kubearmor/KubeArmor

feat: Group dependency updates into one PR ( renovate and dependabot) 6 days ago

enhancement good first issue

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

bug: Codecov badge in readme shows 0% coverage 11 days ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

chore: fix vulnerabilities 11 days ago

good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Kubearmor is failing on ARM cluster 11 days ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Setup script on Ubuntu 18.04 12 days ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

[CI]: Automatically create GitHub issue with report on Trivy vulnerability scan failure 16 days ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

[CI]: Automate Rebasing of Open PRs When `main` is updated 19 days ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Use docker harderned image about 2 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Add Labels to all KubeArmor k8s objects about 2 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Trivy Scan vulnerabilities about 2 months ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

bug(syscalls): not receiving events for audited syscalls about 2 months ago

bug help wanted

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Host policy Matchpatterns logs about 2 months ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

fuzz testing of KubeArmor 3 months ago

enhancement help wanted mentorship

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

fix trivy scan vulnerabilities 3 months ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

docs: Update docs for nodeSelector hostname labels 3 months ago

documentation good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Snitch Job should respect globalNodeSelector configuration 3 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

feat: add karmor simulate — policy dry-run / impact simulation mode 4 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

support release candidate releases 7 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Panic in feeder.go due to concurrent map write 7 months ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

improve CRI socket detection using operator 7 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Update Visibility Documentation 8 months ago

documentation good first issue help wanted

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

kubearmor with enforcer `none` 8 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Make `kubearmor-snitch` image repository configurable 9 months ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

bug: Make untrackedNs flag configurable via kubearmor-config 9 months ago

bug good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Refactor core functions to return error instead of bool about 1 year ago

enhancement good first issue

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Enable KubeArmor Runtime Security Support on GKE Autopilot (DaemonSet/Privileged Pod Restrictions) about 1 year ago

help wanted important discussion

kubearmor/KubeArmor

2.6K

Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).

Go

#bpf#containers#ebpf#hacktoberfest#kernel#kubernetes#lsm#policy#sandbox#security#system#tool

Open Issues Need Help