{"vulnerability": "CVE-2021-25742", "sightings": [{"uuid": "45ac9a8d-b93d-42cb-b277-ce5e28f7a8e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-25742", "type": "seen", "source": "https://bsky.app/profile/uchi-mata.bsky.social/post/3llnxk6qaw223", "content": "", "creation_timestamp": "2025-03-31T08:40:46.378058Z"}, {"uuid": "05e746e1-7e1d-4ed3-97e5-3b8fef4340e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-25742", "type": "seen", "source": "https://gist.github.com/AyushyaChitransh/3b69f94e19b188ba41ee0c49a282e64c", "content": "", "creation_timestamp": "2025-03-13T20:14:03.000000Z"}, {"uuid": "54f6e4d3-765a-4898-aeef-563f2a12d389", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-25742", "type": "seen", "source": "https://gist.github.com/JohnPeng47/5146feaf5e65230c9c09b4348ebe205b", "content": "", "creation_timestamp": "2025-04-23T21:32:11.000000Z"}, {"uuid": "9f79a5c6-b70c-4dea-961b-657a30a93da3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-25742", "type": "seen", "source": "https://gist.github.com/rupjyot13/05b328454995bd357a0c183ca0f4f847", "content": "{\n \"check_type\": \"kubernetes\",\n \"results\": {\n \"passed_checks\": [\n {\n \"check_id\": \"CKV_K8S_95\",\n \"bc_check_id\": \"BC_K8S_71\",\n \"check_name\": \"Ensure that the --request-timeout argument is set as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerRequestTimeout\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-request-timeout-argument-is-set-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_70\",\n \"bc_check_id\": \"BC_K8S_48\",\n \"check_name\": \"Ensure that the --token-auth-file argument is not set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerTokenAuthFile\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-token-auth-file-parameter-is-not-set\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_69\",\n \"bc_check_id\": \"BC_K8S_47\",\n \"check_name\": \"Ensure that the --basic-auth-file argument is not set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerBasicAuthFile\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-basic-auth-file-argument-is-not-set\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_144\",\n \"bc_check_id\": \"BC_K8S_100\",\n \"check_name\": \"Ensure that the --protect-kernel-defaults argument is set to true\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeletProtectKernelDefaults\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-protect-kernel-defaults-argument-is-set-to-true\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_68\",\n \"bc_check_id\": \"BC_K8S_46\",\n \"check_name\": \"Ensure that the --anonymous-auth argument is set to false\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerAnonymousAuth\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-anonymous-auth-argument-is-set-to-false-1\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_93\",\n \"bc_check_id\": \"BC_K8S_69\",\n \"check_name\": \"Ensure that the --audit-log-maxbackup argument is set to 10 or as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerAuditLogMaxBackup\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-audit-log-maxbackup-argument-is-set-to-10-or-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_84\",\n \"bc_check_id\": \"BC_K8S_61\",\n \"check_name\": \"Ensure that the admission control plugin PodSecurityPolicy is set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerPodSecurityPolicyPlugin\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-admission-control-plugin-podsecuritypolicy-is-set\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_86\",\n \"bc_check_id\": \"BC_K8S_63\",\n \"check_name\": \"Ensure that the --insecure-bind-address argument is not set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerInsecureBindAddress\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-insecure-bind-address-argument-is-not-set\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_116\",\n \"bc_check_id\": \"BC_K8S_89\",\n \"check_name\": \"Ensure that the --cert-file and --key-file arguments are set as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.EtcdCertAndKey\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-cert-file-and-key-file-arguments-are-set-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_90\",\n \"bc_check_id\": \"BC_K8S_66\",\n \"check_name\": \"Ensure that the --profiling argument is set to false\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerProfiling\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-profiling-argument-is-set-to-false-2\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_105\",\n \"bc_check_id\": \"BC_K8S_79\",\n \"check_name\": \"Ensure that the API Server only makes use of Strong Cryptographic Ciphers\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerStrongCryptographicCiphers\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-api-server-only-makes-use-of-strong-cryptographic-ciphers\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_119\",\n \"bc_check_id\": \"BC_K8S_92\",\n \"check_name\": \"Ensure that the --peer-cert-file and --peer-key-file arguments are set as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.EtcdPeerFiles\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-peer-cert-file-and-peer-key-file-arguments-are-set-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_96\",\n \"bc_check_id\": \"BC_K8S_72\",\n \"check_name\": \"Ensure that the --service-account-lookup argument is set to