diff --git a/examples/big-bang/README.md b/examples/big-bang/README.md index b9836a14b8..c24cf54f5e 100644 --- a/examples/big-bang/README.md +++ b/examples/big-bang/README.md @@ -27,7 +27,7 @@ Because the same cluster will be running both Traefik and Istio, Istio's Virtual This example adds the `kubescape` binary, which can scan clusters for compliance with the NSA/CISA Kubernetes Hardening Guide ```shell -kubescape scan framework nsa --use-from=/usr/local/bin/kubescape-framework-nsa.json --exceptions=/usr/local/bin/kubescape-exceptions.json --results-locally=true +kubescape scan framework nsa --use-from=/usr/local/bin/kubescape-framework-nsa.json --exceptions=/usr/local/bin/kubescape-exceptions.json ``` ## Services diff --git a/examples/big-bang/files/kubescape-exceptions.json b/examples/big-bang/files/kubescape-exceptions.json index 618d767156..9fd5bfd424 100644 --- a/examples/big-bang/files/kubescape-exceptions.json +++ b/examples/big-bang/files/kubescape-exceptions.json @@ -70,7 +70,6 @@ "name": "logging-ek-es-master" } }, - // This one doesn't work yet { "designatorType": "Attributes", "attributes": { diff --git a/examples/big-bang/zarf.yaml b/examples/big-bang/zarf.yaml index af535e5ccd..be982ebf46 100644 --- a/examples/big-bang/zarf.yaml +++ b/examples/big-bang/zarf.yaml @@ -17,13 +17,15 @@ components: - name: kubescape default: true files: - - source: https://zarf-public.s3-us-gov-west-1.amazonaws.com/kubescape - shasum: 2754848328ce4ca288c8d03bb66a04ada08e326f6621195d28af903ae9d15884 + - source: https://github.com/armosec/kubescape/releases/download/v1.0.123/kubescape-ubuntu-latest + shasum: 6645659d0737367a9465f626883e7266eeefe5668e3aca788cbab9d7ce7e10e1 target: "/usr/local/bin/kubescape" executable: true - - source: https://zarf-public.s3-us-gov-west-1.amazonaws.com/kubescape-nsa - shasum: 25b6dda6ce2ad36bf6a4ea8d1e0ef0c6bda73f9111f4c0d71f260c36a16c6498 + - source: https://github.com/armosec/regolibrary/releases/download/v1.0.62/nsa + shasum: bf66e316904b2adb3bc69529ea3fb6bd81229e3e951b6a02157cd31e42efbe58 target: "/usr/local/bin/kubescape-framework-nsa.json" + - source: "files/kubescape-exceptions.json" + target: "/usr/local/bin/kubescape-exceptions.json" - name: bb-core required: true