@manusa what is your opinion about this one?.

@manusa what is your opinion about this one?.

Sorry for the late reply, it's been an intense morning.
It looks good.
My only doubt is about the name plus if this is aligned with @mrunalp expectations.

Since the changes are very isolated, I think we can hold it until he checks it out, I want to merge the dependabot PRs and maybe cut a release today.

@mrunalp could you please have a look at and drop your thoughts?.

This PR needs to be updated based on the latest changes.
/hold

I think, we don't need another profile (i.e. full-safe) any more, after the latest changes in the code base.

Explicitly passing this configuration via --config flag satisfies what new profile tries to achieve;

denied_resources = [
    {group = "apps", version = "v1", kind = "ServiceAccount"},
    {group = "apps", version = "v1", kind = "Secret"},
    {group = "rbac.authorization.k8s.io", version = "v1"}
]

disabled_tools = ["configuration_view"]

So that I'm closing this PR.