKV_K8S_40":[0.07960242044005685,0.0909044470111645],"CKV_K8S_9":[0.1384697786093878,0.06264408782827542],"DaemonSet.default":[-0.02840528152272295,0.060252944080525464],"Deployment.default":[-0.0032197171355756627,0.03604030736207448],"deps":[0.38752343149818236,-1.0],"drycc-canary/cilium":[-0.021117061504198974,0.040907484986521365]}},"id":"318714","type":"StaticLayoutProvider"},{"attributes":{},"id":"318671","type":"DataRange1d"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_25","CKV_K8S_16","CKV_K8S_13","CKV_K8S_30","CKV_K8S_9","DaemonSet.default","Deployment.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_25","CKV_K8S_16","CKV_K8S_13","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_30","CKV_K8S_9"],"start":["drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","drycc-canary/cilium","CKV_K8S_19","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","Deployment.default","Deployment.default"]},"selected":{"id":"318769"},"selection_policy":{"id":"318768"}},"id":"318711","type":"ColumnDataSource"},{"attributes":{},"id":"318690","type":"HelpTool"},{"attributes":{"active_multi":null,"tools":[{"id":"318685"},{"id":"318686"},{"id":"318687"},{"id":"318688"},{"id":"318689"},{"id":"318690"},{"id":"318699"},{"id":"318700"},{"id":"318701"}]},"id":"318692","type":"Toolbar"},{"attributes":{},"id":"318763","type":"NodesOnly"},{"attributes":{"overlay":{"id":"318691"}},"id":"318687","type":"BoxZoomTool"},{"attributes":{},"id":"318758","type":"NodesOnly"},{"attributes":{},"id":"318688","type":"SaveTool"},{"attributes":{"source":{"id":"318711"}},"id":"318713","type":"CDSView"},{"attributes":{},"id":"318751","type":"AllLabels"},{"attributes":{},"id":"318766","type":"UnionRenderers"},{"attributes":{"overlay":{"id":"318765"}},"id":"318701","type":"BoxSelectTool"},{"attributes":{"callback":null},"id":"318700","type":"TapTool"},{"attributes":{},"id":"318682","type":"BasicTicker"},{"attributes":{"data_source":{"id":"318707"},"glyph":{"id":"318736"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"318709"}},"id":"318708","type":"GlyphRenderer"},{"attributes":{"axis":{"id":"318681"},"dimension":1,"ticker":null},"id":"318684","type":"Grid"},{"attributes":{},"id":"318686","type":"WheelZoomTool"},{"attributes":{},"id":"318685","type":"PanTool"},{"attributes":{},"id":"318767","type":"Selection"},{"attributes":{"text":"drycc-canary-cilium"},"id":"318667","type":"Title"},{"attributes":{"axis":{"id":"318677"},"ticker":null},"id":"318680","type":"Grid"},{"attributes":{"formatter":{"id":"318753"},"major_label_policy":{"id":"318751"},"ticker":{"id":"318682"}},"id":"318681","type":"LinearAxis"},{"attributes":{"below":[{"id":"318677"}],"center":[{"id":"318680"},{"id":"318684"}],"height":768,"left":[{"id":"318681"}],"renderers":[{"id":"318705"},{"id":"318745"}],"title":{"id":"318667"},"toolbar":{"id":"318692"},"width":1024,"x_range":{"id":"318669"},"x_scale":{"id":"318673"},"y_range":{"id":"318671"},"y_scale":{"id":"318675"}},"id":"318666","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"318753","type":"BasicTickFormatter"},{"attributes":{},"id":"318669","type":"DataRange1d"},{"attributes":{},"id":"318769","type":"Selection"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"318735","type":"CategoricalColorMapper"},{"attributes":{},"id":"318768","type":"UnionRenderers"},{"attributes":{},"id":"318710","type":"MultiLine"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"318699","type":"HoverTool"},{"attributes":{"data_source":{"id":"318711"},"glyph":{"id":"318710"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"318713"}},"id":"318712","type":"GlyphRenderer"},{"attributes":{"source":{"id":"318707"}},"id":"318709","type":"CDSView"},{"attributes":{},"id":"318673","type":"LinearScale"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"318707"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"318745","type":"LabelSet"},{"attributes":{"data":{"description":["drycc-canary/cilium",null,"Containers should not share the host network namespace","DaemonSet.cilium.default (container 1) - clean-cilium-state","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability"

View BlastRadius Graph

drycc-canary-metallb

Bokeh Plot Bokeh.set_log_level("info"); {"6f0cc2a4-29c3-4a26-bf89-d5083a4474c0":{"defs":[],"roots":{"references":[{"attributes":{"data":{"end":["CKV_K8S_38","CKV_K8S_31","CKV_K8S_43","CKV_K8S_12","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_19","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_35","CKV_K8S_25","CKV_K8S_32","CKV_K8S_6","CKV_K8S_24","CKV_K8S_2","CKV_K8S_4","Deployment.default","DaemonSet.default","CKV_K8S_31","CKV_K8S_43","CKV_K8S_12","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_35","CKV_K8S_25","PodSecurityPolicy.default","CKV_K8S_6","CKV_K8S_24","CKV_K8S_2","CKV_K8S_4"],"start":["drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","drycc-canary/metallb","CKV_K8S_38","CKV_K8S_38","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_31","CKV_K8S_43","CKV_K8S_12","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_32","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default"]},"selected":{"id":"322657"},"selection_policy":{"id":"322656"}},"id":"322599","type":"ColumnDataSource"},{"attributes":{},"id":"322654","type":"UnionRenderers"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"322587","type":"HoverTool"},{"attributes":{},"id":"322657","type":"Selection"},{"attributes":{},"id":"322578","type":"HelpTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"322579","type":"BoxAnnotation"},{"attributes":{"overlay":{"id":"322579"}},"id":"322575","type":"BoxZoomTool"},{"attributes":{"formatter":{"id":"322641"},"major_label_policy":{"id":"322639"},"ticker":{"id":"322570"}},"id":"322569","type":"LinearAxis"},{"attributes":{"data_source":{"id":"322595"},"glyph":{"id":"322624"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"322597"}},"id":"322596","type":"GlyphRenderer"},{"attributes":{"overlay":{"id":"322653"}},"id":"322589","type":"BoxSelectTool"},{"attributes":{},"id":"322646","type":"NodesOnly"},{"attributes":{},"id":"322570","type":"BasicTicker"},{"attributes":{"data":{"description":["drycc-canary/metallb",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-metallb-controller.default (container 0) - controller","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Memory requests should be set","Image Pull Policy should be Always","CPU requests should be set","CPU limits should be set","Memory limits should be set","Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-metallb-speaker.default (container 0) - speaker","Containers should run as a high UID to avoid host conflict"

View BlastRadius Graph

drycc-cilium

Bokeh Plot Bokeh.set_log_level("info"); {"0f553c64-a6ca-4b9f-9077-bf7d26087c18":{"defs":[],"roots":{"references":[{"attributes":{},"id":"310329","type":"BasicTickFormatter"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_25","CKV_K8S_16","CKV_K8S_13","CKV_K8S_30","CKV_K8S_9","DaemonSet.default","Deployment.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_25","CKV_K8S_16","CKV_K8S_13","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_30","CKV_K8S_9"],"start":["drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","drycc/cilium","CKV_K8S_19","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","Deployment.default","Deployment.default"]},"selected":{"id":"310345"},"selection_policy":{"id":"310344"}},"id":"310287","type":"ColumnDataSource"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"310341","type":"BoxAnnotation"},{"attributes":{},"id":"310264","type":"SaveTool"},{"attributes":{"data":{"description":["drycc/cilium",null,"Containers should not share the host network namespace","DaemonSet.cilium.default (container 1) - clean-cilium-state","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability"

