Control: Deployment containers should minimize the admission of containers with added capability
Description
Container in Deployment should minimize the admission of containers with added capability. Adding capabilities to container increases the risk of container breakout.
Usage
Run the control in your terminal:
powerpipe control run kubernetes_compliance.control.deployment_container_with_added_capabilitiesSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run kubernetes_compliance.control.deployment_container_with_added_capabilities --shareSQL
This control uses a named query:
deployment_container_with_added_capabilities