René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Scanners use runAsNonRoot: false in their values.yaml securityContext","articleBody":"Once PR #714 is applied, all values.yaml files have a securityContext set. During testing this, it was noted that some scanners have to use *runAsNonRoot: false* and/or *readOnlyRootFilesystem: false* in order to function. This can be due to the behaviour of the underlying scanner or because the Dockerfile uses a non-numeric user. Fixing this may require our own Scanner Dockerfile where an already build original image is used or pull requests in other repositories in order to have them use non-numeric, kubernetes-friendly users.\r\n\r\nSee also: #285 \r\n\r\nAffected scanners:\r\n- [ ] amass (#715)\r\n- [ ] cmseek (readOnlyRootFilesystem)\r\n- [ ] gitleaks\r\n- [ ] kube-hunter\r\n- [ ] ssh-scan\r\n- [ ] sslyze\r\n- [ ] trivy\r\n- [ ] typo3scan (readOnlyRootFilesystem)\r\n- [ ] wpscan\r\n- [ ] zap\r\n- [ ] zap-advanced\r\n","author":{"url":"https://github.com/SebieF","@type":"Person","name":"SebieF"},"datePublished":"2021-10-13T10:05:17.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/723/secureCodeBox/issues/723"}