true\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerServiceAccountLookup\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-service-account-lookup-argument-is-set-to-true\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_37\",\n \"bc_check_id\": \"BC_K8S_34\",\n \"check_name\": \"Minimize the admission of containers with capabilities assigned\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.MinimizeCapabilities\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-34\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_23\",\n \"bc_check_id\": \"BC_K8S_22\",\n \"check_name\": \"Minimize the admission of root containers\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.RootContainers\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-22\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_34\",\n \"bc_check_id\": \"BC_K8S_32\",\n \"check_name\": \"Ensure that Tiller (Helm v2) is not deployed\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.Tiller\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-32\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_139\",\n \"bc_check_id\": \"BC_K8S_96\",\n \"check_name\": \"Ensure that the --authorization-mode argument is not set to AlwaysAllow\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeletAuthorizationModeNotAlwaysAllow\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-authorization-mode-argument-is-not-set-to-alwaysallow\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_80\",\n \"bc_check_id\": \"BC_K8S_57\",\n \"check_name\": \"Ensure that the admission control plugin AlwaysPullImages is set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerAlwaysPullImagesPlugin\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-admission-control-plugin-alwayspullimages-is-set\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_117\",\n \"bc_check_id\": \"BC_K8S_90\",\n \"check_name\": \"Ensure that the --client-cert-auth argument is set to true\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.EtcdClientCertAuth\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-client-cert-auth-argument-is-set-to-true\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_89\",\n \"bc_check_id\": \"BC_K8S_65\",\n \"check_name\": \"Ensure that the --secure-port argument is not set to 0\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerSecurePort\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-secure-port-argument-is-not-set-to-0\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_106\",\n \"bc_check_id\": \"BC_K8S_80\",\n \"check_name\": \"Ensure that the --terminated-pod-gc-threshold argument is set as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeControllerManagerTerminatedPods\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-terminated-pod-gc-threshold-argument-is-set-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_108\",\n \"bc_check_id\": \"BC_K8S_82\",\n \"check_name\": \"Ensure that the --use-service-account-credentials argument is set to true\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeControllerManagerServiceAccountCredentials\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-use-service-account-credentials-argument-is-set-to-true\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_143\",\n \"bc_check_id\": \"BC_K8S_99\",\n \"check_name\": \"Ensure that the --streaming-connection-idle-timeout argument is not set to 0\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeletStreamingConnectionIdleTimeout\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-streaming-connection-idle-timeout-argument-is-not-set-to-0\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_149\",\n \"bc_check_id\": \"BC_K8S_105\",\n \"check_name\": \"Ensure that the --rotate-certificates argument is not set to false\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubletRotateCertificates\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-rotate-certificates-argument-is-not-set-to-false\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_113\",\n \"bc_check_id\": \"BC_K8S_86\",\n \"check_name\": \"Ensure that the --bind-address argument is set to 127.0.0.1\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ControllerManagerBindAddress\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-bind-address-argument-is-set-to-127001\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_26\",\n \"bc_check_id\": \"BC_K8S_25\",\n \"check_name\": \"Do not specify hostPort unless absolutely necessary\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.HostPort\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-25\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_39\",\n \"bc_check_id\": \"BC_K8S_36\",\n \"check_name\": \"Do not use the CAP_SYS_ADMIN linux capability\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.AllowedCapabilitiesSysAdmin\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-36\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_99\",\n \"bc_check_id\": \"BC_K8S_74\",\n \"check_name\": \"Ensure that the --etcd-certfile and --etcd-keyfile arguments are set as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerEtcdCertAndKey\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-etcd-certfile-and-etcd-keyfile-arguments-are-set-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_102\",\n \"bc_check_id\": \"BC_K8S_77\",\n \"check_name\": \"Ensure that the --etcd-cafile argument is set as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerEtcdCaFile\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-etcd-cafile-argument-is-set-as-appropriate-1\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_11\",\n \"bc_check_id\": \"BC_K8S_10\",\n \"check_name\": \"CPU limits should be set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.CPULimits\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-10\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_8\",\n \"bc_check_id\": \"BC_K8S_7\",\n \"check_name\": \"Liveness Probe Should be Configured\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.LivenessProbe\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-7\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_9\",\n \"bc_check_id\": \"BC_K8S_8\",\n \"check_name\": \"Readiness Probe Should be Configured\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ReadinessProbe\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-8\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_148\",\n \"bc_check_id\": \"BC_K8S_104\",\n \"check_name\": \"Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeletKeyFilesSetAppropriate\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-tls-cert-file-and-tls-private-key-file-arguments-are-set-as-appropriate-for-kubelet\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_77\",\n \"bc_check_id\": \"BC_K8S_54\",\n \"check_name\": \"Ensure that the --authorization-mode argument includes RBAC\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerAuthorizationModeRBAC\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-authorization-mode-argument-includes-rbac\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_25\",\n \"bc_check_id\": \"BC_K8S_24\",\n \"check_name\": \"Minimize the admission of containers with added capability\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.AllowedCapabilities\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-24\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_74\",\n \"bc_check_id\": \"BC_K8S_52\",\n \"check_name\": \"Ensure that the --authorization-mode argument is not set to AlwaysAllow\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerAuthorizationModeNotAlwaysAllow\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-authorization-mode-argument-is-not-set-to-alwaysallow-1\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_79\",\n \"bc_check_id\": \"BC_K8S_56\",\n \"check_name\": \"Ensure that the admission control plugin AlwaysAdmit is not set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerAdmissionControlAlwaysAdmit\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-admission-control-plugin-alwaysadmit-is-not-set\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_94\",\n \"bc_check_id\": \"BC_K8S_70\",\n \"check_name\": \"Ensure that the --audit-log-maxsize argument is set to 100 or as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerAuditLogMaxSize\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-audit-log-maxsize-argument-is-set-to-100-or-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_75\",\n \"bc_check_id\": \"BC_K8S_53\",\n \"check_name\": \"Ensure that the --authorization-mode argument includes Node\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerAuthorizationModeNode\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-authorization-mode-argument-includes-node\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_97\",\n \"bc_check_id\": \"BC_K8S_73\",\n \"check_name\": \"Ensure that the --service-account-key-file argument is set as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerServiceAccountKeyFile\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-service-account-key-file-argument-is-set-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_18\",\n \"bc_check_id\": \"BC_K8S_17\",\n \"check_name\": \"Containers should not share the host IPC namespace\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ShareHostIPC\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-17\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_16\",\n \"bc_check_id\": \"BC_K8S_15\",\n \"check_name\": \"Container should not be privileged\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.PrivilegedContainers\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-15\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_146\",\n \"bc_check_id\": \"BC_K8S_102\",\n \"check_name\": \"Ensure that the --hostname-override argument is not set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeletHostnameOverride\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-hostname-override-argument-is-not-set\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_107\",\n \"bc_check_id\": \"BC_K8S_81\",\n \"check_name\": \"Ensure that the --profiling argument is set to false\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeControllerManagerBlockProfiles\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-profiling-argument-is-set-to-false\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_81\",\n \"bc_check_id\": \"BC_K8S_58\",\n \"check_name\": \"Ensure that the admission control plugin SecurityContextDeny is set if PodSecurityPolicy is not used\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerSecurityContextDenyPlugin\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-admission-control-plugin-securitycontextdeny-is-set-if-podsecuritypolicy-is-not-used\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_83\",\n \"bc_check_id\": \"BC_K8S_60\",\n \"check_name\": \"Ensure that the