cwielenb/CNCF-Dataset huggingface dataset:
Project: Zenko (Runtime / Cloud Native Storage)
File: XDM_cluster_NoNFS.pdf

Server 1 (Master) XDM
ServicesCluster
XDM
ServicesXDM
Services
Server 2
Server 3XDM
Services
XDM
ServicesXDM
Services
XDM
Services
XDM
ServicesXDM
ServicesCLI
OrbitXDM
Instance
AzureGCPClientK8S
K8S
K8SRING
AWS
Project: Zenko (Runtime / Cloud Native Storage)
File: Zenko_arch.pdf

OrbitCloudserverTransient
Source 
AWS
GCP
AzureS3C/RINGZenko
Client
Zenko 
NFS
Backbeat
Ka�a
queuebucket & object 
namespace
MongoDBClouds( d a t a  a n d
m e t a d a t a )CLINFSsproxyd
Project: Zenko (Runtime / Cloud Native Storage)
File: Zenko_cluster_NoNFS.pdf

Server 1 (Master) Zenko 
ServicesCluster
Zenko 
ServicesZenko 
Services
Server 2
Server 3Zenko 
Services
Zenko 
ServicesZenko 
Services
Zenko 
Services
Zenko 
ServicesZenko 
ServicesCLI
GUIZenko 
Instance
AzureGCPClientK8S
K8S
K8SRING
AWS
Project: KubeArmor (Provisioning / Security & Compliance)
File: kubearmorhostpolicy-spec-diagram.pdf

NFUBEBUBname: [policy name]namespace: [namespace name]TQFDTFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuOPEF4FMFDUPSNBUDI-BCFMTLFZWBMVFQSPDFTT
NBUDI1BUITQBUI<BCTPMVUFFYFDVUBCMFQBUI>PXOFS0OMZ<USVF]GBMTF>GSPN4PVSDFQBUI<BCTPMVUFFYFDVUBCMFQBUI>
NBUDI%JSFDUPSJFTPXOFS0OMZ<USVF]GBMTF>GSPN4PVSDFQBUI<BCTPMVUFFYFDVUBCMFQBUI>EJS<BCTPMVUFEJSFDUPSZQBUI>SFDVSTJWF<USVF]GBMTF>
NBUDI1BUUFSOTQBUUFSO<SFHFYQBUUFSO>PXOFS0OMZ<USVF]GBMTF>GJMF
NBUDI1BUITQBUI<BCTPMVUFGJMFQBUI>PXOFS0OMZ<USVF]GBMTF>GSPN4PVSDFQBUI<BCTPMVUFFYFDVUBCMFQBUI>
NBUDI%JSFDUPSJFT
PXOFS0OMZ<USVF]GBMTF>GSPN4PVSDFQBUI<BCTPMVUFFYFDVUBCMFQBUI>EJS<BCTPMVUFEJSFDUPSZQBUI>SFDVSTJWF<USVF]GBMTF>
NBUDI1BUUFSOTQBUUFSO<SFHFYQBUUFSO>PXOFS0OMZ<USVF]GBMTF>SFBE0OMZ<USVF]GBMTF>SFBE0OMZ<USVF]GBMTF>SFBE0OMZ<USVF]GBMTF>
TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFu
TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuTFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuBDUJPO\"VEJU]#MPDL^
TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFu
TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFu
TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuOFUXPSL
NBUDI1SPUPDPMTQSPUPDPM\UDQ]VEQ]JDNQ^GSPN4PVSDFQBUI<BCTPMVUFFYFDVUBCMFQBUI>DBQBCJMJUJFT
NBUDI$BQBCJMJUJFTDBQBCJMJUZ\OFU@SBX^GSPN4PVSDFQBUI<BCTPMVUFFYFDVUBCMFQBUI>TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuTFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuTFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuBDUJPO\"VEJU]#MPDL^TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuTFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuTFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFu
List
List
ListList
List
ListListListOptional
Optional
Optional
OptionalOptionalOptionalOptionalOptionalOptionalOptional
OptionalOptionalMandatoryMandatory
Mandatory if these are not deﬁned in each ruleKubeArmorHostPolicy Spec Diagram
BDUJPO\"VEJU]#MPDL^BDUJPO\"VEJU]#MPDL^BDUJPO\"VEJU]#MPDL^
BDUJPO\"VEJU]#MPDL^BDUJPO\"VEJU]#MPDL^BDUJPO\"VEJU]#MPDL^BDUJPO\"VEJU]#MPDL^
BDUJPO\"VEJU]#MPDL^BDUJPO\"VEJU]#MPDL^
BDUJPO\"VEJU]#MPDL^BDUJPO\"VEJU]#MPDL^Key Diﬀerence between KubeArmorPolicy and KubeArmorHostPolicyKubeArmorPolicy — action: {Allow | Audit | Block}KubeArmorHostPolicy — action: {Allow | Audit | Block}In the case that ‘fromSource’ is deﬁned, then ‘Allow’ is available.No Namespace in the case of KubeArmorHostPolicy
nodeSelector (not selector)
ListListListList
ListList
Project: ThreatMapper (Provisioning / Security & Compliance)
File: Security Report for Security Test 1 2021-04-19 16_03_58.pdf

