All pull requests

Pull requests

• fix(sbom): resolve relative layers from containerd snapshot root

  #1013·ANAMASGARD opened Oct 2, 2026Member·5 tasks done·

  ·
  1

  1

• fix(http): preserve verifier-visible bounds for iovec reads

  #1012·ANAMASGARD opened Oct 2, 2026Member·5 tasks done·

  ·
  1

• fix(ci): enforce least-privilege GitHub Actions token permissions

  #1011·ANAMASGARD opened Oct 2, 2026Member·3 of 5 tasks·

  ·
  1

  1

• feat(networkpeer): add ServiceRef and EndpointSlice peer resolution for ContainerProfile network rules

  #1010·matthyx opened Oct 2, 2026Contributor·

  ·
  2

• refactor(rulecreator): support composite rule keying by bundle and ID

  #1008·matthyx opened Oct 2, 2026Contributor·

  ·
  2

• feat(cel): add dstNamespace and dstPodLabels with Service peer hook

  #1007·matthyx opened Oct 2, 2026Contributor·

  ·
  2

• feat(cpm): add ReportProcfsExec to capture pre-existing processes with argv boundaries

  #1006·matthyx opened Oct 2, 2026Contributor·

  ·
  2

• refactor(storage): add ListContainerProfiles to ProfileClient

  #1005·matthyx opened Oct 2, 2026Contributor·

  ·
  2

• fix(objectcache): synchronize container status fields and add cloud metadata annotations

  #1003·matthyx opened Oct 2, 2026Contributor·

  ·
  2

• fix(watcher): repair pod peer IP identity misses during churn

  #1002·matthyx opened Oct 2, 2026Contributor·

  ·
  2

• fix(watcher): drop unsolicited TCP SYNs to closed ports

  #1001·matthyx opened Oct 2, 2026Contributor·

  ·
  2

• fix(config): narrow node-agent pod exclusion in IgnoreContainer

  #1000·matthyx opened Oct 2, 2026Contributor·

  ·
  2

• feat(utils): add deterministic compact YAML serializer

  #999·matthyx opened Oct 2, 2026Contributor·

  ·
  10

• fix(utils): harden path resolution and prevent headless proc leak

  #998·matthyx opened Oct 2, 2026Contributor·

  ·
  39

• perf(storage): increase client-go QPS to 50 and burst to 100

  #997·matthyx opened Oct 2, 2026Contributor·

  ·
  3

• fix: log short-lived container shared-data timeouts at debug

  #993·mloiseleur opened Sep 30, 2026·

  ·
  12

• fix: support host sensor exclusions for kube-proxy-free clusters

  #984·ANAMASGARD opened Sep 23, 2026Member·4 of 5 tasks·

  ·
  1

  5

• fix(tracers): preserve exec arguments while fixing pts/0 detection

  #977·ANAMASGARD opened Sep 18, 2026Member·5 tasks done·

  ·
  1

  6

• feat(rulemanager): CEL rule state store for cross-event correlation

  ai-assistedai-reviewed-local
  #875·slashben opened Aug 3, 2026Contributor·

  ·
  30

• fix(containerprofilemanager): cap identified call stacks per container

  ai-assisted
  #849·matthyx opened Jul 2, 2026Contributor·

  ·
  3

• profile-compaction: CollapseConfig CRD + projection overlay + signing/tamper detection

  ai-assisted
  #847·matthyx opened Jun 26, 2026Contributor·

  ·
  10

• feat(cache): support server-side user-managed profile merge configurations

  #831·yugal07 opened Jun 4, 2026Contributor·5 tasks done·

  ·
  1

  2