apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "ScanReceipt"
metadata:
  name: "mongodb-existing-secret-replicaset-r001"
spec:
  variantRevision: "../variant-revision.yaml"
  renderedObjectSetSHA256: "ba28659f7a827714941ba587c403de0e7afec7bf77a35512ff751bf6c2fdd3a2"
  result: "warn"
  scanner:
    name: "helm-expt-local-rendered-object-scan"
    version: "0.1.0"
  policyBundleDigest: "99e1e78593c8364ddf7f0c3f9aa47ed6fe4bd54733c92b1a18720f152e6a32be"
  findingCounts:
    critical: 0
    high: 0
    medium: 8
    low: 0
    info: 0
  findings:
    -
      id: "dependency-lock-review:common"
      rule: "dependency-lock-review"
      severity: "medium"
      object: "dependency|common|2.39.0"
      message: "Bitnami common dependency metadata is locked before recipe publication"
    -
      id: "extension-slot-review:initdb-configuration"
      rule: "extension-slot-review"
      severity: "medium"
      object: "values|primary.initdb.scripts"
      message: "initdb and extended configuration slots must be scanned when populated"
    -
      id: "helm-hook-lifecycle-policy:no-hooks-boundary"
      rule: "helm-hook-lifecycle-policy"
      severity: "medium"
      object: "source|no-hooks-boundary"
      message: "Retained source scan records hook count 0; supported bases render no hook objects, and future hook-producing paths need lifecycle policy"
    -
      id: "stateful-workload-review:apps/v1|StatefulSet|mongodb|mongodb"
      rule: "stateful-workload-review"
      severity: "medium"
      object: "apps/v1|StatefulSet|mongodb|mongodb"
      message: "MongoDB workload requires storage, upgrade, and rollback policy"
    -
      id: "stateful-workload-review:apps/v1|StatefulSet|mongodb|mongodb-arbiter"
      rule: "stateful-workload-review"
      severity: "medium"
      object: "apps/v1|StatefulSet|mongodb|mongodb-arbiter"
      message: "MongoDB workload requires storage, upgrade, and rollback policy"
    -
      id: "workload-policy:networking.k8s.io/v1|NetworkPolicy|mongodb|mongodb"
      rule: "stateful-workload-review"
      severity: "medium"
      object: "networking.k8s.io/v1|NetworkPolicy|mongodb|mongodb"
      message: "MongoDB storage, network, and disruption policy require production review"
    -
      id: "workload-policy:policy/v1|PodDisruptionBudget|mongodb|mongodb"
      rule: "stateful-workload-review"
      severity: "medium"
      object: "policy/v1|PodDisruptionBudget|mongodb|mongodb"
      message: "MongoDB storage, network, and disruption policy require production review"
    -
      id: "workload-policy:policy/v1|PodDisruptionBudget|mongodb|mongodb-arbiter"
      rule: "stateful-workload-review"
      severity: "medium"
      object: "policy/v1|PodDisruptionBudget|mongodb|mongodb-arbiter"
      message: "MongoDB storage, network, and disruption policy require production review"