Image tag is not set to Fixed misconfiguration detected in code

Rule Details

Cortex AppSec Rule ID	APPSEC_K8S_14
Category - Subcategory	Kubernetes - Resource Management
Provider	OTHER
Severity	LOW
Framework	Helm, Kubernetes, Kustomize, Terraform, Terraform Plan

Impact

You can add a :fixed tag to a container image, making it easier to determine what it contains, for example to specify the version. Container image tags and digests are used to refer to a specific version or instance of a container image. We recommend you avoid using the :latest and :blank tags when deploying containers in production as it is harder to track which version of the image is running, and more difficult to roll back properly.

How to Fix

Resource: Container Argument: image:tag (Optional)

Defines the image version by a specific number or by using latest. [source,go]

apiVersion: v1 kind: Pod metadata: name: spec: containers:

• name:
• image: :
• image:
• image: :latest

---