k8s-yaml-generator
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
SecuritySecurityexamples/configmap-secret.yaml
MEDIUMSecurityMEDIUM
examples/configmap-secret.yaml
The YAML is a conventional Kubernetes configuration and does not contain apparent malware or sabotage. However, it embeds reusable credentials and an API key in base64-encoded form, which is not encryption and should be treated as credential disclosure. Use an external secret manager or securely provisioned secrets, rotate the exposed values, and restrict Secret access with RBAC. The default namespace is also not ideal for production isolation.
Confidence: 99%Severity: 72%
Audit Metadata