apiVersion: "helm-expt.confighub.com/v1alpha1"
kind: "ScanReceipt"
metadata:
  name: "mongodb-static-passwords-r001"
spec:
  variantRevision: "../variant-revision.yaml"
  renderedObjectSetSHA256: "4c5f0cd0bc6bffd0ff46b15cdb23ce44dba155120b6be46952d7da70ade25a68"
  result: "warn"
  scanner:
    name: "helm-expt-local-rendered-object-scan"
    version: "0.1.0"
  policyBundleDigest: "99e1e78593c8364ddf7f0c3f9aa47ed6fe4bd54733c92b1a18720f152e6a32be"
  findingCounts:
    critical: 0
    high: 0
    medium: 8
    low: 0
    info: 0
  findings:
    -
      id: "dependency-lock-review:common"
      rule: "dependency-lock-review"
      severity: "medium"
      object: "dependency|common|2.39.0"
      message: "Bitnami common dependency metadata is locked before recipe publication"
    -
      id: "extension-slot-review:initdb-configuration"
      rule: "extension-slot-review"
      severity: "medium"
      object: "values|primary.initdb.scripts"
      message: "initdb and extended configuration slots must be scanned when populated"
    -
      id: "generated-secret-ownership:v1|Secret|mongodb|mongodb"
      rule: "generated-secret-ownership"
      severity: "medium"
      object: "v1|Secret|mongodb|mongodb"
      message: "MongoDB Secret content and ownership must be explicit before production promotion"
    -
      id: "helm-hook-lifecycle-policy:no-hooks-boundary"
      rule: "helm-hook-lifecycle-policy"
      severity: "medium"
      object: "source|no-hooks-boundary"
      message: "Retained source scan records hook count 0; supported bases render no hook objects, and future hook-producing paths need lifecycle policy"
    -
      id: "stateful-workload-review:apps/v1|Deployment|mongodb|mongodb"
      rule: "stateful-workload-review"
      severity: "medium"
      object: "apps/v1|Deployment|mongodb|mongodb"
      message: "MongoDB workload requires storage, upgrade, and rollback policy"
    -
      id: "workload-policy:networking.k8s.io/v1|NetworkPolicy|mongodb|mongodb"
      rule: "stateful-workload-review"
      severity: "medium"
      object: "networking.k8s.io/v1|NetworkPolicy|mongodb|mongodb"
      message: "MongoDB storage, network, and disruption policy require production review"
    -
      id: "workload-policy:policy/v1|PodDisruptionBudget|mongodb|mongodb"
      rule: "stateful-workload-review"
      severity: "medium"
      object: "policy/v1|PodDisruptionBudget|mongodb|mongodb"
      message: "MongoDB storage, network, and disruption policy require production review"
    -
      id: "workload-policy:v1|PersistentVolumeClaim|mongodb|mongodb"
      rule: "stateful-workload-review"
      severity: "medium"
      object: "v1|PersistentVolumeClaim|mongodb|mongodb"
      message: "MongoDB storage, network, and disruption policy require production review"