admission control plugin NamespaceLifecycle is set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerNamespaceLifecyclePlugin\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-admission-control-plugin-namespacelifecycle-is-set\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_115\",\n \"bc_check_id\": \"BC_K8S_88\",\n \"check_name\": \"Ensure that the --bind-address argument is set to 127.0.0.1\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.SchedulerBindAddress\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-bind-address-argument-is-set-to-127001-1\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_72\",\n \"bc_check_id\": \"BC_K8S_50\",\n \"check_name\": \"Ensure that the --kubelet-client-certificate and --kubelet-client-key arguments are set as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerKubeletClientCertAndKey\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-kubelet-client-certificate-and-kubelet-client-key-arguments-are-set-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_10\",\n \"bc_check_id\": \"BC_K8S_9\",\n \"check_name\": \"CPU requests should be set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.CPURequests\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-9\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_118\",\n \"bc_check_id\": \"BC_K8S_91\",\n \"check_name\": \"Ensure that the --auto-tls argument is not set to true\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.EtcdAutoTls\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-auto-tls-argument-is-not-set-to-true\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_104\",\n \"bc_check_id\": \"BC_K8S_78\",\n \"check_name\": \"Ensure that encryption providers are appropriately configured\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerEncryptionProviders\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-etcd-cafile-argument-is-set-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_114\",\n \"bc_check_id\": \"BC_K8S_87\",\n \"check_name\": \"Ensure that the --profiling argument is set to false\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.SchedulerProfiling\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-profiling-argument-is-set-to-false-1\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_73\",\n \"bc_check_id\": \"BC_K8S_51\",\n \"check_name\": \"Ensure that the --kubelet-certificate-authority argument is set as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerkubeletCertificateAuthority\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-kubelet-certificate-authority-argument-is-set-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_20\",\n \"bc_check_id\": \"BC_K8S_19\",\n \"check_name\": \"Containers should not run with allowPrivilegeEscalation\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.AllowPrivilegeEscalation\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-19\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_85\",\n \"bc_check_id\": \"BC_K8S_62\",\n \"check_name\": \"Ensure that the admission control plugin NodeRestriction is set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerNodeRestrictionPlugin\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-admission-control-plugin-noderestriction-is-set\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_14\",\n \"bc_check_id\": \"BC_K8S_13\",\n \"check_name\": \"Image Tag should be fixed - not latest or blank\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ImageTagFixed\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-13\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_112\",\n \"bc_check_id\": \"BC_K8S_85\",\n \"check_name\": \"Ensure that the RotateKubeletServerCertificate argument is set to true\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.RotateKubeletServerCertificate\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-rotatekubeletservercertificate-argument-is-set-to-true-for-controller-manager\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_12\",\n \"bc_check_id\": \"BC_K8S_11\",\n \"check_name\": \"Memory requests should be set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.MemoryRequests\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-11\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_100\",\n \"bc_check_id\": \"BC_K8S_75\",\n \"check_name\": \"Ensure that the --tls-cert-file and --tls-private-key-file arguments are set as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerTlsCertAndKey\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-tls-cert-file-and-tls-private-key-file-arguments-are-set-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_27\",\n \"bc_check_id\": \"BC_K8S_26\",\n \"check_name\": \"Do not expose the docker daemon socket to containers\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.DockerSocketVolume\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-26\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_151\",\n \"bc_check_id\": \"BC_K8S_76\",\n \"check_name\": \"Ensure that the Kubelet only makes use of Strong Cryptographic Ciphers\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeletCryptographicCiphers\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-kubelet-only-makes-use-of-strong-cryptographic-ciphers\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_92\",\n \"bc_check_id\": \"BC_K8S_68\",\n \"check_name\": \"Ensure that the --audit-log-maxage argument is set to 30 or