Issues report for Security Test 1
in REST Project 3/https://164.90.157.161 Test Suite/https://164.90.157.161 Test Case 1
Summary
Started at 2021-04-19 16:03:58
Time taken 00:05:00.716
Total scans performed: 2189
Issues found: 2
Scan Issues Found In Test StepsTotal Issues 
Found
HTTP Method 
FuzzingRequest 1 2 2
Detailed Info
Issues are grouped by Security scan.
HTTP Method Fuzzing
An HTTP Method Fuzzing Scan attempts to use other HTTP verbs (methods) than those defined in 
an API. For instance, if you have defined GET and POST, it will send requests using the DELETE 
and PUT verbs, expecting an appropriate HTTP error response and reporting alerts if it doesn't 
receive it.
Sometimes, unexpected HTTP verbs can overwrite data on a server or get data that shouldn't be 
revealed to clients.
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/scope
Request OPTIONS https://164.90.157.161/deepfence/v1.5/scope HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method OPTIONS
ResponseContent-type: text/plain
2 Content length: 
Full response:
ok
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource. OPTIONS
Issue Number #1
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/scope
Request HEAD https://164.90.157.161/deepfence/v1.5/scope HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method HEAD
Response No content
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.HEAD
Issue Number #2
Project: ThreatMapper (Provisioning / Security & Compliance)
File: Security Report for Security Test 2 2021-04-19 20_18_17.pdf

Issues report for Security Test 2
in REST Project 3/https://164.90.157.161 Test Suite/https://164.90.157.161 Test Case 1
Summary
Started at 2021-04-19 20:18:17
Time taken 00:04:59.353
Total scans performed: 2189
Issues found: 2
Scan Issues Found In Test StepsTotal Issues 
Found
HTTP Method 
FuzzingRequest 1 2 2
Detailed Info
Issues are grouped by Security scan.
HTTP Method Fuzzing
An HTTP Method Fuzzing Scan attempts to use other HTTP verbs (methods) than those defined in 
an API. For instance, if you have defined GET and POST, it will send requests using the DELETE 
and PUT verbs, expecting an appropriate HTTP error response and reporting alerts if it doesn't 
receive it.
Sometimes, unexpected HTTP verbs can overwrite data on a server or get data that shouldn't be 
revealed to clients.
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/scope
Request OPTIONS https://164.90.157.161/deepfence/v1.5/scope HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method OPTIONS
ResponseContent-type: text/plain
2 Content length: 
Full response:
ok
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource. OPTIONS
Issue Number #1
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/scope
Request HEAD https://164.90.157.161/deepfence/v1.5/scope HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method HEAD
Response No content
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.HEAD
Issue Number #2
Project: ThreatMapper (Provisioning / Security & Compliance)
File: Security Report for Security Test 2 2021-04-14 19_53_06.pdf

Issues report for Security Test 2
in Project 6/Security Test Suite 2/https://164.90.157.161 TestCase
Summary
Started at 2021-04-14 19:53:06
Time taken 00:03:40.385
Total scans performed: 1726
Issues found: 0
Project: ThreatMapper (Provisioning / Security & Compliance)
File: Security Report for Security Test 1 2021-04-19 15_48_09.pdf

