kubearmor/KubeArmor

enhancement good first issue

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Add Labels to all KubeArmor k8s objects 5 days ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Trivy Scan vulnerabilities 10 days ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

bug(syscalls): not receiving events for audited syscalls 12 days ago

bug help wanted

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Host policy Matchpatterns logs 12 days ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Kubearmor is failing on ARM cluster 23 days ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

fuzz testing of KubeArmor about 1 month ago

enhancement help wanted mentorship

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

fix trivy scan vulnerabilities about 1 month ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

docs: Update docs for nodeSelector hostname labels about 2 months ago

documentation good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Snitch Job should respect globalNodeSelector configuration about 2 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

feat: add karmor simulate — policy dry-run / impact simulation mode 2 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

support release candidate releases 5 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Panic in feeder.go due to concurrent map write 5 months ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

improve CRI socket detection using operator 5 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Update Visibility Documentation 6 months ago

documentation good first issue help wanted

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

kubearmor with enforcer `none` 7 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Make `kubearmor-snitch` image repository configurable 7 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

bug: Make untrackedNs flag configurable via kubearmor-config 8 months ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Refactor core functions to return error instead of bool 11 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Enable KubeArmor Runtime Security Support on GKE Autopilot (DaemonSet/Privileged Pod Restrictions) 11 months ago

help wanted important discussion

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Open Issues Need Help