Clarified the token scope and future plans for the next security scan to refer to it

This commit is contained in:
Sergey Kanzhelev
2025-05-27 21:48:18 +00:00
parent 2f94274c88
commit a512de6e09

View File

@@ -41,7 +41,12 @@ var _ = SIGDescribe("Container Runtime Conformance Test", func() {
ginkgo.Describe("container runtime conformance blackbox test", func() {
ginkgo.Context("when running a container with a new image", func() {
// The service account only has pull permission
// For the future security scans:
// The service account only has pull permission.
// The container repo is only made private to test private container pulling.
// All container images in the repo are public container images
// TODO: The long term plan is to come up with the alternative solution to test it:
// https://github.com/kubernetes/kubernetes/issues/130271
auth := `
{
"auths": {