infisical-self-host
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyreferences/kubernetes-deployment.md
LOWAnomalyLOW
references/kubernetes-deployment.md
No malicious behavior is evident in the supplied documentation. It describes a legitimate Infisical Kubernetes deployment, but several example settings create security risk if copied unchanged: a placeholder database password, unauthenticated Redis, mutable image tag, command-line secret exposure, and questionable NetworkPolicy rules. Production users should replace example credentials, pin image and chart versions, use safer secret provisioning, enable Redis authentication and TLS where applicable, and validate the network policy against the cluster topology.
Confidence: 98%Severity: 62%
Audit Metadata