kubestellar/kubestellar-mcp

[ci-maintainer] CodeQL Analysis fails: go.mod needs tidy before build about 3 hours ago

help wanted ci

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[ci-maintainer] lint: gofmt violations in quality-agent test files block CI about 5 hours ago

help wanted ci

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[ci-maintainer] build-test.yml: 200+ consecutive failures on main — 0 jobs, pre-job failure pattern about 5 hours ago

help wanted ci

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] reusable workflow refs unpinned @main in 7 workflows (supply-chain risk) 1 day ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[ci-maintainer] build-test.yml still failing after #413 — invalid golangci-lint-action SHA 1 day ago

help wanted ci

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] golang.org/x/net v0.55.0 is behind latest — potential missed security patches 1 day ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] kubestellar-mcp: branch protection score 3/10 — PRs not required, no status checks, 93% commits unreviewed 1 day ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] disabled workflow files retain pre-fix pwn-request patterns — delete or update 1 day ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] copilot-dco.yml: no top-level permissions + @main reusable ref 2 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] greetings.yml: top-level issues/pull-requests write not minimized 2 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[ci-maintainer] build-test.yml failing on every push/PR — 30+ consecutive failures, zero jobs recorded 2 days ago

help wanted ci

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] Token-Permissions: ai-fix.yml and copilot-automation.yml use top-level write permissions with pull_request_target 2 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] copilot-automation.yml + ai-fix.yml: pull_request_target with top-level write permissions, no fork guards 2 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] pr-verifier.yml calls non-existent reusable-pr-verifier.yml — PR title check disabled 2 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] greetings.yml pull_request_target missing fork guard — pwn-request risk 2 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] publish-mcp-registry.yml downloads mcp-publisher binary without checksum verification — supply chain risk 3 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] namespace_validator_test.go has stale assertions incompatible with new allowlist regex — CI tests likely failing 4 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] tools_kustomize.go skips namespace validation — TODO(#377) still unresolved 4 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] ValidateNamespace uses blocklist instead of allowlist — prompt injection bypass possible 4 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] kubestellar-mcp tools_app.go: unvalidated app/namespace/pod inputs passed directly to Kubernetes API 5 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] No branch protection on default branch (Scorecard BranchProtectionID high) 5 days ago

help wanted security needs-admin

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] No branch protection on default branch 5 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] Scorecard Code-Review score 0/10 — unreviewed commits merged 5 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] Token-Permissions: 5 Scorecard alerts for over-permissive GITHUB_TOKEN in workflows 6 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] Add server.json schema validation to CI 6 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] kubestellar-mcp CLI: cluster names injected unsanitized into AI prompts (prompt injection) 6 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] Code-Review score 0 — 0/21 recent changesets had an approved review (Scorecard high) 6 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] Token-Permissions: copilot-automation.yml job-level write scopes (Scorecard high) 6 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] Token-Permissions: ai-fix.yml job-level write scopes (Scorecard high) 6 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] MCP tool registry files lack unit tests (RBAC, policy, upgrades) 6 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] pkg/deploy/mcp/server.go MCP protocol layer needs expanded test coverage 6 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] MCP Registry publish workflow lacks post-publish validation and binary verification 6 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] Unpinned @main reusable workflow refs from kubestellar/infra (supply-chain risk) 7 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] over-permissive GITHUB_TOKEN in 5 workflows (ai-fix, copilot-automation, scorecard, pr-verifier) 7 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] kubestellar-mcp: over-permissive GITHUB_TOKEN in ai-fix.yml and copilot-automation.yml — top-level write permissions (Scorecard Token-Permissions) 8 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] kubestellar-mcp: handleHelmList missing validateHelmIdentifier for namespace — inconsistent CLI argument validation 8 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] Missing permissions block in copilot-dco.yml (not propagated from console fix) 9 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] pr-verifier.yml: pull_request_target + secrets: inherit exposes all repo secrets (2nd filing — fix not applied) 9 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] greetings.yml: pull_request_target + secrets: inherit exposes all repo secrets (3rd filing — fix not applied) 9 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] copilot-automation.yml: pull_request_target with 4 write permissions and no fork guard (re-filed) 13 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] ai-fix.yml: pull_request_target with write permissions and no fork guard 14 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] 11 workflows use kubestellar/infra reusable workflows at @main (mutable ref) 14 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] copilot-automation.yml: pull_request_target with write permissions and no fork guard 14 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[ci-maintainer] PR Verifier startup_failure: unpinned @main reusable workflow broken 14 days ago

