danekantner

[HCL specs](https://github.com/hashicorp/hcl/blob/main/hclsyntax/spec.md) indicate `#` is a "line comment" and declares that only the `/* */` syntax meets the categorization of an "inline comment" This is counter-intuitive to how most HCL-based...

CVE-2023-38408 is not found on any images that other scanners (Google's own container registry scanner, Orca) show have it [us.gcr.io/tempus-container-registry/cert-manager-identity-sidecar:latest](http://us.gcr.io/tempus-container-registry/cert-manager-identity-sidecar:latest) is a public image flagged by other scanners as having...

StackRox 4.4.0 collectors are crashing on COS GKE - failed to initialize collector kernel components

9

StackRox 4.4.0 collectors are crashing on GKE Container Optimized OS nodes Node info: ``` Kernel version 5.15.133+ OS image Container-Optimized OS from Google Container runtime version containerd://1.7.10 kubelet version v1.27.8-gke.1067004...

Create CredentialExpiryBanner warnings for certificate expiration of central-db-tls certificates

1

The default certificates that are created for postgres client/server connections that are stored in `central-db-tls` have a 1 year expiration. The [banners that typically warn](https://github.com/stackrox/stackrox/blob/master/ui/apps/platform/cypress/integration/credentialExpiry/credentialExpiry.test.js) of `central` or `scanner` certification...

### Community Note * Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request. * Please do...

google_access_context_manager_service_perimeter should support group: identity type

1

### Community Note * Please vote on this issue by adding a 👍 [reaction](https://blog.github.com/2016-03-10-add-reactions-to-pull-requests-issues-and-comments/) to the original issue to help the community and maintainers prioritize this request. * Please do...