Setup Manifest SAST

[jon-nfc]

To assist with the security of the manifests they should be scanned for potential problems.

Details

Setup a SAST scanner for the manifests. The manifests must be fully tested in their expanded state, including any components and overlays.

Links

• kubescape
• Trivy

Requirements

• Base is scanned
• Each Overlay with the base is scanned
• Each component with the base is scanned