Missing Network Policy

MEDIUM CWE-284 · Improper Access Control

Description

Detects Kubernetes deployments without associated NetworkPolicy resources.

What Shoulder detects

Workload has no NetworkPolicy for network segmentation

How to fix

Define a NetworkPolicy to control pod network access.

```yaml
kind: NetworkPolicy
spec:
  podSelector: {}
  policyTypes: [Ingress]
```

Learn more: https://shoulder.dev/learn/kubernetes/cwe-284/missing-network-policy

Applies to

Languages

☸️ Kubernetes 📄 YAML

Frameworks

kubernetes

References

Documentation ↗ Learn about CWE-284

Scan for this issue

Detect with Shoulder CLI

npx @shoulderdev/cli trust --rule=kubernetes-missing-network-policy .