View BlastRadius Graph

drycc-metallb

Bokeh Plot Bokeh.set_log_level("info"); {"3036568f-dca6-4812-8b91-6abda359abe2":{"defs":[],"roots":{"references":[{"attributes":{},"id":"313893","type":"BasicTickFormatter"},{"attributes":{"data_source":{"id":"313847"},"glyph":{"id":"313876"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"313849"}},"id":"313848","type":"GlyphRenderer"},{"attributes":{"graph_layout":{"CKV_K8S_10":[-0.19196591466067467,-0.010787558643639979],"CKV_K8S_11":[-0.20299238673460537,0.08173853461143599],"CKV_K8S_12":[-0.14564228537317067,-0.08503224979433925],"CKV_K8S_13":[-0.13153943490937037,0.1103299285232947],"CKV_K8S_15":[-0.1995389089671088,-0.0633187964256788],"CKV_K8S_19":[0.07581727990942093,0.10001781726685464],"CKV_K8S_2":[0.06389006239844669,-0.17708477268795922],"CKV_K8S_23":[0.04358355961170069,0.14377295062244275],"CKV_K8S_24":[0.11415511863874139,-0.1427094050716594],"CKV_K8S_25":[0.09127933223736157,0.046437133471804413],"CKV_K8S_29":[-0.06604040593344786,0.17619908314359822],"CKV_K8S_31":[-0.1263820016690926,-0.03236471475591683],"CKV_K8S_32":[0.029610135326564955,-0.2282405199372852],"CKV_K8S_35":[-0.006483494026071137,0.1660691038207681],"CKV_K8S_38":[-0.15212498833931262,0.04223646197052245],"CKV_K8S_4":[0.1649472980710868,-0.12535058965036022],"CKV_K8S_40":[0.06061341458422599,-0.010941248603463552],"CKV_K8S_43":[-0.17707874410968455,0.13219129892303033],"CKV_K8S_6":[-0.023511386250816817,-0.22365779806754743],"DaemonSet.default":[-0.06995274474774801,0.05829737556934393],"Deployment.default":[-0.2370902727607737,0.025485003143416923],"PodSecurityPolicy.default":[0.11936668787617952,-0.251842039198642],"deps":[1.0,0.2828686693640103],"drycc/metallb":[-0.03291992017185167,-0.014313667594030289]}},"id":"313854","type":"StaticLayoutProvider"},{"attributes":{},"id":"313809","type":"DataRange1d"},{"attributes":{},"id":"313828","type":"SaveTool"},{"attributes":{},"id":"313891","type":"AllLabels"},{"attributes":{},"id":"313822","type":"BasicTicker"},{"attributes":{},"id":"313890","type":"BasicTickFormatter"},{"attributes":{},"id":"313829","type":"ResetTool"},{"attributes":{},"id":"313825","type":"PanTool"},{"attributes":{},"id":"313818","type":"BasicTicker"},{"attributes":{"data":{"description":["drycc/metallb",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-metallb-controller.default (container 0) - controller","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Memory requests should be set","Image Pull Policy should be Always","CPU requests should be set","CPU limits should be set","Memory limits should be set","Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-metallb-speaker.default (container 0) - speaker","Containers should run as a high UID to avoid host conflict"

View BlastRadius Graph

dt-argo-chart

Bokeh Plot Bokeh.set_log_level("info"); {"d8debcf7-4cb4-4ec5-bebd-4e29352f5c3d":{"defs":[],"roots":{"references":[{"attributes":{"source":{"id":"328103"}},"id":"328105","type":"CDSView"},{"attributes":{},"id":"328084","type":"SaveTool"},{"attributes":{"source":{"id":"328107"}},"id":"328109","type":"CDSView"},{"attributes":{},"id":"328162","type":"UnionRenderers"},{"attributes":{"below":[{"id":"328073"}],"center":[{"id":"328076"},{"id":"328080"}],"height":768,"left":[{"id":"328077"}],"renderers":[{"id":"328101"},{"id":"328141"}],"title":{"id":"328063"},"toolbar":{"id":"328088"},"width":1024,"x_range":{"id":"328065"},"x_scale":{"id":"328069"},"y_range":{"id":"328067"},"y_scale":{"id":"328071"}},"id":"328062","subtype":"Figure","type":"Plot"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"328103"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"328141","type":"LabelSet"},{"attributes":{},"id":"328149","type":"BasicTickFormatter"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,9.1,7.5,7.5,7.5,7.4,7.4,5.9,5.9,5.9,5.5,null],"description":["dt/argo-chart",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-argocd-redis.default (container 0) - RELEASE-NAME-argocd-redis","Containers should run as a high UID to avoid host conflict","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability","Containers should not run with allowPrivilegeEscalation"

View BlastRadius Graph

dt-mukube-loadbalancer

Bokeh Plot Bokeh.set_log_level("info"); {"293727e1-0188-4404-a633-9096d04bebd5":{"defs":[],"roots":{"references":[{"attributes":{},"id":"332297","type":"ResetTool"},{"attributes":{},"id":"332374","type":"UnionRenderers"},{"attributes":{"axis":{"id":"332285"},"ticker":null},"id":"332288","type":"Grid"},{"attributes":{},"id":"332359","type":"AllLabels"},{"attributes":{"edge_renderer":{"id":"332320"},"inspection_policy":{"id":"332366"},"layout_provider":{"id":"332322"},"node_renderer":{"id":"332316"},"selection_policy":{"id":"332371"}},"id":"332313","type":"GraphRenderer"},{"attributes":{},"id":"332296","type":"SaveTool"},{"attributes":{},"id":"332318","type":"MultiLine"},{"attributes":{},"id":"332279","type":"DataRange1d"},{"attributes":{"graph_layout":{"CKV_K8S_10":[0.07491473424229063,0.02968209579677298],"CKV_K8S_12":[0.14299280981066734,0.1315229858558766],"CKV_K8S_15":[0.042081461868917217,-0.023165040558909906],"CKV_K8S_19":[-0.04600476285642613,0.15070919970603008],"CKV_K8S_2":[-0.09856743162558484,-0.12948342095574686],"CKV_K8S_23":[-0.0913788651858358,0.06435167374224225],"CKV_K8S_24":[-0.18245513814228617,-0.021590358874830767],"CKV_K8S_25":[-0.09545794760557681,0.16945391185280298],"CKV_K8S_28":[0.10789807280369011,-0.10115343972868275],"CKV_K8S_29":[-0.11128350049862486,0.11513906905106058],"CKV_K8S_31":[0.16655653750964533,0.09294827321471097],"CKV_K8S_32":[-0.16611289161407092,-0.06568564339599074],"CKV_K8S_35":[-0.039495260930962874,0.20720633534506266],"CKV_K8S_37":[0.16769128479964351,-0.06935145822781832],"CKV_K8S_38":[0.1500194244082039,0.052831710788734595],"CKV_K8S_39":[0.06916912861374264,0.20399992426312],"CKV_K8S_4":[-0.11475079547727822,-0.0777383426972891],"CKV_K8S_40":[0.014684892611556212,0.21065376986663034],"CKV_K8S_43":[0.10261756830397374,0.07822390360831133],"CKV_K8S_6":[-0.05415556277129767,-0.1420169582681155],"CKV_K8S_8":[0.09227791049888906,-0.01971559540692862],"CKV_K8S_9":[0.09946728593123384,0.12924937072848586],"DaemonSet.default":[0.03157508417339316,0.11012102632163538],"Deployment.default":[0.1519289055766707,0.01090384903223499],"PodSecurityPolicy.default":[-0.1777581776094878,-0.1457236151583387],"deps":[-0.23824973473880048,-1.0],"dt/mukube-loadbalancer":[0.001794967903715398,0.03862677409893991]}},"id":"332322","type":"StaticLayoutProvider"},{"attributes":{"formatter":{"id":"332361"},"major_label_policy":{"id":"332359"},"ticker":{"id":"332290"}},"id":"332289","type":"LinearAxis"},{"attributes":{"overlay":{"id":"332373"}},"id":"332309","type":"BoxSelectTool"},{"attributes":{},"id":"332294","type":"WheelZoomTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"332373","type":"BoxAnnotation"},{"attributes":{},"id":"332361","type":"BasicTickFormatter"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"332343"}},"size":{"value":20}},"id":"332344","type":"Circle"},{"attributes":{},"id":"332286","type":"BasicTicker"},{"attributes":{},"id":"332358","type":"BasicTickFormatter"},{"attributes":{"data_source":{"id":"332315"},"glyph":{"id":"332344"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"332317"}},"id":"332316","type":"GlyphRenderer"},{"attributes":{"source":{"id":"332315"}},"id":"332317","type":"CDSView"},{"attributes":{},"id":"332375","type":"Selection"},{"attributes":{"data":{"end":["CKV_K8S_32","CKV_K8S_6","CKV_K8S_24","CKV_K8S_2","CKV_K8S_4","CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_35","CKV_K8S_12","CKV_K8S_15","CKV_K8S_10","CKV_K8S_25","CKV_K8S_39","CKV_K8S_8","CKV_K8S_9","CKV_K8S_28","CKV_K8S_37","PodSecurityPolicy.default","CKV_K8S_6","CKV_K8S_24","CKV_K8S_2","CKV_K8S_4","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_35","CKV_K8S_12","CKV_K8S_15","CKV_K8S_10","CKV_K8S_25","CKV_K8S_39","CKV_K8S_8","CKV_K8S_9","Deployment.default","Deployment.default","CKV_K8S_43","CKV_K8S_28","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_8","CKV_K8S_9"],"start":["dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","dt/mukube-loadbalancer","CKV_K8S_32","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","PodSecurityPolicy.default","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_38","CKV_K8S_31","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default"]},"selected":{"id":"332377"},"selection_policy":{"id":"332376"}},"id":"332319","type":"ColumnDataSource"},{"attributes":{"below":[{"id":"332285"}],"center":[{"id":"332288"},{"id":"332292"}],"height":768,"left":[{"id":"332289"}],"renderers":[{"id":"332313"},{"id":"332353"}],"title":{"id":"332275"},"toolbar":{"id":"332300"},"width":1024,"x_range":{"id":"332277"},"x_scale":{"id":"332281"},"y_range":{"id":"332279"},"y_scale":{"id":"332283"}},"id":"332274","subtype":"Figure","type":"Plot"},{"attributes":{"axis":{"id":"332289"},"dimension":1,"ticker":null},"id":"332292","type":"Grid"},{"attributes":{"formatter":{"id":"332358"},"major_label_policy":{"id":"332356"},"ticker":{"id":"332286"}},"id":"332285","type":"LinearAxis"},{"attributes":{},"id":"332356","type":"AllLabels"},{"attributes":{"data_source":{"id":"332319"},"glyph":{"id":"332318"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"332321"}},"id":"332320","type":"GlyphRenderer"},{"attributes":{"active_multi":null,"tools":[{"id":"332293"},{"id":"332294"},{"id":"332295"},{"id":"332296"},{"id":"332297"},{"id":"332298"},{"id":"332307"},{"id":"332308"},{"id":"332309"}]},"id":"332300","type":"Toolbar"},{"attributes":{},"id":"332290","type":"BasicTicker"},{"attributes":{},"id":"332376","type":"UnionRenderers"},{"attributes":{"overlay":{"id":"332299"}},"id":"332295","type":"BoxZoomTool"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"332315"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"332353","type":"LabelSet"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"332299","type":"BoxAnnotation"},{"attributes":{},"id":"332377","type":"Selection"},{"attributes":{"data":{"description":["dt/mukube-loadbalancer",null,"Ensure default seccomp profile set to docker/default or runtime/default","PodSecurityPolicy.speaker","Do not admit root containers","Do not allow containers with added capability","Do not admit privileged containers","Do not admit containers wishing to share the host network namespace","Containers should not share the host network namespace","DaemonSet.speaker.default (container 0) - speaker","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict"

View BlastRadius Graph

dt-nidhogg

Bokeh Plot Bokeh.set_log_level("info"); {"635af16f-e561-489a-a969-7bb55532eb06":{"defs":[],"roots":{"references":[{"attributes":{"text":"dt-nidhogg"},"id":"332599","type":"Title"},{"attributes":{},"id":"332690","type":"NodesOnly"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"332667"}},"size":{"value":20}},"id":"332668","type":"Circle"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"332631","type":"HoverTool"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"332667","type":"CategoricalColorMapper"},{"attributes":{"overlay":{"id":"332697"}},"id":"332633","type":"BoxSelectTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"332623","type":"BoxAnnotation"},{"attributes":{"source":{"id":"332643"}},"id":"332645","type":"CDSView"},{"attributes":{},"id":"332698","type":"UnionRenderers"},{"attributes":{},"id":"332680","type":"AllLabels"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"332639"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"332677","type":"LabelSet"},{"attributes":{},"id":"332617","type":"PanTool"},{"attributes":{"data_source":{"id":"332643"},"glyph":{"id":"332642"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"332645"}},"id":"332644","type":"GlyphRenderer"},{"attributes":{},"id":"332699","type":"Selection"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,7.7,7.5,9.1,8.1,7.5,7.5,6.5,5.9,5.9,5.9,5.5,8.8,7.5,7.5,7.5,7.5,7.5,7.1,7,6.5,6.5,6.5,6.5,5.9,5.9,5.5,5.5,null,9.8,9.1,7.4,null],"description":["dt/nidhogg",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-argocd-redis.default (container 0) - RELEASE-NAME-argocd-redis","Containers should run as a high UID to avoid host conflict","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability","Containers should not run with allowPrivilegeEscalation"

View BlastRadius Graph

dt-services-haproxy

Bokeh Plot Bokeh.set_log_level("info"); {"23b36bf9-af47-486f-9691-1099c31c2d49":{"defs":[],"roots":{"references":[{"attributes":{},"id":"333573","type":"DataRange1d"},{"attributes":{},"id":"333672","type":"UnionRenderers"},{"attributes":{},"id":"333614","type":"MultiLine"},{"attributes":{"formatter":{"id":"333657"},"major_label_policy":{"id":"333655"},"ticker":{"id":"333586"}},"id":"333585","type":"LinearAxis"},{"attributes":{},"id":"333662","type":"NodesOnly"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"333669","type":"BoxAnnotation"},{"attributes":{"data_source":{"id":"333611"},"glyph":{"id":"333640"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"333613"}},"id":"333612","type":"GlyphRenderer"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_9","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_9"],"start":["dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","dt/services-haproxy","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default"]},"selected":{"id":"333673"},"selection_policy":{"id":"333672"}},"id":"333615","type":"ColumnDataSource"},{"attributes":{},"id":"333667","type":"NodesOnly"},{"attributes":{},"id":"333579","type":"LinearScale"},{"attributes":{"source":{"id":"333611"}},"id":"333613","type":"CDSView"},{"attributes":{"edge_renderer":{"id":"333616"},"inspection_policy":{"id":"333662"},"layout_provider":{"id":"333618"},"node_renderer":{"id":"333612"},"selection_policy":{"id":"333667"}},"id":"333609","type":"GraphRenderer"},{"attributes":{},"id":"333654","type":"BasicTickFormatter"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"333639","type":"CategoricalColorMapper"},{"attributes":{"callback":null},"id":"333604","type":"TapTool"},{"attributes":{"overlay":{"id":"333669"}},"id":"333605","type":"BoxSelectTool"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"333611"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"333649","type":"LabelSet"},{"attributes":{"data":{"description":["dt/services-haproxy",null,"Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-services-haproxy.default (container 0) - services-haproxy","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers"

