Control: Job containers should minimize the admission of containers with added capability
Description
Containers in Job should minimize the admission of containers with added capability. Adding capabilities to container increases the risk of container breakout.
Usage
Run the control in your terminal:
powerpipe control run kubernetes_compliance.control.job_container_with_added_capabilitiesSnapshot and share results via Turbot Pipes:
powerpipe loginpowerpipe control run kubernetes_compliance.control.job_container_with_added_capabilities --shareSQL
This control uses a named query:
job_container_with_added_capabilities