KaifAhmad1 bacc37ab77 fix(ci): suppress CKV_K8S_21 false-positive on Cloud Run Knative YAML ...

checkov scans deploy/gcp/cloudrun-service.yaml as a Kubernetes resource
because it has apiVersion: serving.knative.dev/v1. It flags CKV_K8S_21
('default namespace should not be used') because Cloud Run services have
no metadata.namespace field — they are project/region scoped, not
namespace scoped. Add CKV_K8S_21 to .checkov.yaml skip-check and to the
inline skip comment in cloudrun-service.yaml.

2026-06-24 14:13:00 +05:30

..

azure

fix(ci): remove Knative pod-level securityContext and fix Bicep null ternary

2026-06-24 13:41:28 +05:30

fly

fix(deploy): harden security in deployment templates and explorer app

2026-06-24 12:51:09 +05:30

gcp

fix(ci): suppress CKV_K8S_21 false-positive on Cloud Run Knative YAML

2026-06-24 14:13:00 +05:30

helm

fix(ci): suppress false-positive checkov K8s checks on Knative YAML; drop redundant seccomp annotation

2026-06-24 13:55:41 +05:30

kubernetes

fix(ci): fix 2 remaining checkov HIGH findings and Terrascan seccomp warnings

2026-06-24 13:15:41 +05:30

railway

Add Knowledge Explorer deployment templates

2026-06-23 13:37:25 +05:00

render

Add Knowledge Explorer deployment templates

2026-06-23 13:37:25 +05:00