View BlastRadius Graph

edu-metallb

Bokeh Plot Bokeh.set_log_level("info"); {"909f176d-5256-4acb-b1d6-d892d9e50dd9":{"defs":[],"roots":{"references":[{"attributes":{"callback":null},"id":"348508","type":"TapTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"348499","type":"BoxAnnotation"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"348543"}},"size":{"value":20}},"id":"348544","type":"Circle"},{"attributes":{"axis":{"id":"348485"},"ticker":null},"id":"348488","type":"Grid"},{"attributes":{},"id":"348498","type":"HelpTool"},{"attributes":{"active_multi":null,"tools":[{"id":"348493"},{"id":"348494"},{"id":"348495"},{"id":"348496"},{"id":"348497"},{"id":"348498"},{"id":"348507"},{"id":"348508"},{"id":"348509"}]},"id":"348500","type":"Toolbar"},{"attributes":{},"id":"348493","type":"PanTool"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,9.1,7.5,7.5,7.5,7.5,7.4,7.4,5.9,5.9,5.9,5.5,5.3],"description":["edu/metallb",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.controller.default (container 0) - controller","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Minimize the admission of containers with the NET_RAW capability","Memory requests should be set","Minimize the admission of containers with capabilities assigned","Image Pull Policy should be Always","CPU requests should be set","Liveness Probe Should be Configured","Readiness Probe Should be Configured"

View BlastRadius Graph

edu-prometheus

Bokeh Plot Bokeh.set_log_level("info"); {"46d2de0f-0130-4000-abb4-88e97c3897be":{"defs":[],"roots":{"references":[{"attributes":{},"id":"349773","type":"DataRange1d"},{"attributes":{},"id":"349872","type":"UnionRenderers"},{"attributes":{"data_source":{"id":"349815"},"glyph":{"id":"349814"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"349817"}},"id":"349816","type":"GlyphRenderer"},{"attributes":{"formatter":{"id":"349857"},"major_label_policy":{"id":"349855"},"ticker":{"id":"349786"}},"id":"349785","type":"LinearAxis"},{"attributes":{},"id":"349871","type":"Selection"},{"attributes":{},"id":"349775","type":"DataRange1d"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"349839"}},"size":{"value":20}},"id":"349840","type":"Circle"},{"attributes":{},"id":"349867","type":"NodesOnly"},{"attributes":{},"id":"349782","type":"BasicTicker"},{"attributes":{},"id":"349794","type":"HelpTool"},{"attributes":{},"id":"349854","type":"BasicTickFormatter"},{"attributes":{},"id":"349873","type":"Selection"},{"attributes":{"source":{"id":"349811"}},"id":"349813","type":"CDSView"},{"attributes":{},"id":"349789","type":"PanTool"},{"attributes":{},"id":"349855","type":"AllLabels"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"349839","type":"CategoricalColorMapper"},{"attributes":{},"id":"349793","type":"ResetTool"},{"attributes":{},"id":"349777","type":"LinearScale"},{"attributes":{"data":{"color":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"red",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null],"end":["CKV_K8S_38","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_19","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_17","CKV_K8S_26","prometheus","Deployment.default","DaemonSet.default","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","quay.io/coreos/kube-state-metrics:v1.9.7","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_17","CKV_K8S_26","CVE-2020-26160"],"start":["edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","edu/prometheus","deps","CKV_K8S_38","CKV_K8S_38","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_31","CKV_K8S_43","CKV_K8S_30","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_12","CKV_K8S_37","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_8","CKV_K8S_9","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","quay.io/coreos/kube-state-metrics:v1.9.7"]},"selected":{"id":"349873"},"selection_policy":{"id":"349872"}},"id":"349815","type":"ColumnDataSource"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"349811"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"349849","type":"LabelSet"},{"attributes":{},"id":"349870","type":"UnionRenderers"},{"attributes":{},"id":"349814","type":"MultiLine"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"349803","type":"HoverTool"},{"attributes":{"below":[{"id":"349781"}],"center":[{"id":"349784"},{"id":"349788"}],"height":768,"left":[{"id":"349785"}],"renderers":[{"id":"349809"},{"id":"349849"}],"title":{"id":"349771"},"toolbar":{"id":"349796"},"width":1024,"x_range":{"id":"349773"},"x_scale":{"id":"349777"},"y_range":{"id":"349775"},"y_scale":{"id":"349779"}},"id":"349770","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"349779","type":"LinearScale"},{"attributes":{},"id":"349792","type":"SaveTool"},{"attributes":{"axis":{"id":"349781"},"ticker":null},"id":"349784","type":"Grid"},{"attributes":{},"id":"349852","type":"AllLabels"},{"attributes":{"text":"edu-prometheus"},"id":"349771","type":"Title"},{"attributes":{"active_multi":null,"tools":[{"id":"349789"},{"id":"349790"},{"id":"349791"},{"id":"349792"},{"id":"349793"},{"id":"349794"},{"id":"349803"},{"id":"349804"},{"id":"349805"}]},"id":"349796","type":"Toolbar"},{"attributes":{"formatter":{"id":"349854"},"major_label_policy":{"id":"349852"},"ticker":{"id":"349782"}},"id":"349781","type":"LinearAxis"},{"attributes":{"graph_layout":{"CKV_K8S_10":[-0.12852835905144439,-0.09438208735730275],"CKV_K8S_11":[0.024376799084203763,0.021861781313552],"CKV_K8S_12":[-0.053544631621773434,0.10623974106256359],"CKV_K8S_13":[-0.1458342369786395,-0.05666726580020642],"CKV_K8S_15":[-0.17001673218374752,0.009596362176443891],"CKV_K8S_17":[0.05832397868936067,-0.12203921113227757],"CKV_K8S_19":[0.09774971385275541,-0.00181599526444308],"CKV_K8S_20":[-0.007654143203343795,0.0894001041299412],"CKV_K8S_22":[-0.09423539875879856,0.09195902790973955],"CKV_K8S_23":[0.011357481046034878,-0.15797704006981286],"CKV_K8S_26":[0.08908100068064219,-0.07037161259423572],"CKV_K8S_28":[0.02621847003197014,0.06187524748235679],"CKV_K8S_29":[-0.12820098144928163,-0.14966013432976832],"CKV_K8S_30":[-0.04551450967069944,0.059202788398556416],"CKV_K8S_31":[-0.07640178773098816,-0.10843552271430863],"CKV_K8S_37":[-0.13078348762554567,0.07882149747462912],"CKV_K8S_38":[-0.17939094277745127,-0.03510975259632038],"CKV_K8S_40":[-0.05144388116824631,-0.17148683555098043],"CKV_K8S_43":[0.028585479178303664,-0.02999863371416622],"CKV_K8S_8":[-0.15766804285449598,0.04873724044795514],"CKV_K8S_9":[-0.014328495271395307,-0.09206421039308975],"CVE-2020-26160":[-0.43810165153020414,-0.155452329200237],"DaemonSet.default":[-0.04754889478886984,-0.020275456023498013],"Deployment.default":[-0.09916751865965634,0.002780557065744889],"deps":[1.0,0.4389899258418525],"edu/prometheus":[-0.04567595123537332,-0.03256390709570718],"prometheus":[0.9872375426325352,0.36808058982444397],"quay.io/coreos/kube-state-metrics:v1.9.7":[-0.30889081863585044,-0.0792448692914254]}},"id":"349818","type":"StaticLayoutProvider"},{"attributes":{"data_source":{"id":"349811"},"glyph":{"id":"349840"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"349813"}},"id":"349812","type":"GlyphRenderer"},{"attributes":{"edge_renderer":{"id":"349816"},"inspection_policy":{"id":"349862"},"layout_provider":{"id":"349818"},"node_renderer":{"id":"349812"},"selection_policy":{"id":"349867"}},"id":"349809","type":"GraphRenderer"},{"attributes":{"axis":{"id":"349785"},"dimension":1,"ticker":null},"id":"349788","type":"Grid"},{"attributes":{"callback":null},"id":"349804","type":"TapTool"},{"attributes":{"overlay":{"id":"349869"}},"id":"349805","type":"BoxSelectTool"},{"attributes":{},"id":"349857","type":"BasicTickFormatter"},{"attributes":{},"id":"349862","type":"NodesOnly"},{"attributes":{},"id":"349786","type":"BasicTicker"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,7.7,null],"description":["edu/prometheus",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-kube-state-metrics.default (container 0) - kube-state-metrics","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability","Containers should not run with allowPrivilegeEscalation","Memory requests should be set","Minimize the admission of containers with capabilities assigned"

