netchecks

Description

Netchecks proactively verifies whether your security controls are working as intended.

• https://github.com/hardbyte/netchecks

Overview

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

🤖 netcheck-operator

Namespace: default  |  Automount: ❌

🔑 Permissions (9)

⚠️ Potential Abuse (9)

The following security risks were found based on the above permissions:

• Read pod logs cluster-wide
• Read pod logs in a namespace
• Modify ConfigMaps cluster-wide
• Modify ConfigMaps in a namespace
• Manage CronJobs cluster-wide (scheduled privileged execution, persistence)
• Manage CronJobs in a namespace (scheduled privileged execution, persistence)
• Manage Jobs cluster-wide (one-off privileged execution)
• Manage Jobs in a namespace (one-off privileged execution)

📦 Workloads (1)

🤖 netchecks-kyverno-plugin

Namespace: default  |  Automount: ❌

🔑 Permissions (7)

⚠️ Potential Abuse (2)

The following security risks were found based on the above permissions:

📦 Workloads (1)

🤖 netchecks-policy-reporter

Namespace: default  |  Automount: ❌

🔑 Permissions (5)

⚠️ Potential Abuse (2)

The following security risks were found based on the above permissions:

📦 Workloads (1)

🤖 netchecks-ui

Namespace: default  |  Automount: ❌

🔑 Permissions (1)

⚠️ Potential Abuse (1)

The following security risks were found based on the above permissions:

📦 Workloads (1)