help wanted ci

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] user-supplied cluster names in Clusters[] passed as --kube-context without validateHelmIdentifier 20 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] helm --set values not sanitized — comma in value injects extra key=value pairs 20 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] MEDIUM: GitOps repo URL lacks DNS-rebinding SSRF guard — git clone can reach private/cloud-metadata IPs 20 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] HIGH: DNS rebinding TOCTOU bypasses Helm SSRF protection in tools_helm.go 21 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] Dependabot security updates disabled — automated CVE patches not applied 21 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] Missing tests for MCP server tool registry files (765 lines) 21 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] Missing tests for pkg/mcp/tools/upgrades package 21 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] Missing unit tests for tool_registry.go and registry init files 21 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] pkg/cmd/upgrade has only 52.5% test coverage 21 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] pkg/mcp/server/upgrades.go has critically low test coverage (10% test:source ratio) 21 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] tools_kubectl.go handlers (handleDeleteResource, handleKubectlApply) lack unit tests 21 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] HIGH: Token-Permissions — `statuses: write` at job level triggers Scorecard warning in copilot-automation.yml 21 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] MEDIUM: No SAST/CodeQL configured — static analysis not run on commits (Scorecard #14 score 0/10) 21 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] HIGH: Branch protection not configured on main branch (Scorecard score 3/10) 22 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] HIGH: Code-Review score 4/10 — only 10 of 24 recent changesets reviewed (Scorecard #11) 22 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] HIGH: Token-Permissions alerts in 5 workflows — job-level writes passed to reusable infra workflows (Scorecard #9, #48, #50, #51, #52) 22 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] add unit tests for toolDetectDrift orchestration logic 22 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] Missing unit tests for pkg/gitops/resource_mapping.go and pkg/mcp/server/tools_drift.go 22 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] Add unit tests for tools_cluster.go and tools_drift.go in MCP server 22 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] Add unit tests for tools_drift.go (toolDetectDrift) 22 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] HIGH: Over-permissive GITHUB_TOKEN in 5 workflows (Scorecard #9, #48-52) 22 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] MCP server tools_drift.go and tools_cluster.go lack unit tests 22 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] MEDIUM: SSRF — validateHelmRepoURL allows http:// to private/cloud-metadata IPs 23 days ago

help wanted agent/sec-check

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[strategist] P0: tag v0.9.0 now — 4 security fixes unreleased since v0.8.21 23 days ago

help wanted roadmap

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] pkg/mcp/server: tools_policy.go (672 lines, 6 functions) has zero test coverage 23 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] LOW: Go builder image version drift — Dockerfile uses golang:1.26.3 vs console's 1.26.4 23 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[guide] kubestellar-mcp missing CODE_OF_CONDUCT.md 23 days ago

documentation help wanted

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[architect] pkg/mcp/server is a 200KB monolithic package — decompose tool handlers into sub-packages 23 days ago

help wanted architecture tech-debt

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[strategist] Submit kubestellar-mcp to modelcontextprotocol/servers and glama.ai MCP directories 23 days ago

help wanted roadmap

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[strategist] release-gap: v0.9.0 stable release overdue — 10+ unreleased improvements including CVE patch 23 days ago

help wanted roadmap

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[architect] server.go handleToolsList is a 730-line inline schema — co-locate tool definitions with implementations 23 days ago

help wanted architecture tech-debt

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[architect] Duplicate MCP protocol implementation in ops and deploy servers — extract shared pkg/mcp/protocol 23 days ago

help wanted architecture tech-debt

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[quality] MCP server tool handlers lack dedicated unit tests (tools_rbac, tools_policy, tools_workloads, tools_cluster, tools_drift) 23 days ago

help wanted quality testing

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] goreleaser.yml + scorecard.yml: workflow-level write permissions (TokenPermissions HIGH) 24 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] PR#186 removes security hardening: fork guards + SHA pins stripped from 11 workflows 25 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] kubestellar-mcp go 1.26.0 vulnerable to 4 new Go stdlib CVEs (x509 DoS, mime DoS, net/mail DoS, net double-free) 25 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] CVE-2026-42507 net/textproto error injection in kubestellar-mcp (go 1.26.0) 25 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] CVE-2026-32283: Go TLS 1.3 KeyUpdate DoS — go.mod pins vulnerable go 1.26.0 25 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] tools_helm.go: missing --repo URL validation allows SSRF / local file read via LLM prompt injection 25 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] Secret scanning disabled — no automated detection for leaked credentials 25 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[strategist] roadmap-gap: kubestellar-mcp has no ROADMAP.md — blocks contributor onboarding and user confidence 25 days ago

help wanted roadmap

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] LOW: Code-Review not enforced + no Dependency-Update-Tool configured (Scorecard HIGH) 25 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] LOW: Branch protection not enforced on main branch (Scorecard HIGH) 25 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[scanner] release.yml: goreleaser-action uses version: latest, supply-chain risk 25 days ago

bug help wanted

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[scanner] manifest.go: HTTP scheme accepted for GitOps repo URL, enabling MITM 25 days ago

bug help wanted

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[architect] pkg/mcp/server/tools.go is a 65KB god-file — split by domain like deploy server 25 days ago

help wanted architecture tech-debt

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] Over-permissive GITHUB_TOKEN in 10 workflows — token-permissions hardening needed 25 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[sec-check] Unpinned GitHub Actions in ts-unit-tests.yml — supply chain risk 25 days ago

help wanted security

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[ci-maintainer] OpenSSF Scorecard fails — stale .worktrees/docs-61-62 submodule ref in git index 25 days ago

help wanted kind/bug

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

Add CHANGELOG.md — no version history for operators upgrading 29 days ago

documentation help wanted

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

Add SECURITY.md — no vulnerability disclosure process documented 29 days ago

documentation help wanted

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

Bug: syncResource dry-run always reports "Would update" — false positive on unchanged resources 29 days ago

bug help wanted

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[guide] commands/ directory lacks TEMPLATE.md — new command docs risk inconsistent format 29 days ago

documentation help wanted

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

[guide] README missing kubestellar-deploy CLI usage documentation 30 days ago

documentation help wanted

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

Track Homebrew availability guidance for former kubectl-claude tooling 30 days ago

documentation help wanted agent/scanner hive/hive-v1

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

⚠️ Workflows use secrets:inherit + unpinned @main refs (supply chain risk) about 1 month ago

bug help wanted security hive/hive-v1 agent/reviewer

kubestellar/kubestellar-mcp

1

AI-powered kubectl plugin for multi-cluster Kubernetes management

Go

Open Issues Need Help