View BlastRadius Graph

eginnovations-egagent

Bokeh Plot Bokeh.set_log_level("info"); {"5822ec72-c3c0-4868-bf0c-e953a8a63e2a":{"defs":[],"roots":{"references":[{"attributes":{},"id":"350437","type":"PanTool"},{"attributes":{"source":{"id":"350463"}},"id":"350465","type":"CDSView"},{"attributes":{"text":"eginnovations-egagent"},"id":"350419","type":"Title"},{"attributes":{"formatter":{"id":"350505"},"major_label_policy":{"id":"350503"},"ticker":{"id":"350434"}},"id":"350433","type":"LinearAxis"},{"attributes":{},"id":"350441","type":"ResetTool"},{"attributes":{},"id":"350520","type":"UnionRenderers"},{"attributes":{},"id":"350521","type":"Selection"},{"attributes":{"callback":null},"id":"350452","type":"TapTool"},{"attributes":{},"id":"350503","type":"AllLabels"},{"attributes":{"data_source":{"id":"350463"},"glyph":{"id":"350462"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"350465"}},"id":"350464","type":"GlyphRenderer"},{"attributes":{"formatter":{"id":"350502"},"major_label_policy":{"id":"350500"},"ticker":{"id":"350430"}},"id":"350429","type":"LinearAxis"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"350517","type":"BoxAnnotation"},{"attributes":{"axis":{"id":"350433"},"dimension":1,"ticker":null},"id":"350436","type":"Grid"},{"attributes":{"axis":{"id":"350429"},"ticker":null},"id":"350432","type":"Grid"},{"attributes":{"edge_renderer":{"id":"350464"},"inspection_policy":{"id":"350510"},"layout_provider":{"id":"350466"},"node_renderer":{"id":"350460"},"selection_policy":{"id":"350515"}},"id":"350457","type":"GraphRenderer"},{"attributes":{},"id":"350421","type":"DataRange1d"},{"attributes":{"source":{"id":"350459"}},"id":"350461","type":"CDSView"},{"attributes":{},"id":"350462","type":"MultiLine"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,9.8,7.5,5.5,9.8,8.1,7.5,7.5,6.5,5.9,5.9,5.9,9.8,9.8,8.1,7.8,7.5,7.5,7.5,7.5,6.5,6.5,6.1,5.9,5.9,5.5,5.5],"description":["eginnovations/egagent",null,"Containers should not share the host network namespace","DaemonSet.egagent.egagent (container 0) - egagent","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Containers should not share the host IPC namespace","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Containers should not share the host process ID namespace"

View BlastRadius Graph

enix-kube-router

Bokeh Plot Bokeh.set_log_level("info"); {"7429a3b0-27ca-4494-a699-6c9acc2d818e":{"defs":[],"roots":{"references":[{"attributes":{},"id":"354653","type":"ResetTool"},{"attributes":{},"id":"354733","type":"Selection"},{"attributes":{"formatter":{"id":"354714"},"major_label_policy":{"id":"354712"},"ticker":{"id":"354642"}},"id":"354641","type":"LinearAxis"},{"attributes":{},"id":"354654","type":"HelpTool"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"354663","type":"HoverTool"},{"attributes":{},"id":"354715","type":"AllLabels"},{"attributes":{"data_source":{"id":"354675"},"glyph":{"id":"354674"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"354677"}},"id":"354676","type":"GlyphRenderer"},{"attributes":{},"id":"354649","type":"PanTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"354729","type":"BoxAnnotation"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"354699"}},"size":{"value":20}},"id":"354700","type":"Circle"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"354655","type":"BoxAnnotation"},{"attributes":{"edge_renderer":{"id":"354676"},"inspection_policy":{"id":"354722"},"layout_provider":{"id":"354678"},"node_renderer":{"id":"354672"},"selection_policy":{"id":"354727"}},"id":"354669","type":"GraphRenderer"},{"attributes":{},"id":"354717","type":"BasicTickFormatter"},{"attributes":{},"id":"354637","type":"LinearScale"},{"attributes":{"axis":{"id":"354641"},"ticker":null},"id":"354644","type":"Grid"},{"attributes":{},"id":"354646","type":"BasicTicker"},{"attributes":{},"id":"354652","type":"SaveTool"},{"attributes":{"axis":{"id":"354645"},"dimension":1,"ticker":null},"id":"354648","type":"Grid"},{"attributes":{"active_multi":null,"tools":[{"id":"354649"},{"id":"354650"},{"id":"354651"},{"id":"354652"},{"id":"354653"},{"id":"354654"},{"id":"354663"},{"id":"354664"},{"id":"354665"}]},"id":"354656","type":"Toolbar"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_37","CKV_K8S_15","CKV_K8S_16","CKV_K8S_30","CKV_K8S_12","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_43","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_37","CKV_K8S_15","CKV_K8S_16","CKV_K8S_30","CKV_K8S_12","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13"],"start":["enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","enix/kube-router","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default"]},"selected":{"id":"354733"},"selection_policy":{"id":"354732"}},"id":"354675","type":"ColumnDataSource"},{"attributes":{"data_source":{"id":"354671"},"glyph":{"id":"354700"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"354673"}},"id":"354672","type":"GlyphRenderer"},{"attributes":{},"id":"354650","type":"WheelZoomTool"},{"attributes":{},"id":"354732","type":"UnionRenderers"},{"attributes":{"formatter":{"id":"354717"},"major_label_policy":{"id":"354715"},"ticker":{"id":"354646"}},"id":"354645","type":"LinearAxis"},{"attributes":{},"id":"354642","type":"BasicTicker"},{"attributes":{},"id":"354727","type":"NodesOnly"},{"attributes":{},"id":"354674","type":"MultiLine"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"354671"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"354709","type":"LabelSet"},{"attributes":{},"id":"354731","type":"Selection"},{"attributes":{"below":[{"id":"354641"}],"center":[{"id":"354644"},{"id":"354648"}],"height":768,"left":[{"id":"354645"}],"renderers":[{"id":"354669"},{"id":"354709"}],"title":{"id":"354631"},"toolbar":{"id":"354656"},"width":1024,"x_range":{"id":"354633"},"x_scale":{"id":"354637"},"y_range":{"id":"354635"},"y_scale":{"id":"354639"}},"id":"354630","subtype":"Figure","type":"Plot"},{"attributes":{},"id":"354712","type":"AllLabels"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"354699","type":"CategoricalColorMapper"},{"attributes":{"source":{"id":"354675"}},"id":"354677","type":"CDSView"},{"attributes":{"source":{"id":"354671"}},"id":"354673","type":"CDSView"},{"attributes":{},"id":"354639","type":"LinearScale"},{"attributes":{},"id":"354730","type":"UnionRenderers"},{"attributes":{},"id":"354635","type":"DataRange1d"},{"attributes":{"overlay":{"id":"354729"}},"id":"354665","type":"BoxSelectTool"},{"attributes":{},"id":"354714","type":"BasicTickFormatter"},{"attributes":{"graph_layout":{"CKV_K8S_10":[-0.12807176043562837,-0.052832021746264606],"CKV_K8S_11":[0.0957540668484241,-0.03329962064624372],"CKV_K8S_12":[-0.1316629266881276,0.0409143168404883],"CKV_K8S_13":[0.1345656415626145,0.0789590726007451],"CKV_K8S_15":[-0.09109804209244533,0.14309093172918846],"CKV_K8S_16":[-0.1502374872268792,0.1427962544319236],"CKV_K8S_19":[-0.17971376256019878,0.07897489064156908],"CKV_K8S_20":[-0.08227902682840055,-0.0862913321707139],"CKV_K8S_22":[0.04358876345890522,0.1883385028327936],"CKV_K8S_23":[0.0626604407001693,-0.086554863770514],"CKV_K8S_28":[-0.013674433378070117,0.19061280615034715],"CKV_K8S_29":[-0.0235464382232535,-0.10888744287170872],"CKV_K8S_30":[0.07250001092183582,0.09813504686033389],"CKV_K8S_31":[-0.07448852439021332,0.20184038096402085],"CKV_K8S_37":[0.007627321949737564,-0.05644201428309268],"CKV_K8S_38":[0.09905125139517873,0.15366777093019796],"CKV_K8S_40":[0.12477539773976913,0.016205184415422885],"CKV_K8S_43":[-0.17021403533243407,-0.007751937764659559],"DaemonSet.default":[-0.027654327317936093,0.056488951892591434],"deps":[0.4495458730450186,-1.0],"enix/kube-router":[-0.01742800314806659,0.042035122963575075]}},"id":"354678","type":"StaticLayoutProvider"},{"attributes":{"overlay":{"id":"354655"}},"id":"354651","type":"BoxZoomTool"},{"attributes":{},"id":"354722","type":"NodesOnly"},{"attributes":{"data":{"description":["enix/kube-router",null,"Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-kube-router.default (container 0) - configure-cni","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Use read-only filesystem for containers where possible"

