Search results

Scanning and private triage of dangling DNS records

help wantedDenotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.

sig/securityCategorizes an issue or PR as relevant to SIG Security.Categorizes an issue or PR as relevant to SIG Security.

triage/acceptedIndicates an issue or PR is ready to be actively worked on.Indicates an issue or PR is ready to be actively worked on.

Status: Open.

#172 In kubernetes/sig-security;

· tabbysable opened on Nov 8, 2025

Official CVE feed: add OSV schema JSON feed

Status: Open.

#169 In kubernetes/sig-security;

· mtardy opened on Oct 10, 2025

Proposal: Etcd Self-Assessment [Initiative]

Status: Open.

#152 In kubernetes/sig-security;

· krol3 opened on Aug 7, 2025

Umbrella issue: Migrate CVE feed to run under cloud build

triage/acceptedIndicates an issue or PR is ready to be actively worked on.Indicates an issue or PR is ready to be actively worked on.

Status: Open.

#150 In kubernetes/sig-security;

· tabbysable opened on Aug 1, 2025

TODO: create dedicated google group for CVE feed maintainers

triage/acceptedIndicates an issue or PR is ready to be actively worked on.Indicates an issue or PR is ready to be actively worked on.

Status: Open.

#149 In kubernetes/sig-security;

· tabbysable opened on Aug 1, 2025

Add intro to CVE feed readme

good first issueDenotes an issue ready for a new contributor, according to the "help wanted" guidelines.Denotes an issue ready for a new contributor, according to the "help wanted" guidelines.

help wantedDenotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.Denotes an issue that needs help from a contributor. Must meet "help wanted" guidelines.

Status: Open.

#141 In kubernetes/sig-security;

· tabbysable opened on Apr 25, 2025

[govulncheck] Generate VEX documents from <code>govulncheck</code> output

area/dependencyIssues or PRs related to dependency changesIssues or PRs related to dependency changes

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

sig/architectureCategorizes an issue or PR as relevant to SIG Architecture.Categorizes an issue or PR as relevant to SIG Architecture.

sig/docsCategorizes an issue or PR as relevant to SIG Docs.Categorizes an issue or PR as relevant to SIG Docs.

sig/releaseCategorizes an issue or PR as relevant to SIG Release.Categorizes an issue or PR as relevant to SIG Release.

sig/securityCategorizes an issue or PR as relevant to SIG Security.Categorizes an issue or PR as relevant to SIG Security.

Status: Open.

#116 In kubernetes/sig-security;

· PushkarJ opened on Jun 27, 2024

Kubernetes Third-Party Security Audit for 2025 (tracking issue)

sig/securityCategorizes an issue or PR as relevant to SIG Security.Categorizes an issue or PR as relevant to SIG Security.

Status: Open.

#104 In kubernetes/sig-security;

· reylejano opened on Nov 3, 2023

Scan <code>kubernetes/kubernetes</code> with <code>govulncheck</code>

committee/security-responseDenotes an issue or PR intended to be handled by the product security committee.Denotes an issue or PR intended to be handled by the product security committee.

sig/architectureCategorizes an issue or PR as relevant to SIG Architecture.Categorizes an issue or PR as relevant to SIG Architecture.

sig/releaseCategorizes an issue or PR as relevant to SIG Release.Categorizes an issue or PR as relevant to SIG Release.

sig/securityCategorizes an issue or PR as relevant to SIG Security.Categorizes an issue or PR as relevant to SIG Security.

Status: Open.

#95 In kubernetes/sig-security;

· PushkarJ opened on Aug 4, 2023

Create a periodically auto-refreshing list of fixed CVEs

committee/security-responseDenotes an issue or PR intended to be handled by the product security committee.Denotes an issue or PR intended to be handled by the product security committee.

sig/docsCategorizes an issue or PR as relevant to SIG Docs.Categorizes an issue or PR as relevant to SIG Docs.

sig/releaseCategorizes an issue or PR as relevant to SIG Release.Categorizes an issue or PR as relevant to SIG Release.

sig/securityCategorizes an issue or PR as relevant to SIG Security.Categorizes an issue or PR as relevant to SIG Security.

Status: Open.

#1 In kubernetes/sig-security;

· PushkarJ opened on Jul 30, 2021

[Umbrella] Artifact Vulnerability Scanning and Triage Policy

area/dependencyIssues or PRs related to dependency changesIssues or PRs related to dependency changes

committee/security-responseDenotes an issue or PR intended to be handled by the product security committee.Denotes an issue or PR intended to be handled by the product security committee.

kind/featureCategorizes issue or PR as related to a new feature.Categorizes issue or PR as related to a new feature.

priority/important-longtermImportant over the long term, but may not be staffed and/or may need multiple releases to complete.Important over the long term, but may not be staffed and/or may need multiple releases to complete.

sig/architectureCategorizes an issue or PR as relevant to SIG Architecture.Categorizes an issue or PR as relevant to SIG Architecture.

sig/authCategorizes an issue or PR as relevant to SIG Auth.Categorizes an issue or PR as relevant to SIG Auth.

sig/releaseCategorizes an issue or PR as relevant to SIG Release.Categorizes an issue or PR as relevant to SIG Release.

sig/securityCategorizes an issue or PR as relevant to SIG Security.Categorizes an issue or PR as relevant to SIG Security.

Status: Open.

#3 In kubernetes/sig-security;

· PushkarJ opened on Jul 29, 2021

Kubernetes Hardening Guide

Status: Open.

#30 In kubernetes/sig-security;

· raesene opened on Apr 12, 2021