Issues report for Security Test 1
in REST Project 3/https://164.90.157.161 Test Suite/https://164.90.157.161 Test Case 1
Summary
Started at 2021-04-19 15:48:09
Time taken 00:00:28.514
Total scans performed: 209
Issues found: 2
Scan Issues Found In Test StepsTotal Issues 
Found
HTTP Method 
FuzzingRequest 1 2 2
Detailed Info
Issues are grouped by Security scan.
HTTP Method Fuzzing
An HTTP Method Fuzzing Scan attempts to use other HTTP verbs (methods) than those defined in 
an API. For instance, if you have defined GET and POST, it will send requests using the DELETE 
and PUT verbs, expecting an appropriate HTTP error response and reporting alerts if it doesn't 
receive it.
Sometimes, unexpected HTTP verbs can overwrite data on a server or get data that shouldn't be 
revealed to clients.
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/scope
Request OPTIONS https://164.90.157.161/deepfence/v1.5/scope HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method OPTIONS
ResponseContent-type: text/plain
2 Content length: 
Full response:
ok
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource. OPTIONS
Issue Number #1
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/scope
Request HEAD https://164.90.157.161/deepfence/v1.5/scope HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method HEAD
Response No content
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.HEAD
Issue Number #2
Project: Trivy-Operator (Provisioning / Security & Compliance)
File: design_namespace_security_report.pdf

Aqua Starboard Namespace Security Report  
Namespace: sock -shop  
Generated on  18-FEB-2021  
Technical section:  
Scanner  
version  
 
Statistics:  
Number of containers  
Number of images  
 
Summary section:  
 
Top 5 vulnerable images  by count : 
Image  Tag Critical  High  Other  
weaveworksdemos/carts  0.4.8 9 5 55 
library/mongo  latest  7 0 34 
weaveworksdemos/catalogue  0.3.5 5 4 21 
weaveworksdemos/catalogue -db 0.3.0 1 5 20 
weaveworksdemos/front -end 0.3.12  0 3 17 
 
Top 5 vulnerabilities by score:  
Name  Severity  Score  Affected pods  
CVE-2019 -20920  high 8.1 1 
CVE-2020 -7788 high 7.3 2 
CVE-2020 -15999  medium  6.5 1 
CVE-2020 -1971   medium  5.9 1 
CVE-2020 -8908 low 3.3 1 
 
Top 5 failed workload configs:  
true  Name  Severity  Category  Affected pods  
false memoryLimitsMissing  warning  Resources  10 
false notReadOnlyRootFilesystem  warning  Security  10 
false livenessProbeMissing  warning  Health Checks  8 
false runAsRootAllowed  warning  Security  7 
false cpuRequestsMissing  warning  Resources  6 
 
 Details section (Do not repeat replicated pods with the same image in the same deployment)  
 
Deployment name:  carts  
Image name:  weaveworksdemos/carts :0.48  
Vulnerabilities  129 CRITICAL  341 HIGH  393 MEDIUM  47 LOW  
Failed Configs  2 Danger  10 Severe  15 Warning   
 
Only critical and high  vulnerabilities  
ID Severity  Resource  Installed Version  Fixed Version  
CVE-2018 -1312  CRITICAL  apache2 -data 2.4.10 -10+deb8u7  2.4.10 -10+deb8u12  
….     
 
Only failed configs  
PASS  ID Severity  Category  
false cpuLimitsMissing  warning  Resources  
….    
 
