cloud-native-security-inspector
cloud-native-security-inspector copied to clipboard
This project scans and assesses workloads in Kubernetes at runtime. It can apply protection rules to workloads to avoid further risks as well.
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.17.0 to 0.23.0. Commits c48da13 http2: fix TestServerContinuationFlood flakes 762b58d http2: fix tipos in comment ba87210 http2: close connections when receiving too many headers ebc8168 all: fix...
Bumps [github.com/quic-go/quic-go](https://github.com/quic-go/quic-go) from 0.37.7 to 0.42.0. Release notes Sourced from github.com/quic-go/quic-go's releases. v0.42.0 New Features added a qlog tracer for events that happen before / outside of established connection: #4305...
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.7+incompatible to 24.0.9+incompatible. Release notes Sourced from github.com/docker/docker's releases. v24.0.9 24.0.9 For a full list of pull requests and changes in this release, refer to the relevant...
Bumps [github.com/jackc/pgproto3/v2](https://github.com/jackc/pgproto3) from 2.3.2 to 2.3.3. Commits 945c212 Backport fixes from pgx v5 See full diff in compare view [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR...
Bumps google.golang.org/protobuf from 1.31.0 to 1.33.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...
Repro steps: 1. Create a policy checking the workloads under ns1, set the workNamespace to "workspace". 2. Edit the policy on UI, change the label selector to make it check...
In release 0.3 we remove the code for creating the mapping of the 3 kind of reports in OpenSearch. The mapping will be created automatically by Opensearch with the 1st...
**Environment** Platform: Kubernetes Kubernetes/Platform Version(s): **Describe the bug** During the Governor exporter found that CNSI is not capturing the Workload of kind cronJob. Instead, it is listing each job of...
**Describe the bug** Current behaviour : Currently the assessment object inside InspectionPolicy is scattered and has multiple fields for different exporters. Like OpenSearchEnabled, OpenSearchAddr, OpenSearchUser, OpenSearchPasswd, OpenSearchCert for open search...
The report list has a limit, which is good. However, the total number on the right-bottom will keep increasing, indefinitely. Actully the very old reports means little, so we need...