Add a privileged deployment example for IaC scan

.github/workflows/ci-scan.yaml

@@ -168,6 +168,7 @@ jobs:
         with:
           sysdig-secure-token: ${{ secrets.KUBELAB_SECURE_API_TOKEN }}
           mode: iac
+          iac-scan-path: ./iac_scan_examples
           # Note: This test assumes these policies exist in the target Sysdig Secure account.
           use-policies: '"All Posture Findings", "MITRE DEFEND"'
 

iac_scan_examples/netshoot-privileged.yaml

@@ -0,0 +1,27 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  creationTimestamp: null
+  labels:
+    app: net-troubleshoot-ac
+  name: net-troubleshoot-ac
+  namespace: default
+spec:
+  replicas: 1
+  selector:
+    matchLabels:
+      app: net-troubleshoot-ac
+  strategy: {}
+  template:
+    metadata:
+      creationTimestamp: null
+      labels:
+        app: net-troubleshoot-ac
+    spec:
+      containers:
+      - name: netshoot-ac
+        image: nicolaka/netshoot
+        securityContext:
+          privileged: true
+        resources: {}
+status: {}