Skip to content

Commit

Permalink
Some adjustments after review
Browse files Browse the repository at this point in the history
  • Loading branch information
daniel-teuchert-sonarsource committed Dec 19, 2023
1 parent 7eb65ea commit 431dbcc
Showing 1 changed file with 0 additions and 3 deletions.
3 changes: 0 additions & 3 deletions rules/S6865/kubernetes/rule.adoc
Original file line number Diff line number Diff line change
@@ -1,6 +1,3 @@
Service account tokens should not be mounted in pods


== Why is this an issue?

Service account tokens are Kubernetes secrets created automatically to authenticate applications running inside pods to the API server. If a pod is compromised, an attacker could use this token to gain access to other resources in the cluster.
Expand Down

0 comments on commit 431dbcc

Please sign in to comment.