View BlastRadius Graph

fairwinds-stable-aws-iam-authenticator

Bokeh Plot Bokeh.set_log_level("info"); {"29da7fa5-ce92-42f3-be1b-07eb0d6bf671":{"defs":[],"roots":{"references":[{"attributes":{"overlay":{"id":"371827"}},"id":"371823","type":"BoxZoomTool"},{"attributes":{},"id":"371805","type":"DataRange1d"},{"attributes":{},"id":"371807","type":"DataRange1d"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"371901","type":"BoxAnnotation"},{"attributes":{},"id":"371809","type":"LinearScale"},{"attributes":{"source":{"id":"371843"}},"id":"371845","type":"CDSView"},{"attributes":{},"id":"371894","type":"NodesOnly"},{"attributes":{"text":"fairwinds-stable-aws-iam-authenticator"},"id":"371803","type":"Title"},{"attributes":{},"id":"371822","type":"WheelZoomTool"},{"attributes":{"source":{"id":"371847"}},"id":"371849","type":"CDSView"},{"attributes":{},"id":"371818","type":"BasicTicker"},{"attributes":{},"id":"371846","type":"MultiLine"},{"attributes":{},"id":"371814","type":"BasicTicker"},{"attributes":{"formatter":{"id":"371886"},"major_label_policy":{"id":"371884"},"ticker":{"id":"371814"}},"id":"371813","type":"LinearAxis"},{"attributes":{"edge_renderer":{"id":"371848"},"inspection_policy":{"id":"371894"},"layout_provider":{"id":"371850"},"node_renderer":{"id":"371844"},"selection_policy":{"id":"371899"}},"id":"371841","type":"GraphRenderer"},{"attributes":{"callback":null},"id":"371836","type":"TapTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"371827","type":"BoxAnnotation"},{"attributes":{"below":[{"id":"371813"}],"center":[{"id":"371816"},{"id":"371820"}],"height":768,"left":[{"id":"371817"}],"renderers":[{"id":"371841"},{"id":"371881"}],"title":{"id":"371803"},"toolbar":{"id":"371828"},"width":1024,"x_range":{"id":"371805"},"x_scale":{"id":"371809"},"y_range":{"id":"371807"},"y_scale":{"id":"371811"}},"id":"371802","subtype":"Figure","type":"Plot"},{"attributes":{"data_source":{"id":"371843"},"glyph":{"id":"371872"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"371845"}},"id":"371844","type":"GlyphRenderer"},{"attributes":{},"id":"371904","type":"UnionRenderers"},{"attributes":{},"id":"371887","type":"AllLabels"},{"attributes":{},"id":"371905","type":"Selection"},{"attributes":{},"id":"371903","type":"Selection"},{"attributes":{"axis":{"id":"371813"},"ticker":null},"id":"371816","type":"Grid"},{"attributes":{},"id":"371826","type":"HelpTool"},{"attributes":{"axis":{"id":"371817"},"dimension":1,"ticker":null},"id":"371820","type":"Grid"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"371843"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"371881","type":"LabelSet"},{"attributes":{},"id":"371886","type":"BasicTickFormatter"},{"attributes":{"overlay":{"id":"371901"}},"id":"371837","type":"BoxSelectTool"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"371871"}},"size":{"value":20}},"id":"371872","type":"Circle"},{"attributes":{},"id":"371902","type":"UnionRenderers"},{"attributes":{"active_multi":null,"tools":[{"id":"371821"},{"id":"371822"},{"id":"371823"},{"id":"371824"},{"id":"371825"},{"id":"371826"},{"id":"371835"},{"id":"371836"},{"id":"371837"}]},"id":"371828","type":"Toolbar"},{"attributes":{},"id":"371825","type":"ResetTool"},{"attributes":{"graph_layout":{"CKV_K8S_15":[0.18317576499514576,0.05902108681948191],"CKV_K8S_19":[-0.08275728942693669,0.12899932795450267],"CKV_K8S_20":[-0.06461726646718535,-0.08646841446837895],"CKV_K8S_22":[0.0663305619420746,0.21672230943629864],"CKV_K8S_23":[-0.14443388579209268,0.03232251878877907],"CKV_K8S_28":[0.18154219072910133,-0.015324460426145017],"CKV_K8S_29":[0.004292638032734563,-0.10881234529787286],"CKV_K8S_30":[-0.15356767237951405,0.11587862343844435],"CKV_K8S_31":[-0.12045703169880558,-0.03876539510657929],"CKV_K8S_37":[0.11867044819591736,-0.04974501893910044],"CKV_K8S_38":[-0.0041301205074504,0.22230391465186747],"CKV_K8S_40":[0.12933400300980233,0.18454172932646548],"CKV_K8S_43":[0.175368824912366,0.12973688270186778],"CKV_K8S_8":[0.08105683652914136,-0.1102088238121474],"CKV_K8S_9":[-0.07950954474563751,0.2052692187946603],"DaemonSet.default":[0.029570832774080378,0.0640213702487892],"deps":[-0.32980851913527437,-1.0],"fairwinds-stable/aws-iam-authenticator":[0.009939229032532994,0.05050747588906675]}},"id":"371850","type":"StaticLayoutProvider"},{"attributes":{},"id":"371884","type":"AllLabels"},{"attributes":{},"id":"371821","type":"PanTool"},{"attributes":{"data_source":{"id":"371847"},"glyph":{"id":"371846"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"371849"}},"id":"371848","type":"GlyphRenderer"},{"attributes":{},"id":"371889","type":"BasicTickFormatter"},{"attributes":{},"id":"371899","type":"NodesOnly"},{"attributes":{},"id":"371811","type":"LinearScale"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"371835","type":"HoverTool"},{"attributes":{"data":{"description":["fairwinds-stable/aws-iam-authenticator",null,"Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-aws-iam-authenticator.default (container 0) - aws-iam-authenticator","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers"

