Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

bug(dockercompose): no-new-privileges:true is going to be deprecated in favor of "=" #7077

Open
notdodo opened this issue May 23, 2024 · 0 comments
Labels
bug Something isn't working community Community contribution docker Docker query

Comments

@notdodo
Copy link

notdodo commented May 23, 2024

Expected Behavior

When scanning a docker-compose file, the following value

    security_opt:
      - no-new-privileges=true

should not be marked as an issue

Actual Behavior

Kics returns a finding when using = from command line and Github Action

Screenshot_20240523_220222
Screenshot_20240523_220631

The new docker version warns about

Warning msg="Security options with ':' as a separator are deprecated and will be completely unsupported in 17.04, use '=' instead."

Steps to Reproduce the Problem

  1. create a docker compose file with security_opt with value no-new-privileges=true
  2. docker run -t -v $(pwd):/path checkmarx/kics:latest scan -p /path -o "/path/"

Specifications

  • Version: 2.0.1
  • Platform: Linux - Ubuntu 24.04
  • Subsystem: Docker Compose version v2.27.0
@notdodo notdodo added bug Something isn't working community Community contribution labels May 23, 2024
@github-actions github-actions bot added the docker Docker query label May 23, 2024
@notdodo notdodo changed the title bug(docker): no-new-privileges:true is going to be deprecated in favor of "=" bug(dockercompose): no-new-privileges:true is going to be deprecated in favor of "=" May 23, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working community Community contribution docker Docker query
Projects
None yet
Development

No branches or pull requests

1 participant