Repository navigation

Issues

RuntimePolicy status retains stale conditions across spec generations
nirmata/runtime#279 · opened on Oct 13, 2026
2
Provide procfs-backed canonical aliases for exec-trace monitor observations
nirmata/runtime#266 · opened on Oct 6, 2026
Canonicalize network targets before diffing RuntimePolicy updates
nirmata/runtime#263 · opened on Oct 5, 2026
Proposal: observe ingress traffic and correlate it with egress per pod
nirmata/runtime#250 · opened on Sep 17, 2026
Bound pending findings during Report write failures
nirmata/runtime#245 · opened on Sep 13, 2026 · v0.2.0
Bound serialized Report size before Kubernetes API writes
nirmata/runtime#244 · opened on Sep 13, 2026 · v0.2.0
Design a bounded CEL subset for inline kernel enforcement
nirmata/runtime#243 · opened on Sep 13, 2026
Design safe enforcement of command-argument restrictions
nirmata/runtime#242 · opened on Sep 13, 2026
Allow approved domain families in network enforcement policies
nirmata/runtime#241 · opened on Sep 13, 2026
Expire DNS-learned permissions and make shared-IP decisions deterministic
nirmata/runtime#240 · opened on Sep 13, 2026
Establish minimum privileges and an evidence-based platform support matrix
nirmata/runtime#227 · opened on Aug 31, 2026 · v0.3.0
Move away from bpf2go
nirmata/runtime#219 · opened on Aug 25, 2026
3
Roll up Job-owned pods to their CronJob in owner attribution
nirmata/runtime#195 · opened on Aug 24, 2026 · v0.3.0
Add OwnerUID to PodIdentity and reporter.Finding
nirmata/runtime#194 · opened on Aug 24, 2026 · v0.3.0
[Feature] Multikernel testing
nirmata/runtime#191 · opened on Aug 21, 2026
Per-pod program-load failure is reported as NoMatchingPods, not EnforcementUnavailable
nirmata/runtime#188 · opened on Aug 18, 2026
WorkloadProfile/Learning Mode
nirmata/runtime#186 · opened on Aug 17, 2026 · v0.3.0
2
disable github pages
nirmata/runtime#176 · opened on Aug 17, 2026
Content-hash identity for exec/open: close the allow-listed-path-gets-swapped gap
nirmata/runtime#172 · opened on Aug 15, 2026
1
Red-team the kernel enforcement boundary (path resolution, TOCTOU, exec-family gaps)
nirmata/runtime#171 · opened on Aug 15, 2026
Provision a self-hosted lsm=...,bpf runner and re-tighten the nightly gate
nirmata/runtime#165 · opened on Aug 14, 2026 · v0.3.0
Per-node policy status is only readable from the raw object: no ratio column, no per-node reason in describe
nirmata/runtime#153 · opened on Aug 13, 2026 · v0.3.0
Keep reporting bounded and available under workload churn and API failures
nirmata/runtime#130 · opened on Aug 10, 2026 · v0.2.0
2
k6 egress load lane has never been run against a live cluster
nirmata/runtime#119 · opened on Aug 8, 2026 · v0.3.0
1
Policy selector matching is a linear scan on the event hot path
nirmata/runtime#117 · opened on Aug 8, 2026 · v0.3.0
1