kaaval good first issues (Python)

Image report export: include package identity in SARIF logical locations 28 days ago

good first issue

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Image report export: disambiguate JUnit cases for shared CVEs 28 days ago

good first issue

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Image ingestion: add a source-filter example to the API documentation 28 days ago

good first issue

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Health: report schema initialization failure with its error identifier 28 days ago

good first issue

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Audit parser: make malformed-byte handling match the resilience contract 28 days ago

good first issue

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Audit parser: preserve Kubernetes subresources in usage tuples 28 days ago

good first issue

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Image ingestion: document a Jenkins JUnit pipeline 28 days ago

good first issue

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Image ingestion: add a GitHub Actions SARIF workflow example 28 days ago

good first issue

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Image ingestion: add a GitLab CI report-scoring example 28 days ago

good first issue

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Dashboard: display the latest imported image report 28 days ago

good first issue

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

test_smoke.py: skip with a clear reason when Postgres is unreachable 3 months ago

good first issue

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Combination-takeover fixture in hack/dev/rbac-fixtures.yaml 3 months ago

help wanted good first issue area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Granted-vs-used report: flag unused grants per identity 3 months ago

enhancement help wanted area/ingest

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Kyverno PolicyReport ingestion — admission results as a finding source 3 months ago

help wanted area/ingest

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

_role_is_privileged() matches resources by name only, ignoring api_groups 3 months ago

help wanted good first issue area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Remediation entries for effective-access rule_types (verified citations only) 3 months ago

help wanted good first issue area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Surface effective-access findings in CLI and dashboard 3 months ago

enhancement help wanted area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

docs: rbac-rules.md rows for the four combination-escalation rule_types 3 months ago

documentation help wanted good first issue area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Move GET /rbac/combo-scan/demo out of the public API surface into a fixture 3 months ago

help wanted good first issue area/api

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

No body-size guard on POST /rbac/combo-scan (unbounded user-supplied graph) 3 months ago

help wanted area/api

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

/combo-scan scores against a hardcoded context, not the tenant's ScanContext 3 months ago

bug help wanted area/api

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Combo predicates ignore api_groups (resource-name-only matching) 3 months ago

help wanted good first issue area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Expose a Prometheus /metrics endpoint 3 months ago

enhancement help wanted area/observability

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Implement Grype report ingestion 3 months ago

enhancement help wanted area/ingest

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Write a real Helm chart 3 months ago

enhancement help wanted area/deploy

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Effective Access Graph: identity-centric RBAC aggregation 3 months ago

help wanted area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Effective Access Graph: build_effective_access() subject-keyed rule aggregation 3 months ago

enhancement help wanted area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

New RBAC rule: namespaced Role granting cluster-scoped resources (silently inert grant) 3 months ago

help wanted good first issue rule-request area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Implement Trivy report ingestion 3 months ago

enhancement help wanted area/ingest

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Combination-escalation predicates (escalate, bind, impersonate, privileged pod + SA) 3 months ago

enhancement help wanted good first issue area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

New RBAC rule: unnecessary SA token automount (CIS 5.1.6) 3 months ago

good first issue rule-request area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

SARIF: add a demo workflow proving the upload-sarif path end-to-end 3 months ago

documentation help wanted good first issue

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Design: ingest BakeX hardening policies — grade running images against the blueprint that built them 3 months ago

help wanted area/ingest

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Blast-radius exposure factor on the Contextual Risk Score 3 months ago

help wanted area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Design: usage-based least-privilege (audit-log ingestion) 3 months ago

help wanted area/ingest

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

RBAC scan diff: severity_changed bucket (escalations shouldn't hide in unchanged) 3 months ago

enhancement help wanted good first issue area/api

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Helm: ServiceMonitor + scan CronJob toggles, kind install docs 3 months ago

help wanted good first issue area/deploy

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Helm: dashboard templates + Postgres (subchart or external DB values) 3 months ago

help wanted good first issue area/deploy

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Helm: control-plane Deployment + Service templates 3 months ago

help wanted good first issue area/deploy

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Helm chart skeleton: Chart.yaml, values.yaml, helm lint in CI 3 months ago

help wanted good first issue area/deploy

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Audit-log parser: JSON-lines events → per-subject usage set (pure function) 3 months ago

help wanted good first issue area/ingest

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Design: audit-log adapter interface (file-based first) 3 months ago

help wanted area/ingest

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Dashboard: show blast radius per identity 3 months ago

enhancement help wanted good first issue area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Blast-radius factor in compute_contextual_score() 3 months ago

enhancement help wanted area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Design: blast-radius metric for identities (what does a compromise reach?) 3 months ago

help wanted area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

CLI: kaaval doctor — dependency preflight from the command line 3 months ago

good first issue area/cli

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

CLI: add a --version flag 3 months ago

good first issue area/cli

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

SARIF: feed GitHub's security-severity from the Contextual Risk Score 3 months ago

enhancement good first issue area/cli

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

CLI: friendly error when the manifests path is unreadable or missing 3 months ago

good first issue area/cli

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Segmentation-violation rule: namespaced identity reaching cluster scope 3 months ago

good first issue area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Cloud-identity cross-reference: ServiceAccount → real cloud IAM blast radius 4 months ago

help wanted area/rbac

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Add GET /rbac/scan/diff (alert on new findings only) 4 months ago

enhancement help wanted area/api

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Argo CD / Flux 'verify after deploy' recipe using PolicyReport output 4 months ago

good first issue area/deploy

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

CronJob manifest for scheduled in-cluster scans 4 months ago

good first issue area/deploy

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Add JUnit XML output to the CLI (GitLab/Jenkins) 4 months ago

enhancement good first issue area/cli

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

Add SARIF output to the CLI (GitHub Security tab) 4 months ago

enhancement good first issue area/cli

kaaval/kaaval

1

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

Python

#cis-benchmark#cloud-native#devsecops#k8s-security#kubernetes#kubernetes-security#kyverno#rbac#security#security-tools#vulnerability-scanner

kaaval/kaaval

Open Issues Need Help