semantica

mirror of https://github.com/semantica-agi/semantica.git synced 2026-08-29 04:26:20 +00:00

Files

T

KaifAhmad1 ed44260ec3 fix: suppress CKV_K8S_21 false positive on knowledge-explorer Helm chart

Checkov's helm framework renders the chart without a namespace override,
so metadata.namespace (set to .Release.Namespace, bound only at install
time) always resolves to "default" and trips CKV_K8S_21 on service.yaml,
deployment.yaml, and configmap.yaml even though the chart is
namespace-agnostic by design.

Suppressed via per-file checkov:skip comments, following the same
convention already used for the Cloud Run false positives in
deploy/gcp/cloudrun-service.yaml.

2026-07-25 16:49:25 +05:30

azure

fix(deploy): address security and correctness blockers from PR review

2026-06-24 22:55:18 +05:30

fly

fix(deploy): harden security in deployment templates and explorer app

2026-06-24 12:51:09 +05:30

gcp

fix(deploy): address security and correctness blockers from PR review

2026-06-24 22:55:18 +05:30

helm

fix: suppress CKV_K8S_21 false positive on knowledge-explorer Helm chart