as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerAuditLogMaxAge\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-audit-log-maxage-argument-is-set-to-30-or-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_33\",\n \"bc_check_id\": \"BC_K8S_31\",\n \"check_name\": \"Ensure the Kubernetes dashboard is not deployed\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubernetesDashboard\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-31\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_159\",\n \"bc_check_id\": null,\n \"check_name\": \"Limit the use of git-sync to prevent code injection\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.DangerousGitSync\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": null,\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_91\",\n \"bc_check_id\": \"BC_K8S_67\",\n \"check_name\": \"Ensure that the --audit-log-path argument is set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerAuditLog\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-audit-log-path-argument-is-set\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_19\",\n \"bc_check_id\": \"BC_K8S_18\",\n \"check_name\": \"Containers should not share the host network namespace\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.SharedHostNetworkNamespace\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-18\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_111\",\n \"bc_check_id\": \"BC_K8S_84\",\n \"check_name\": \"Ensure that the --root-ca-file argument is set as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeControllerManagerRootCAFile\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-root-ca-file-argument-is-set-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_29\",\n \"bc_check_id\": \"BC_K8S_43\",\n \"check_name\": \"Apply security context to your pods and containers\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.PodSecurityContext\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-securitycontext-is-applied-to-pods-and-containers\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_110\",\n \"bc_check_id\": \"BC_K8S_83\",\n \"check_name\": \"Ensure that the --service-account-private-key-file argument is set as appropriate\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeControllerManagerServiceAccountPrivateKeyFile\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-service-account-private-key-file-argument-is-set-as-appropriate\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_30\",\n \"bc_check_id\": \"BC_K8S_28\",\n \"check_name\": \"Apply security context to your containers\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ContainerSecurityContext\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-28\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_141\",\n \"bc_check_id\": \"BC_K8S_98\",\n \"check_name\": \"Ensure that the --read-only-port argument is set to 0\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeletReadOnlyPort\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-read-only-port-argument-is-set-to-0\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_147\",\n \"bc_check_id\": \"BC_K8S_103\",\n \"check_name\": \"Ensure that the --event-qps argument is set to 0 or a level which ensures appropriate event capture\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubletEventCapture\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-event-qps-argument-is-set-to-0-or-a-level-which-ensures-appropriate-event-capture\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_13\",\n \"bc_check_id\": \"BC_K8S_12\",\n \"check_name\": \"Memory limits should be set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.MemoryLimits\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-12\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_145\",\n \"bc_check_id\": \"BC_K8S_101\",\n \"check_name\": \"Ensure that the --make-iptables-util-chains argument is set to true\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeletMakeIptablesUtilChains\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-make-iptables-util-chains-argument-is-set-to-true\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_138\",\n \"bc_check_id\": \"BC_K8S_95\",\n \"check_name\": \"Ensure that the --anonymous-auth argument is set to false\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.KubeletAnonymousAuth\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-anonymous-auth-argument-is-set-to-false\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_88\",\n \"bc_check_id\": \"BC_K8S_64\",\n \"check_name\": \"Ensure that the --insecure-port argument is set to 0\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerInsecurePort\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-insecure-port-argument-is-set-to-0\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_17\",\n \"bc_check_id\": \"BC_K8S_16\",\n \"check_name\": \"Containers should not share the host process ID namespace\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ShareHostPID\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-16\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_71\",\n \"bc_check_id\": \"BC_K8S_49\",\n \"check_name\": \"Ensure that the --kubelet-https argument is set to true\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerKubeletHttps\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-kubelet-https-argument-is-set-to-true\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_28\",\n \"bc_check_id\": \"BC_K8S_27\",\n \"check_name\": \"Minimize the admission of containers with the NET_RAW capability\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.DropCapabilities\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-27\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_82\",\n \"bc_check_id\": \"BC_K8S_59\",\n \"check_name\": \"Ensure that the admission control plugin ServiceAccount is set\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ApiServerServiceAccountPlugin\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/ensure-that-the-admission-control-plugin-serviceaccount-is-set\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_154\",\n \"bc_check_id\": \"BC_K8S_110\",\n \"check_name\": \"Prevent NGINX Ingress annotation snippets which contain alias statements See CVE-2021-25742\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 97,\n \"apiVersion: networking.k8s.io/v1\\r\\n\"\n ],\n [\n 98,\n \"kind: Ingress\\r\\n\"\n ],\n [\n 99,\n \"\\r\\n\"\n ],\n [\n 100,\n \"metadata:\\r\\n\"\n ],\n [\n 101,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 102,\n \"\\r\\n\"\n ],\n [\n 103,\n \" annotations:\\r\\n\"\n ],\n [\n 104,\n \" alb.ingress.kubernetes.io/scheme: internal\\r\\n\"\n ],\n [\n 105,\n \" alb.ingress.kubernetes.io/inbound-cidrs: 10.0.0.0/8\\r\\n\"\n ],\n [\n 106,\n \"\\r\\n\"\n ],\n [\n 107,\n \"spec:\\r\\n\"\n ],\n [\n 108,\n \" ingressClassName: alb\\r\\n\"\n ],\n [\n 109,\n \"\\r\\n\"\n ],\n [\n 110,\n \" rules:\\r\\n\"\n ],\n [\n 111,\n \" - host: vulntracker.example.com\\r\\n\"\n ],\n [\n 112,\n \"\\r\\n\"\n ],\n [\n 113,\n \" http:\\r\\n\"\n ],\n [\n 114,\n \" paths:\\r\\n\"\n ],\n [\n 115,\n \" - path: /\\r\\n\"\n ],\n [\n 116,\n \" pathType: Prefix\\r\\n\"\n ],\n [\n 117,\n \"\\r\\n\"\n ],\n [\n 118,\n \" backend:\\r\\n\"\n ],\n [\n 119,\n \" service:\\r\\n\"\n ],\n [\n 120,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 121,\n \" port:\\r\\n\"\n ],\n [\n 122,\n \" number: 8000\\r\\n\"\n ],\n [\n 123,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 97,\n 123\n ],\n \"resource\": \"Ingress.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.NginxIngressCVE202125742Alias\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/prevent-nginx-ingress-annotation-snippets-which-contain-alias-statements\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_152\",\n \"bc_check_id\": \"BC_K8S_108\",\n \"check_name\": \"Prevent NGINX Ingress annotation snippets which contain LUA code execution. See CVE-2021-25742\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 97,\n \"apiVersion: networking.k8s.io/v1\\r\\n\"\n ],\n [\n 98,\n \"kind: Ingress\\r\\n\"\n ],\n [\n 99,\n \"\\r\\n\"\n ],\n [\n 100,\n \"metadata:\\r\\n\"\n ],\n [\n 101,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 102,\n \"\\r\\n\"\n ],\n [\n 103,\n \" annotations:\\r\\n\"\n ],\n [\n 104,\n \" alb.ingress.kubernetes.io/scheme: internal\\r\\n\"\n ],\n [\n 105,\n \" alb.ingress.kubernetes.io/inbound-cidrs: 10.0.0.0/8\\r\\n\"\n ],\n [\n 106,\n \"\\r\\n\"\n ],\n [\n 107,\n \"spec:\\r\\n\"\n ],\n [\n 108,\n \" ingressClassName: alb\\r\\n\"\n ],\n [\n 109,\n \"\\r\\n\"\n ],\n [\n 110,\n \" rules:\\r\\n\"\n ],\n [\n 111,\n \" - host: vulntracker.example.com\\r\\n\"\n ],\n [\n 112,\n \"\\r\\n\"\n ],\n [\n 113,\n \" http:\\r\\n\"\n ],\n [\n 114,\n \" paths:\\r\\n\"\n ],\n [\n 115,\n \" - path: /\\r\\n\"\n ],\n [\n 116,\n \" pathType: Prefix\\r\\n\"\n ],\n [\n 117,\n \"\\r\\n\"\n ],\n [\n 118,\n \" backend:\\r\\n\"\n ],\n [\n 119,\n \" service:\\r\\n\"\n ],\n [\n 120,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 121,\n \" port:\\r\\n\"\n ],\n [\n 122,\n \" number: 8000\\r\\n\"\n ],\n [\n 123,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 97,\n 123\n ],\n \"resource\": \"Ingress.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.NginxIngressCVE202125742Lua\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/prevent-nginx-ingress-annotation-snippets-which-contain-lua-code-execution\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_153\",\n \"bc_check_id\": \"BC_K8S_109\",\n \"check_name\": \"Prevent All NGINX Ingress annotation snippets. See CVE-2021-25742\",\n \"check_result\": {\n \"result\": \"PASSED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 97,\n \"apiVersion: networking.k8s.io/v1\\r\\n\"\n ],\n [\n 98,\n \"kind: Ingress\\r\\n\"\n ],\n [\n 99,\n \"\\r\\n\"\n ],\n [\n 100,\n \"metadata:\\r\\n\"\n ],\n [\n 101,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 102,\n \"\\r\\n\"\n ],\n [\n 103,\n \" annotations:\\r\\n\"\n ],\n [\n 104,\n \" alb.ingress.kubernetes.io/scheme: internal\\r\\n\"\n ],\n [\n 105,\n \" alb.ingress.kubernetes.io/inbound-cidrs: 10.0.0.0/8\\r\\n\"\n ],\n [\n 106,\n \"\\r\\n\"\n ],\n [\n 107,\n \"spec:\\r\\n\"\n ],\n [\n 108,\n \" ingressClassName: alb\\r\\n\"\n ],\n [\n 109,\n \"\\r\\n\"\n ],\n [\n 110,\n \" rules:\\r\\n\"\n ],\n [\n 111,\n \" - host: vulntracker.example.com\\r\\n\"\n ],\n [\n 112,\n \"\\r\\n\"\n ],\n [\n 113,\n \" http:\\r\\n\"\n ],\n [\n 114,\n \" paths:\\r\\n\"\n ],\n [\n 115,\n \" - path: /\\r\\n\"\n ],\n [\n 116,\n \" pathType: Prefix\\r\\n\"\n ],\n [\n 117,\n \"\\r\\n\"\n ],\n [\n 118,\n \" backend:\\r\\n\"\n ],\n [\n 119,\n \" service:\\r\\n\"\n ],\n [\n 120,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 121,\n \" port:\\r\\n\"\n ],\n [\n 122,\n \" number: 8000\\r\\n\"\n ],\n [\n 123,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 97,\n 123\n ],\n \"resource\": \"Ingress.