-
Bug
-
Resolution: Done
-
Undefined
-
None
-
4.13
-
None
-
Quality / Stability / Reliability
-
False
-
-
None
-
Moderate
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
-
None
Description of problem:
when dast scan was run on the RODO operator we did some vulenrabilites that were reported. "Container 'runoncedurationoverride' of Pod 'runoncedurationoverride-hptcv' should set 'securityContext.readOnlyRootFilesystem' to true"
Version-Release number of selected component (if applicable):
[knarra@knarra-thinkpadx1carbon7th ~]$ oc get csv -n openshift-run-once-duration-override-operator NAME DISPLAY VERSION REPLACES PHASE runoncedurationoverrideoperator.v1.0.2 Run Once Duration Override Operator 1.0.2 runoncedurationoverrideoperator.v1.0.1 Succeeded
How reproducible:
Always
Steps to Reproduce:
1. Install 1.0.2 RODO operator 2. Run DAST scan using rapidast 3.
Actual results:
Vulnerabilities put up in the description are seen
Expected results:
vulnerabilities related to readOnlyRootFilesystem should not be seen.
Additional info: