Security Profiles Operator v1: Stable APIs, Security Hardened, and Shaping Upstream Kubernetes
… Security audit and hardening Before graduating to v1, SPO underwent a security code audit. …
Search
People also ask
Why a security audit?
Any tool that runs with elevated privileges on shared infrastructure needs to earn trust. Inspektor Gadget runs with root-level access on nodes to do its job, so an independent review of its security posture is a natural step as the project matures and adoption grows. OSTIF is a nonprofit dedicated to improving the security of open source software. Over the past ten years, OSTIF has managed security engagements that have uncovered more than 800 vulnerabilities across 120 open source projects.
Inspektor Gadget: Results from the first security auditInspektor Gadget: Results from the first security audit
… Hardening recommendations Beyond the specific vulnerabilities, Shielder delivered six hardening recommendations. …
Securing CI/CD for an open source project: Controlling who runs what
… Feroz Salam is a member of the Cilium Security Team and a Security Engineer, Isovalent at Cisco. …
Securing CI/CD for an open source project, part 3: Credentials, verification, and what’s next
… The Cilium security team If you’ve ever reported a security issue to the project via GitHub security advisories or security@cilium.org , you’ve already interacted with Cilium’s Security Team . …
AI sandboxing is having its Kubernetes moment
… This approach doesn’t eliminate the need for security policy. You still want network segmentation, least-privilege IAM, and supply chain security. …
Securing CI/CD for an open source project: Locking down dependencies
… Keeping forks in sync with upstream security patches becomes a part-time job, and a stale fork with unpatched vulnerabilities is itself a security problem. Missed improvements. Upstream actions regularly fix bugs and ship security features. …
KeycloakCon Japan 2026: Navigating cloud native identity and the AI frontier
… Hardening Cloud-Native Infrastructure: From Build Pipelines to Service Meshes Identity extends far beyond the user login screen. …
LitmusChaos Q1-Q2 2026 update: community, contributions, and project progress
… Key Highlights: Added a metrics port to litmusportal-server manifests Updated the GraphQL endpoint configuration to use ChaosGraphQLEndpoint Added a nil guard for experimentID in CreateChaosExperiment Security hardening across Docker base images and Go dependencies Restricted GetActiveProjectMember… …
Announcing Kyverno release 1.18!
… Security improvements Security is a core pillar of Kyverno, and 1.18 introduces important safeguards for policy execution. …
Introducing Prempti: Policy and visibility for AI coding agents
… Getting started Download the latest release from GitHub: https://github.com/falcosecurity/prempti/releases Full technical walkthrough and architecture detail: https://falco.org/blog/introducing-prempti Get involved Runtime security for AI coding agents is new territory. …
To show you the most relevant results, we’ve omitted some entries very similar to those already shown. Repeat the search with the omitted results included.