Verifique Dockerfiles, fluxos do GitHub Actions e manifestos Kubernetes para encontrar imagens não fixadas, permissões amplas, configurações privilegiadas e controles de execução ausentes.
The rules are intentionally conservative. Review every finding against the image, cluster policy, workflow permissions, and environment you actually use.
This local ruleset looks for common practical mistakes, not full policy compliance. Use it alongside image scanning, admission controls, CI policy checks, and your organization’s security review.