From 1e04b289f254640158c1fe4df190d12ce93d8c21 Mon Sep 17 00:00:00 2001 From: Luke Young <91491244+lyoung-confluent@users.noreply.github.com> Date: Thu, 23 May 2024 12:24:51 -0500 Subject: [PATCH] Update docker-cis.yaml --- specs/compliance/docker-cis.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/specs/compliance/docker-cis.yaml b/specs/compliance/docker-cis.yaml index b9c0d971..851c8dc1 100644 --- a/specs/compliance/docker-cis.yaml +++ b/specs/compliance/docker-cis.yaml @@ -35,19 +35,19 @@ spec: checks: severity: 'LOW' - id: '4.6' - name: Ensure HEALTHCHECK instructions have been added to container + name: Ensure HEALTHCHECK instructions have been added to the container image description: 'Add HEALTHCHECK instruction in your docker container images to perform the health check on running containers.' checks: - id: AVD-DS-0026 severity: 'LOW' - id: '4.7' - name: Ensure update instructions are not used alone in Dockerfiles + name: Ensure update instructions are not used alone in the Dockerfile description: 'Do not use update instructions such as apt-get update alone or in a single line in the Dockerfile.' checks: - id: AVD-DS-0017 severity: 'HIGH' - id: '4.8' - name: Ensure setuid and setgid permissions are removed (Manual) + name: Ensure setuid and setgid permissions are removed in the images (Manual) description: 'Removing setuid and setgid permissions in the images would prevent privilege escalation attacks in the containers.' checks: severity: 'HIGH'