===============  
… More details section of other deployments/images.
Project: KubeArmor (Provisioning / Security & Compliance)
File: kubearmorpolicy-spec-diagram.pdf

NFUBEBUBname: [policy name]namespace: [namespace name]TQFDTFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuTFMFDUPSNBUDI-BCFMTLFZWBMVFQSPDFTT
NBUDI1BUITQBUI<BCTPMVUFFYFDVUBCMFQBUI>PXOFS0OMZ<USVF]GBMTF>GSPN4PVSDFQBUI<BCTPMVUFFYFDVUBCMFQBUI>
NBUDI%JSFDUPSJFTPXOFS0OMZ<USVF]GBMTF>GSPN4PVSDFQBUI<BCTPMVUFFYFDVUBCMFQBUI>EJS<BCTPMVUFEJSFDUPSZQBUI>SFDVSTJWF<USVF]GBMTF>
NBUDI1BUUFSOTQBUUFSO<SFHFYQBUUFSO>PXOFS0OMZ<USVF]GBMTF>GJMF
NBUDI1BUITQBUI<BCTPMVUFGJMFQBUI>PXOFS0OMZ<USVF]GBMTF>GSPN4PVSDFQBUI<BCTPMVUFFYFDVUBCMFQBUI>
NBUDI%JSFDUPSJFT
PXOFS0OMZ<USVF]GBMTF>GSPN4PVSDFQBUI<BCTPMVUFFYFDVUBCMFQBUI>EJS<BCTPMVUFEJSFDUPSZQBUI>SFDVSTJWF<USVF]GBMTF>
NBUDI1BUUFSOTQBUUFSO<SFHFYQBUUFSO>PXOFS0OMZ<USVF]GBMTF>SFBE0OMZ<USVF]GBMTF>SFBE0OMZ<USVF]GBMTF>SFBE0OMZ<USVF]GBMTF>
TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFu
TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuTFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuBDUJPO\"MMPX]"VEJU]#MPDL^
BDUJPO\"MMPX]"VEJU]#MPDL^
BDUJPO\"MMPX]"VEJU]#MPDL^
BDUJPO\"MMPX]"VEJU]#MPDL^TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuBDUJPO\"MMPX]"VEJU]#MPDL^
TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuBDUJPO\"MMPX]"VEJU]#MPDL^
TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuBDUJPO\"MMPX]"VEJU]#MPDL^OFUXPSL
NBUDI1SPUPDPMTQSPUPDPM\UDQ]VEQ]JDNQ^GSPN4PVSDFQBUI<BCTPMVUFFYFDVUBCMFQBUI>DBQBCJMJUJFT
NBUDI$BQBCJMJUJFTDBQBCJMJUZ\OFU@SBX^GSPN4PVSDFQBUI<BCTPMVUFFYFDVUBCMFQBUI>TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuBDUJPO\"MMPX]"VEJU]#MPDL^TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuBDUJPO\"MMPX]"VEJU]#MPDL^TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuBDUJPO\"MMPX]"VEJU]#MPDL^TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuBDUJPO\"MMPX]"VEJU]#MPDL^TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuBDUJPO\"MMPX]"VEJU]#MPDL^TFWFSJUZ<>UBHT<tUBHutUBHuj>NFTTBHFtNFTTBHFIFSFuBDUJPO\"MMPX]"VEJU]#MPDL^
List
List
ListList
List
ListListListOptional
Optional
Optional
OptionalOptionalOptionalOptionalOptionalOptionalOptional
OptionalOptionalMandatoryMandatory
Mandatory if these are not deﬁned in each ruleKubeArmorPolicy Spec Diagram
ListListListList
ListList
Project: ThreatMapper (Provisioning / Security & Compliance)
File: Security Report for Security Test 1 2021-04-19 22_07_32.pdf