View BlastRadius Graph

fairwinds-stable-gke-node-termination-handler

Bokeh Plot Bokeh.set_log_level("info"); {"db21bc0a-d1c9-4050-ae4c-e84ee4626063":{"defs":[],"roots":{"references":[{"attributes":{},"id":"372472","type":"SaveTool"},{"attributes":{"data_source":{"id":"372491"},"glyph":{"id":"372520"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"372493"}},"id":"372492","type":"GlyphRenderer"},{"attributes":{},"id":"372453","type":"DataRange1d"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"372549","type":"BoxAnnotation"},{"attributes":{},"id":"372473","type":"ResetTool"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"372491"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"372529","type":"LabelSet"},{"attributes":{"source":{"id":"372495"}},"id":"372497","type":"CDSView"},{"attributes":{"text":"fairwinds-stable-gke-node-termination-handler"},"id":"372451","type":"Title"},{"attributes":{"active_multi":null,"tools":[{"id":"372469"},{"id":"372470"},{"id":"372471"},{"id":"372472"},{"id":"372473"},{"id":"372474"},{"id":"372483"},{"id":"372484"},{"id":"372485"}]},"id":"372476","type":"Toolbar"},{"attributes":{},"id":"372532","type":"AllLabels"},{"attributes":{"graph_layout":{"CKV_K8S_17":[-0.03186853039868309,0.12358657998548286],"CKV_K8S_19":[-0.005663503522681009,-0.21778351277987856],"CKV_K8S_20":[0.23398853172536124,0.002933888325610204],"CKV_K8S_22":[0.21019365625787517,0.08427072685689095],"CKV_K8S_23":[-0.11238601604311853,-0.09915211402413063],"CKV_K8S_25":[0.0769694647148927,-0.24499083842951586],"CKV_K8S_28":[0.1466117805345656,-0.1982135241613155],"CKV_K8S_29":[-0.08978713757757062,0.060352266918739815],"CKV_K8S_31":[0.13575108101661945,0.12892191237109338],"CKV_K8S_37":[0.22122889999726744,-0.16148526634958996],"CKV_K8S_38":[-0.13042485217914235,-0.016375946387080356],"CKV_K8S_40":[0.051736995458746535,0.1431971382397888],"CKV_K8S_8":[-0.08312921581527304,-0.18052579374360622],"CKV_K8S_9":[0.2529889806305125,-0.07959863820474436],"DaemonSet.default":[0.07417419492621312,-0.03740045196069986],"deps":[-1.0,0.7442786352473875],"fairwinds-stable/gke-node-termination-handler":[0.04961567027441459,-0.05201506190443255]}},"id":"372498","type":"StaticLayoutProvider"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"372475","type":"BoxAnnotation"},{"attributes":{"source":{"id":"372491"}},"id":"372493","type":"CDSView"},{"attributes":{"axis":{"id":"372461"},"ticker":null},"id":"372464","type":"Grid"},{"attributes":{},"id":"372550","type":"UnionRenderers"},{"attributes":{},"id":"372542","type":"NodesOnly"},{"attributes":{"axis":{"id":"372465"},"dimension":1,"ticker":null},"id":"372468","type":"Grid"},{"attributes":{"data_source":{"id":"372495"},"glyph":{"id":"372494"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"372497"}},"id":"372496","type":"GlyphRenderer"},{"attributes":{"edge_renderer":{"id":"372496"},"inspection_policy":{"id":"372542"},"layout_provider":{"id":"372498"},"node_renderer":{"id":"372492"},"selection_policy":{"id":"372547"}},"id":"372489","type":"GraphRenderer"},{"attributes":{"formatter":{"id":"372537"},"major_label_policy":{"id":"372535"},"ticker":{"id":"372466"}},"id":"372465","type":"LinearAxis"},{"attributes":{},"id":"372469","type":"PanTool"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"372483","type":"HoverTool"},{"attributes":{"overlay":{"id":"372549"}},"id":"372485","type":"BoxSelectTool"},{"attributes":{},"id":"372470","type":"WheelZoomTool"},{"attributes":{},"id":"372494","type":"MultiLine"},{"attributes":{},"id":"372466","type":"BasicTicker"},{"attributes":{},"id":"372537","type":"BasicTickFormatter"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"372519"}},"size":{"value":20}},"id":"372520","type":"Circle"},{"attributes":{"overlay":{"id":"372475"}},"id":"372471","type":"BoxZoomTool"},{"attributes":{},"id":"372547","type":"NodesOnly"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"372519","type":"CategoricalColorMapper"},{"attributes":{},"id":"372457","type":"LinearScale"},{"attributes":{},"id":"372455","type":"DataRange1d"},{"attributes":{},"id":"372462","type":"BasicTicker"},{"attributes":{},"id":"372534","type":"BasicTickFormatter"},{"attributes":{},"id":"372553","type":"Selection"},{"attributes":{"data":{"end":["CKV_K8S_19","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_17","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_37","CKV_K8S_25","CKV_K8S_8","CKV_K8S_9","DaemonSet.default","CKV_K8S_38","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_31","CKV_K8S_17","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_37","CKV_K8S_25","CKV_K8S_8","CKV_K8S_9"],"start":["fairwinds-stable/gke-node-termination-handler","fairwinds-stable/gke-node-termination-handler","fairwinds-stable/gke-node-termination-handler","fairwinds-stable/gke-node-termination-handler","fairwinds-stable/gke-node-termination-handler","fairwinds-stable/gke-node-termination-handler","fairwinds-stable/gke-node-termination-handler","fairwinds-stable/gke-node-termination-handler","fairwinds-stable/gke-node-termination-handler","fairwinds-stable/gke-node-termination-handler","fairwinds-stable/gke-node-termination-handler","fairwinds-stable/gke-node-termination-handler","fairwinds-stable/gke-node-termination-handler","fairwinds-stable/gke-node-termination-handler","CKV_K8S_19","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default"]},"selected":{"id":"372553"},"selection_policy":{"id":"372552"}},"id":"372495","type":"ColumnDataSource"},{"attributes":{"formatter":{"id":"372534"},"major_label_policy":{"id":"372532"},"ticker":{"id":"372462"}},"id":"372461","type":"LinearAxis"},{"attributes":{"data":{"description":["fairwinds-stable/gke-node-termination-handler",null,"Containers should not share the host network namespace","DaemonSet.RELEASE-NAME-gke-node-termination-handler.default (container 0) - gke-node-termination-handler","Ensure that Service Account Tokens are only mounted where necessary","Containers should run as a high UID to avoid host conflict","Apply security context to your pods and containers","Minimize the admission of root containers","Ensure that the seccomp profile is set to docker/default or runtime/default","Containers should not share the host process ID namespace"

