sonarqube

Description

SonarQube is a self-managed, automatic code review tool that systematically helps you deliver clean code. As a core element of our Sonar solution, SonarQube integrates into your existing workflow and detects issues in your code to help you perform continuous code inspections of your projects. The tool analyses 30+ different programming languages and integrates into your CI pipeline and DevOps platform to ensure that your code meets high-quality standards.

• https://github.com/SonarSource/helm-chart-sonarqube/tree/master/charts/sonarqube
• https://github.com/SonarSource/docker-sonarqube
• https://github.com/SonarSource/sonarqube

Overview

Numbers in the last two columns indicate how many bindings or workloads involve each ServiceAccount.

Identities

🤖 sonarqube-ingress-nginx

Namespace: default  |  Automount: ✅

🔑 Permissions (26)

⚠️ Potential Abuse (6)

The following security risks were found based on the above permissions:

• Read secrets cluster-wide
• Read secrets in a namespace
• Read ConfigMaps cluster-wide
• Read ConfigMaps in a namespace
• List Namespaces (Cluster Reconnaissance)

📦 Workloads (1)

🤖 sonarqube-ingress-nginx-admission

Namespace: default  |  Automount: ✅

🔑 Permissions (2)

⚠️ Potential Abuse (1)

The following security risks were found based on the above permissions:

📦 Workloads (2)