Issues report for Security Test 1
in REST Project 2/https://164.90.157.161 Test Suite/https://164.90.157.161 Test Case 1
Summary
Started at 2021-04-19 22:07:32
Time taken 00:05:00.695
Total scans performed: 2189
Issues found: 3
Scan Issues Found In Test StepsTotal Issues 
Found
HTTP Method 
FuzzingRequest 1 3 3
Detailed Info
Issues are grouped by Security scan.
HTTP Method Fuzzing
An HTTP Method Fuzzing Scan attempts to use other HTTP verbs (methods) than those defined in 
an API. For instance, if you have defined GET and POST, it will send requests using the DELETE 
and PUT verbs, expecting an appropriate HTTP error response and reporting alerts if it doesn't 
receive it.
Sometimes, unexpected HTTP verbs can overwrite data on a server or get data that shouldn't be 
revealed to clients.
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/node-severity
Request OPTIONS https://164.90.157.161/deepfence/v1.5/node-severity HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method OPTIONS
ResponseContent-type: text/plain
2 Content length: 
Full response:
ok
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource. OPTIONS
Issue Number #1
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/node-severity
Request HEAD https://164.90.157.161/deepfence/v1.5/node-severity HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method HEAD
Response No content
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.HEAD
Issue Number #2
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/node-severity
Request POST https://164.90.157.161/deepfence/v1.5/node-severity HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method POST
ResponseContent-type: application/json
535 Content length: 
Full response:
{"data":{"siddharth-8vcpu-agent":{"containers":{},"kubernetes_cluster_name
":"","pod_id_to_ip":{},"pod_scope_id":{},"pods":{},"probe_id":"
3c6bb1217b3b2388","severity":null},"siddharth-8vcpu-console":{"containers"
:{},"kubernetes_cluster_name":"","pod_id_to_ip":{},"pod_scope_id":{},"pods
":{},"probe_id":"35ccbb56f0e12a5d","severity":null},"siddharth-dev-
8vcpu-agent3":{"containers":{},"kubernetes_cluster_name":"","pod_id_to_ip"
:{},"pod_scope_id":{},"pods":{},"probe_id":"7726d7c69133fbc2","severity":
null}},"error":null,"success":true}
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.POST
Issue Number #3
Project: ThreatMapper (Provisioning / Security & Compliance)
File: Security Report for Security Test 1 2021-04-19 22_30_28.pdf

Issues report for Security Test 1
in REST Project 2/https://164.90.157.161 Test Suite/https://164.90.157.161 Test Case 1
Summary
Started at 2021-04-19 22:30:28
Time taken 00:04:54.007
Total scans performed: 2189
Issues found: 3
Scan Issues Found In Test StepsTotal Issues 
Found
HTTP Method 
FuzzingRequest 1 3 3
Detailed Info
Issues are grouped by Security scan.
HTTP Method Fuzzing
An HTTP Method Fuzzing Scan attempts to use other HTTP verbs (methods) than those defined in 
an API. For instance, if you have defined GET and POST, it will send requests using the DELETE 
and PUT verbs, expecting an appropriate HTTP error response and reporting alerts if it doesn't 
receive it.
Sometimes, unexpected HTTP verbs can overwrite data on a server or get data that shouldn't be 
revealed to clients.
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/node-severity
Request OPTIONS https://164.90.157.161/deepfence/v1.5/node-severity HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method OPTIONS
ResponseContent-type: text/plain
2 Content length: 
Full response:
ok
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource. OPTIONS
Issue Number #1
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/node-severity
Request HEAD https://164.90.157.161/deepfence/v1.5/node-severity HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method HEAD
Response No content
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.HEAD
Issue Number #2
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/node-severity
Request POST https://164.90.157.161/deepfence/v1.5/node-severity HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method POST
ResponseContent-type: application/json
535 Content length: 
Full response:
{"data":{"siddharth-8vcpu-agent":{"containers":{},"kubernetes_cluster_name
":"","pod_id_to_ip":{},"pod_scope_id":{},"pods":{},"probe_id":"
3c6bb1217b3b2388","severity":null},"siddharth-8vcpu-console":{"containers"
:{},"kubernetes_cluster_name":"","pod_id_to_ip":{},"pod_scope_id":{},"pods
":{},"probe_id":"35ccbb56f0e12a5d","severity":null},"siddharth-dev-
8vcpu-agent3":{"containers":{},"kubernetes_cluster_name":"","pod_id_to_ip"
:{},"pod_scope_id":{},"pods":{},"probe_id":"7726d7c69133fbc2","severity":
null}},"error":null,"success":true}
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.POST
Issue Number #3
Project: ThreatMapper (Provisioning / Security & Compliance)
File: Security Report for Security Test 1 2021-04-19 20_00_36.pdf

