Attack in progressA leaked CI key of ‹ci-deploy-bot› is being used to break in: 6 accounts and machines created.Open the case
GitOps and IaC drift V-030
Finds workloads, scheduled jobs and webhooks created or changed outside your GitOps identity.
Checks
| Checks | Needs |
|---|---|
| Checks that no workload is created or changed by anyone but your GitOps identity. | eksaudit workload write |
| Checks that no scheduled job is created or changed by anyone but your GitOps identity. | eksaudit workload write |
| Checks that no admission webhook is created or changed by anyone but your GitOps identity. | eksaudit workload write |
Coverage
Could not read anything this run
Run history
No run has recorded this rule yet.
Findings
No open findings.
What it fed
No case has used a finding of this rule in the last 30 days.
Techniques
None mapped.
How to fix
compare the live trust document, policy fingerprint or manifest to the rendered template (warden preflight); read-only