cilium/tetragon

bugtool: messages regarding gops 11 days ago

good first issue help wanted

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

Docs: Add more policy examples to target some CVEs about 2 months ago

good first issue

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

export: add an option to export events to tetragon container log 2 months ago

good first issue

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

Unify and organize how filters are documented in the `TracingPolicy` documentation 2 months ago

area/documentation good first issue

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

remove followFD and friends from BPF 5 months ago

good first issue area/bpf

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

tetra: remove the stacktrace-tree command and gRPC API 5 months ago

good first issue

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

properly map syscall ids to syscall name at the CLI 6 months ago

good first issue

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

Delete metrics with policy label on policy delete 7 months ago

good first issue area/metrics

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

doc: document why Tetragon will fail to load its BPF programs with operation not permitted 8 months ago

area/documentation good first issue

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

add tests for enforce/monitor mode 8 months ago

good first issue area/testing

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

Docs(tetragon-rthooks): outdated command for containerd setup with NRI 8 months ago

area/documentation good first issue

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

use jsonchecker.JsonTestExpect() for negative tests 9 months ago

good first issue

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

add a USERS.md file 9 months ago

AI Summary: This issue proposes adding a `USERS.md` file to the current repository. The content for this file should be directly migrated (copied) from the existing `USERS.md` file found in the Cilium repository.

Complexity: 1/5

area/documentation good first issue

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

vmtests: add stable kernel 6.12 to the test matrix 10 months ago

good first issue area/ci

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

e2e-framework: implement metricschecker 10 months ago

good first issue area/testing area/e2e area/metrics

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

docs: update install/FAQ entry on kernel config 11 months ago

area/documentation good first issue

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

Include pod UID in the log 11 months ago

good first issue

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

GetUrl and DnsRequest actions are always triggered if any of the selectors matches 11 months ago

AI Summary: This GitHub issue describes a bug in the tracing policy where `GetUrl` and `DnsRequest` actions are triggered whenever *any* selector matches, rather than only when the *specific* selector they are defined within matches. This behavior deviates from the intended 'one action per selector' design and can lead to unexpected results when multiple selectors are in use.

Complexity: 3/5

good first issue

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement

C

#bpf#ebpf#kernel#kubernetes#security

CLI filter with container name 11 months ago

good first issue

cilium/tetragon

4.9K

eBPF-based Security Observability and Runtime Enforcement