Issues report for Security Test 1
in REST Project 3/https://164.90.157.161 Test Suite/https://164.90.157.161 Test Case 1
Summary
Started at 2021-04-19 20:00:36
Time taken 00:04:56.923
Total scans performed: 2189
Issues found: 2
Scan Issues Found In Test StepsTotal Issues 
Found
HTTP Method 
FuzzingRequest 1 2 2
Detailed Info
Issues are grouped by Security scan.
HTTP Method Fuzzing
An HTTP Method Fuzzing Scan attempts to use other HTTP verbs (methods) than those defined in 
an API. For instance, if you have defined GET and POST, it will send requests using the DELETE 
and PUT verbs, expecting an appropriate HTTP error response and reporting alerts if it doesn't 
receive it.
Sometimes, unexpected HTTP verbs can overwrite data on a server or get data that shouldn't be 
revealed to clients.
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/scope
Request OPTIONS https://164.90.157.161/deepfence/v1.5/scope HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method OPTIONS
ResponseContent-type: text/plain
2 Content length: 
Full response:
ok
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource. OPTIONS
Issue Number #1
Scan HTTP Method Fuzzing
Severity WARNING
Endpoint https://164.90.157.161/deepfence/v1.5/scope
Request HEAD https://164.90.157.161/deepfence/v1.5/scope HTTP/1.1
Test Step Request 1
Modified 
ParametersName Value
method HEAD
Response No content
Alerts Valid HTTP Status Codes: Response status code: 200 is not in acceptable list of status codes
Action Points You should check if the HTTP method  should really be allowed for this resource.HEAD
Issue Number #2
Project: Tracetest (Observability and Analysis / Observability)
File: SL_cheat_sheet.pdf

B a s i c  s e l e c t o r s
G r o u p i n g  s e l e c t o r sP s e u d o - c l a s s e sC o m b i n a t o r sE m p t y  s e l e c t o r
A N D  o p e r a t o rT r a c e  s t r u c t u r a l  p s e u d o - c l a s s e sD e s c e n d a n t  c o m b i n a t o rO R  o p e r a t o r
A t t r i b u t e  s e l e c t o rSelect all spans in a trace. 
Example:
Select all the matching spans by applying an AND 
condition between the given attributes.

Syntax:These pseudo-classes relate to the location of a 
span within the trace waterfall.

Syntax:The “ ” (space) combinator selects spans that 
are descendants of the first span.

Syntax:Select all the matching spans by applying an OR 
condition between the given selectors.

Syntax:
Select all spans that have the given attribute.
Syntax:
Examples:Examples: Examples:
Examples:Examples:Examples:
// An empty selector is an empty string
span [ attr 1  =  " value "  attr 2  =  " value "]// Select the first span from the matching lis t
// Select the last span from the matching lis t
// Select a span from the matching list based 
on a given index (n starts at 1)
span [ attr =  " value "] :firs t

span [ attr =  " value "] :las t

span [ attr =  " value "] :nth _ child(n)span [ attr 1  =  " value "]  span [ attr 2  =  " value "]span [ attr 1  =  " value "],  span [ attr 2  =  " value "]
span [ attr =  " value "]
span [ attr contains " value "]
// Select all spans of type htt p
// Select all spans where the service name 
contains the word " api "
span [ tracetest.span.type =  " http "]

span [ service.name contains " api "]// Select all spans of type http and with 
service name " cart-api "
span [ tracetest.span.type =  " http "  
service.name =  " cart-api "]// Select the first span of type htt p
// Select the last span of type htt p
// Select the third span of type htt p
span [ tracetest.span.type =  " http "] :firs t

span [ tracetest.span.type =  " http "] :las t

span [ tracetest.span.type =  " http "] :nth _ child( 3 )
// Select all spans of type http that are 
descendants of the span with service name " cart-api "
span [ service.name =  " cart-api "]  
span [ tracetest.span.type =  " http "]// Select all spans with service name " api-
product "  or service name " api-cart "
span [ service.name =  " api-product "],  
span [ service.name =  " api-cart "]The Tracetest Selector L anguage defines the 
pattern to select spans  to which a set of 
assertions  are then applied. Tracetest Selectors 
can be grouped into the following categories based 
on the type of spans  they can select:T r a c e t e s t  C h e a t  S h e e tR e a d  t h e  c o m p l e t e  d o c u m e n t a t i o n  f o r  t h e  T r a c e t e s t  S e l e c t o r  
L a n g u a g e  h e r e