add .semgrep.yml

Author: TheTeaCat

.semgrep.yml

@@ -0,0 +1,9 @@
+rules:
+  - id: yaml.kubernetes.security.privileged-container.privileged-container
+    severity: WARNING
+    languages: [yaml]
+    patterns:
+      - pattern: privileged: true
+    message: "Privileged containers should be avoided."
+    metadata:
+      ignore: true

kube_templates/daemonset.yaml

@@ -19,7 +19,7 @@ spec:
         image: ghcr.io/firetail-io/kubernetes-sensor:v0.1.5
         imagePullPolicy: IfNotPresent
         securityContext:
-          privileged: true # nosemgrep: yaml.kubernetes.security.privileged-container.privileged-container
+          privileged: true
         env:
         - name: FIRETAIL_API_URL
           value: "https://api.logging.eu-west-1.sandbox.firetail.app/logs/bulk"