Yves Galante

Java: Missing class CustomResource

2

Hello! CustomResource class are missing on the Java version as a consequence to not able to create Kubernetes custom ressource like ServiceMonitor. - Vote on this issue by adding a...

## Summary The _**[conf-recommended](https://github.com/corazawaf/coraza/blob/aaf44136da61921caa2353bd391c1341f3e480e8/coraza.conf-recommended#L28)**_ enable JSON request body processor but don't parse json on [response](https://github.com/corazawaf/coraza/blob/aaf44136da61921caa2353bd391c1341f3e480e8/coraza.conf-recommended#L158). I propose align request & response configuration by adding application/json on SecResponseBodyMimeType. _SecResponseBodyMimeType text/plain text/html...

[segmentation fault] response_payload_too_large

6

I am facing to a **segmentation fault** on a simple GET request to an static PNG image of 3Mb (3731858 bytes) The issue is reproductible on each request to this...

Option -p should print sidecar containers resource usage

1

Kubernetes v1.29 have introduce sidecar containers https://kubernetes.io/docs/concepts/workloads/pods/sidecar-containers/ Sidecar containers are used as exemple by [istio](https://istio.io/latest/blog/2023/native-sidecars/) `kube-capacity -p ` should print sidecar containers resource usage Note: sidecar containers are visible with...

# Add more scan options * Severity threshold * Severity mode * Ignore unfixed * Cve ignore file Check change on README for more detail

Falcon FalconImageAnalyzer not supported Azure Workload Identity ? Operator CRD documentation mention only "AWS & GCP". ``` serviceAccount: description: Define annotations that will be passed down to Image Analyzer service...

Currently by default Falcon Admission run with only one pod and on the validating Webhook configuration, failurePolicy is set to Ignore. It's mean that is not possible to guarenty that...

[Security] Improve secureness of dind root containers with "User Namespaces" feature.

8

### What would you like added? Because the DinD (Docker-in-Docker) pod runs as root, it should leverage Kubernetes “User Namespaces” for better isolation and security (see https://kubernetes.io/docs/tasks/configure-pod-container/user-namespaces/). Enabling this feature...