View BlastRadius Graph

fairwinds-stable-insights-agent

Bokeh Plot Bokeh.set_log_level("info"); {"02b020b0-ba25-4f16-b805-b4a99bb69978":{"defs":[],"roots":{"references":[{"attributes":{"data":{"color":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,"red",null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null],"end":["CKV_K8S_38","CKV_K8S_31","CKV_K8S_43","CKV_K8S_8","CKV_K8S_9","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_37","CKV_K8S_49","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_30","CKV_K8S_12","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_19","CKV_K8S_17","CKV_K8S_26","insights-agent","Deployment.default","Job.default","DaemonSet.default","CKV_K8S_31","CKV_K8S_43","CKV_K8S_8","CKV_K8S_9","CKV_K8S_22","CKV_K8S_28","CKV_K8S_20","CKV_K8S_37","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_30","CKV_K8S_12","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","Job.default","DaemonSet.default","Job.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","Job.default","DaemonSet.default","Job.default","DaemonSet.default","Job.default","DaemonSet.default","Job.default","DaemonSet.default","ClusterRole.default","CKV_K8S_40","CKV_K8S_29","CKV_K8S_23","CKV_K8S_30","CKV_K8S_12","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","DaemonSet.default","CKV_K8S_17","CKV_K8S_26"],"start":["fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","fairwinds-stable/insights-agent","deps","CKV_K8S_38","CKV_K8S_38","CKV_K8S_38","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","Deployment.default","CKV_K8S_31","CKV_K8S_31","CKV_K8S_43","CKV_K8S_43","CKV_K8S_8","CKV_K8S_9","CKV_K8S_22","CKV_K8S_22","CKV_K8S_28","CKV_K8S_28","CKV_K8S_20","CKV_K8S_20","CKV_K8S_37","CKV_K8S_37","CKV_K8S_49","Job.default","Job.default","Job.default","Job.default","Job.default","Job.default","Job.default","Job.default","Job.default","CKV_K8S_30","CKV_K8S_12","CKV_K8S_15","CKV_K8S_10","CKV_K8S_11","CKV_K8S_13","CKV_K8S_19","DaemonSet.default","DaemonSet.default"]},"selected":{"id":"373201"},"selection_policy":{"id":"373200"}},"id":"373143","type":"ColumnDataSource"},{"attributes":{"edge_renderer":{"id":"373144"},"inspection_policy":{"id":"373190"},"layout_provider":{"id":"373146"},"node_renderer":{"id":"373140"},"selection_policy":{"id":"373195"}},"id":"373137","type":"GraphRenderer"},{"attributes":{},"id":"373201","type":"Selection"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"373167"}},"size":{"value":20}},"id":"373168","type":"Circle"},{"attributes":{"active_multi":null,"tools":[{"id":"373117"},{"id":"373118"},{"id":"373119"},{"id":"373120"},{"id":"373121"},{"id":"373122"},{"id":"373131"},{"id":"373132"},{"id":"373133"}]},"id":"373124","type":"Toolbar"},{"attributes":{},"id":"373183","type":"AllLabels"},{"attributes":{"source":{"id":"373143"}},"id":"373145","type":"CDSView"},{"attributes":{"callback":null},"id":"373132","type":"TapTool"},{"attributes":{"source":{"id":"373139"}},"id":"373141","type":"CDSView"},{"attributes":{},"id":"373142","type":"MultiLine"},{"attributes":{},"id":"373122","type":"HelpTool"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"373123","type":"BoxAnnotation"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"373139"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"373177","type":"LabelSet"},{"attributes":{"data_source":{"id":"373143"},"glyph":{"id":"373142"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"373145"}},"id":"373144","type":"GlyphRenderer"},{"attributes":{},"id":"373180","type":"AllLabels"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"373197","type":"BoxAnnotation"},{"attributes":{},"id":"373200","type":"UnionRenderers"},{"attributes":{"formatter":{"id":"373185"},"major_label_policy":{"id":"373183"},"ticker":{"id":"373114"}},"id":"373113","type":"LinearAxis"},{"attributes":{},"id":"373121","type":"ResetTool"},{"attributes":{},"id":"373185","type":"BasicTickFormatter"},{"attributes":{},"id":"373117","type":"PanTool"},{"attributes":{},"id":"373105","type":"LinearScale"},{"attributes":{"text":"fairwinds-stable-insights-agent"},"id":"373099","type":"Title"},{"attributes":{},"id":"373107","type":"LinearScale"},{"attributes":{},"id":"373195","type":"NodesOnly"},{"attributes":{"data":{"description":["fairwinds-stable/insights-agent",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-kube-state-metrics.default (container 0) - kube-state-metrics","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Liveness Probe Should be Configured","Readiness Probe Should be Configured","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability","Containers should not run with allowPrivilegeEscalation","Minimize the admission of containers with capabilities assigned"

View BlastRadius Graph

fission-charts-fission-all

Bokeh Plot Bokeh.set_log_level("info"); {"08a5af47-dc2f-44c1-9e65-fed88a0a75c8":{"defs":[],"roots":{"references":[{"attributes":{"axis":{"id":"376997"},"ticker":null},"id":"377000","type":"Grid"},{"attributes":{"bottom_units":"screen","fill_alpha":0.5,"fill_color":"lightgrey","left_units":"screen","level":"overlay","line_alpha":1.0,"line_color":"black","line_dash":[4,4],"line_width":2,"right_units":"screen","syncable":false,"top_units":"screen"},"id":"377011","type":"BoxAnnotation"},{"attributes":{"text":"fission-charts-fission-all"},"id":"376987","type":"Title"},{"attributes":{"below":[{"id":"376997"}],"center":[{"id":"377000"},{"id":"377004"}],"height":768,"left":[{"id":"377001"}],"renderers":[{"id":"377025"},{"id":"377065"}],"title":{"id":"376987"},"toolbar":{"id":"377012"},"width":1024,"x_range":{"id":"376989"},"x_scale":{"id":"376993"},"y_range":{"id":"376991"},"y_scale":{"id":"376995"}},"id":"376986","subtype":"Figure","type":"Plot"},{"attributes":{"source":{"id":"377031"}},"id":"377033","type":"CDSView"},{"attributes":{},"id":"377068","type":"AllLabels"},{"attributes":{"callback":null},"id":"377020","type":"TapTool"},{"attributes":{"callback":null,"tooltips":[["Name","@name"],["NodeType","@nodeType"],["Description","@description"]]},"id":"377019","type":"HoverTool"},{"attributes":{"background_fill_color":{"value":"white"},"source":{"id":"377027"},"text":{"field":"name"},"x":{"field":"x"},"y":{"field":"y"}},"id":"377065","type":"LabelSet"},{"attributes":{"formatter":{"id":"377073"},"major_label_policy":{"id":"377071"},"ticker":{"id":"377002"}},"id":"377001","type":"LinearAxis"},{"attributes":{},"id":"377070","type":"BasicTickFormatter"},{"attributes":{"data_source":{"id":"377031"},"glyph":{"id":"377030"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"377033"}},"id":"377032","type":"GlyphRenderer"},{"attributes":{},"id":"377071","type":"AllLabels"},{"attributes":{"factors":["root","checkov","chart","helmResource","CVE","image"],"palette":["#3288bd","#66c2a5","#abdda4","#e6f598","#fee08b","#fdae61","#f46d43","#d53e4f"]},"id":"377055","type":"CategoricalColorMapper"},{"attributes":{"fill_color":{"field":"nodeType","transform":{"id":"377055"}},"size":{"value":20}},"id":"377056","type":"Circle"},{"attributes":{},"id":"377073","type":"BasicTickFormatter"},{"attributes":{},"id":"377088","type":"UnionRenderers"},{"attributes":{"data_source":{"id":"377027"},"glyph":{"id":"377056"},"hover_glyph":null,"muted_glyph":null,"view":{"id":"377029"}},"id":"377028","type":"GlyphRenderer"},{"attributes":{},"id":"377078","type":"NodesOnly"},{"attributes":{},"id":"377030","type":"MultiLine"},{"attributes":{"data":{"cvssScore":[null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,8.1,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.5,7.3,6.5,6.5,6.1,5.9,5.9,5.9,5.6,5.3,5.3,null,9.8,8.1,7.5,7.5,7.4,5.9,5.9,5.9,5.3,9.8,9.1,8.1,7.5,7.5,7,7,5.9,5.9,5.5,5.5,null,7.7,null,null,7.5,6.3,5.3,null],"description":["fission-charts/fission-all",null,"Ensure that Service Account Tokens are only mounted where necessary","Deployment.RELEASE-NAME-kube-state-metrics.default (container 0) - kube-state-metrics","Ensure that the seccomp profile is set to docker/default or runtime/default","Image should use digest","Apply security context to your pods and containers","Use read-only filesystem for containers where possible","Minimize the admission of containers with the NET_RAW capability","Containers should not run with allowPrivilegeEscalation","Memory requests should be set","Minimize the admission of containers with capabilities assigned"

View BlastRadius Graph