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.NginxIngressCVE202125742AllSnippets\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/prevent-all-nginx-ingress-annotation-snippets\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n }\n ],\n \"failed_checks\": [\n {\n \"check_id\": \"CKV_K8S_21\",\n \"bc_check_id\": \"BC_K8S_20\",\n \"check_name\": \"The default namespace should not be used\",\n \"check_result\": {\n \"result\": \"FAILED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 3,\n \"apiVersion: v1\\r\\n\"\n ],\n [\n 4,\n \"kind: Service\\r\\n\"\n ],\n [\n 5,\n \"metadata:\\r\\n\"\n ],\n [\n 6,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 7,\n \"\\r\\n\"\n ],\n [\n 8,\n \"spec:\\r\\n\"\n ],\n [\n 9,\n \" type: ClusterIP\\r\\n\"\n ],\n [\n 10,\n \"\\r\\n\"\n ],\n [\n 11,\n \" selector:\\r\\n\"\n ],\n [\n 12,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 13,\n \"\\r\\n\"\n ],\n [\n 14,\n \" ports:\\r\\n\"\n ],\n [\n 15,\n \" - name: http\\r\\n\"\n ],\n [\n 16,\n \" port: 8000\\r\\n\"\n ],\n [\n 17,\n \" targetPort: http\\r\\n\"\n ],\n [\n 18,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 19,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 3,\n 19\n ],\n \"resource\": \"Service.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.DefaultNamespace\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-20\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_22\",\n \"bc_check_id\": \"BC_K8S_21\",\n \"check_name\": \"Use read-only filesystem for containers where possible\",\n \"check_result\": {\n \"result\": \"FAILED\",\n \"evaluated_keys\": [\n \"spec/template/spec/containers/[0]/securityContext/readOnlyRootFilesystem\"\n ]\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ReadOnlyFilesystem\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-21\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_31\",\n \"bc_check_id\": \"BC_K8S_29\",\n \"check_name\": \"Ensure that the seccomp profile is set to docker/default or runtime/default\",\n \"check_result\": {\n \"result\": \"FAILED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.Seccomp\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-29\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_43\",\n \"bc_check_id\": \"BC_K8S_39\",\n \"check_name\": \"Image should use digest\",\n \"check_result\": {\n \"result\": \"FAILED\",\n \"evaluated_keys\": [\n \"spec/template/spec/containers/[0]/image\"\n ]\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ImageDigest\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-39\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_35\",\n \"bc_check_id\": \"BC_K8S_33\",\n \"check_name\": \"Prefer using secrets as files over secrets as environment variables\",\n \"check_result\": {\n \"result\": \"FAILED\",\n \"evaluated_keys\": [\n \"spec/template/spec/containers/[0]/env/[0]/valueFrom/secretKeyRef\"\n ]\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.Secrets\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-33\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_40\",\n \"bc_check_id\": \"BC_K8S_37\",\n \"check_name\": \"Containers should run as a high UID to avoid host conflict\",\n \"check_result\": {\n \"result\": \"FAILED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.RootContainersHighUID\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-37\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_38\",\n \"bc_check_id\": \"BC_K8S_35\",\n \"check_name\": \"Ensure that Service Account Tokens are only mounted where necessary\",\n \"check_result\": {\n \"result\": \"FAILED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ServiceAccountTokens\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-35\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_21\",\n \"bc_check_id\": \"BC_K8S_20\",\n \"check_name\": \"The default namespace should not be used\",\n \"check_result\": {\n \"result\": \"FAILED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.DefaultNamespace\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-20\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_15\",\n \"bc_check_id\": \"BC_K8S_14\",\n \"check_name\": \"Image Pull Policy should be Always\",\n \"check_result\": {\n \"result\": \"FAILED\",\n \"evaluated_keys\": [\n \"spec/template/spec/containers/[0]/image\",\n \"spec/template/spec/containers/[0]/imagePullPolicy\"\n ]\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Deployment.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.ImagePullPolicyAlways\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-14\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV_K8S_21\",\n \"bc_check_id\": \"BC_K8S_20\",\n \"check_name\": \"The default namespace should not be used\",\n \"check_result\": {\n \"result\": \"FAILED\",\n \"evaluated_keys\": []\n },\n \"code_block\": [\n [\n 97,\n \"apiVersion: networking.k8s.io/v1\\r\\n\"\n ],\n [\n 98,\n \"kind: Ingress\\r\\n\"\n ],\n [\n 99,\n \"\\r\\n\"\n ],\n [\n 100,\n \"metadata:\\r\\n\"\n ],\n [\n 101,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 102,\n \"\\r\\n\"\n ],\n [\n 103,\n \" annotations:\\r\\n\"\n ],\n [\n 104,\n \" alb.ingress.kubernetes.io/scheme: internal\\r\\n\"\n ],\n [\n 105,\n \" alb.ingress.kubernetes.io/inbound-cidrs: 10.0.0.0/8\\r\\n\"\n ],\n [\n 106,\n \"\\r\\n\"\n ],\n [\n 107,\n \"spec:\\r\\n\"\n ],\n [\n 108,\n \" ingressClassName: alb\\r\\n\"\n ],\n [\n 109,\n \"\\r\\n\"\n ],\n [\n 110,\n \" rules:\\r\\n\"\n ],\n [\n 111,\n \" - host: vulntracker.example.com\\r\\n\"\n ],\n [\n 112,\n \"\\r\\n\"\n ],\n [\n 113,\n \" http:\\r\\n\"\n ],\n [\n 114,\n \" paths:\\r\\n\"\n ],\n [\n 115,\n \" - path: /\\r\\n\"\n ],\n [\n 116,\n \" pathType: Prefix\\r\\n\"\n ],\n [\n 117,\n \"\\r\\n\"\n ],\n [\n 118,\n \" backend:\\r\\n\"\n ],\n [\n 119,\n \" service:\\r\\n\"\n ],\n [\n 120,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 121,\n \" port:\\r\\n\"\n ],\n [\n 122,\n \" number: 8000\\r\\n\"\n ],\n [\n 123,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 97,\n 123\n ],\n \"resource\": \"Ingress.default.vulntracker-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.kubernetes.checks.resource.k8s.DefaultNamespace\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": \"https://docs.prismacloud.io/en/enterprise-edition/policy-reference/kubernetes-policies/kubernetes-policy-index/bc-k8s-20\",\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n },\n {\n \"check_id\": \"CKV2_K8S_6\",\n \"bc_check_id\": null,\n \"check_name\": \"Minimize the admission of pods which lack an associated NetworkPolicy\",\n \"check_result\": {\n \"result\": \"FAILED\",\n \"evaluated_keys\": [\n \"resource_type\"\n ]\n },\n \"code_block\": [\n [\n 21,\n \"apiVersion: apps/v1\\r\\n\"\n ],\n [\n 22,\n \"kind: Deployment\\r\\n\"\n ],\n [\n 23,\n \"metadata:\\r\\n\"\n ],\n [\n 24,\n \" name: vulntracker-vulntracker\\r\\n\"\n ],\n [\n 25,\n \" labels:\\r\\n\"\n ],\n [\n 26,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 27,\n \"\\r\\n\"\n ],\n [\n 28,\n \"spec:\\r\\n\"\n ],\n [\n 29,\n \" replicas: 2\\r\\n\"\n ],\n [\n 30,\n \"\\r\\n\"\n ],\n [\n 31,\n \" selector:\\r\\n\"\n ],\n [\n 32,\n \" matchLabels:\\r\\n\"\n ],\n [\n 33,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 34,\n \"\\r\\n\"\n ],\n [\n 35,\n \" template:\\r\\n\"\n ],\n [\n 36,\n \" metadata:\\r\\n\"\n ],\n [\n 37,\n \" labels:\\r\\n\"\n ],\n [\n 38,\n \" app: vulntracker\\r\\n\"\n ],\n [\n 39,\n \"\\r\\n\"\n ],\n [\n 40,\n \" spec:\\r\\n\"\n ],\n [\n 41,\n \" securityContext:\\r\\n\"\n ],\n [\n 42,\n \" runAsNonRoot: true\\r\\n\"\n ],\n [\n 43,\n \"\\r\\n\"\n ],\n [\n 44,\n \" containers:\\r\\n\"\n ],\n [\n 45,\n \" - name: vulntracker\\r\\n\"\n ],\n [\n 46,\n \"\\r\\n\"\n ],\n [\n 47,\n \" image: \\\"vulntracker-app:task4\\\"\\r\\n\"\n ],\n [\n 48,\n \" imagePullPolicy: IfNotPresent\\r\\n\"\n ],\n [\n 49,\n \"\\r\\n\"\n ],\n [\n 50,\n \" securityContext:\\r\\n\"\n ],\n [\n 51,\n \" allowPrivilegeEscalation: false\\r\\n\"\n ],\n [\n 52,\n \" capabilities:\\r\\n\"\n ],\n [\n 53,\n \" drop:\\r\\n\"\n ],\n [\n 54,\n \" - ALL\\r\\n\"\n ],\n [\n 55,\n \"\\r\\n\"\n ],\n [\n 56,\n \" ports:\\r\\n\"\n ],\n [\n 57,\n \" - name: http\\r\\n\"\n ],\n [\n 58,\n \" containerPort: 8000\\r\\n\"\n ],\n [\n 59,\n \" protocol: TCP\\r\\n\"\n ],\n [\n 60,\n \"\\r\\n\"\n ],\n [\n 61,\n \" env:\\r\\n\"\n ],\n [\n 62,\n \" - name: SECRET_KEY\\r\\n\"\n ],\n [\n 63,\n \" valueFrom:\\r\\n\"\n ],\n [\n 64,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 65,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 66,\n \" key: SECRET_KEY\\r\\n\"\n ],\n [\n 67,\n \"\\r\\n\"\n ],\n [\n 68,\n \" - name: DB_PASSWORD\\r\\n\"\n ],\n [\n 69,\n \" valueFrom:\\r\\n\"\n ],\n [\n 70,\n \" secretKeyRef:\\r\\n\"\n ],\n [\n 71,\n \" name: vulntracker-secrets\\r\\n\"\n ],\n [\n 72,\n \" key: DB_PASSWORD\\r\\n\"\n ],\n [\n 73,\n \"\\r\\n\"\n ],\n [\n 74,\n \" resources:\\r\\n\"\n ],\n [\n 75,\n \" limits:\\r\\n\"\n ],\n [\n 76,\n \" cpu: 500m\\r\\n\"\n ],\n [\n 77,\n \" memory: 512Mi\\r\\n\"\n ],\n [\n 78,\n \" requests:\\r\\n\"\n ],\n [\n 79,\n \" cpu: 100m\\r\\n\"\n ],\n [\n 80,\n \" memory: 128Mi\\r\\n\"\n ],\n [\n 81,\n \"\\r\\n\"\n ],\n [\n 82,\n \" readinessProbe:\\r\\n\"\n ],\n [\n 83,\n \" httpGet:\\r\\n\"\n ],\n [\n 84,\n \" path: /docs\\r\\n\"\n ],\n [\n 85,\n \" port: http\\r\\n\"\n ],\n [\n 86,\n \" initialDelaySeconds: 10\\r\\n\"\n ],\n [\n 87,\n \" periodSeconds: 10\\r\\n\"\n ],\n [\n 88,\n \"\\r\\n\"\n ],\n [\n 89,\n \" livenessProbe:\\r\\n\"\n ],\n [\n 90,\n \" httpGet:\\r\\n\"\n ],\n [\n 91,\n \" path: /docs\\r\\n\"\n ],\n [\n 92,\n \" port: http\\r\\n\"\n ],\n [\n 93,\n \" initialDelaySeconds: 30\\r\\n\"\n ],\n [\n 94,\n \" periodSeconds: 30\\r\\n\"\n ],\n [\n 95,\n \"---\\r\\n\"\n ]\n ],\n \"file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_abs_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"repo_file_path\": \"/tf/reports/iac-rendered/vulntracker.yaml\",\n \"file_line_range\": [\n 21,\n 95\n ],\n \"resource\": \"Pod.default.vulntracker-vulntracker.app-vulntracker\",\n \"evaluations\": {},\n \"check_class\": \"checkov.common.graph.checks_infra.base_check\",\n \"fixed_definition\": null,\n \"entity_tags\": null,\n \"caller_file_path\": null,\n \"caller_file_line_range\": null,\n \"resource_address\": null,\n \"severity\": null,\n \"bc_category\": null,\n \"benchmarks\": null,\n \"description\": null,\n \"short_description\": null,\n \"vulnerability_details\": null,\n \"connected_node\": null,\n \"guideline\": null,\n \"details\": [],\n \"check_len\": null,\n \"definition_context_file_path\": null\n }\n ],\n \"skipped_checks\": [],\n \"parsing_errors\": []\n },\n \"summary\": {\n \"passed\": 83,\n \"failed\": 11,\n \"skipped\": 0,\n \"parsing_errors\": 0,\n \"resource_count\": 5,\n \"checkov_version\": \"3.3.17\"\n },\n \"url\": \"Add an api key '--bc-api-key ' to see more detailed insights via https://bridgecrew.cloud\"\n}\n", "creation_timestamp": "2026-09-10T10:24:47.043579Z"}]}