HostPath Volume Mounted

Description

Detects HostPath volumes that mount directories from the host filesystem into pods.

What Shoulder detects

HostPath volumes mount directories from the host filesystem into the pod.

How to fix

Use PersistentVolumeClaim or emptyDir instead of hostPath.

```yaml
volumes:
  - name: data
    persistentVolumeClaim:
      claimName: my-pvc
```

Learn more: https://shoulder.dev/learn/kubernetes/cwe-668/hostpath-volume

Applies to

Languages

📄 YAML

Frameworks

kubernetes

References

Documentation ↗ Learn about CWE-668

Scan for this issue

Detect with Shoulder CLI

npx @shoulderdev/cli trust --rule=kubernetes-hostpath-volume .