All pull requests

Pull requests

• ci: update the pr-management pin

  github_actionsneeds-author-action
  #1665·suhaani-agarwal opened Nov 3, 2026Contributor·

  ·
  2

• fix: exception image lists, Secret type default, exception-scope tests and CI flakes

  generating-policygithub_actionsmutating-policyready-for-reviewteststype_celvalidating-policy
  #1664·MaxRink opened Nov 3, 2026Contributor·3 tasks done·

  ·
  1

  16

• ci(setup-env): retry installer downloads

  needs-author-action
  #1662·MaxRink opened Nov 2, 2026Contributor·1 of 3 tasks·

  ·
  2

• test(other-mpol): fix PolicyException propagation races and add-volume CLI failure

  needs-author-action
  #1661·MaxRink opened Nov 2, 2026Contributor·2 of 3 tasks·

  ·
  16

• test(require-pod-requests-limits): avoid cleanup delays

  needs-author-action
  #1660·MaxRink opened Nov 2, 2026Contributor·2 of 3 tasks·

  ·
  2

• fix(block-large-images): check exceptions.allowedImages for image exemptions

  needs-author-action
  #1659·yuminn-k opened Nov 2, 2026·

  ·
  1

  10

• fix(check-nvidia-gpu): use allowedImages for image exemptions

  needs-author-action
  #1658·raus7n opened Nov 2, 2026·3 tasks done·

  ·
  1

  2

• feat(other-vpol): add verify-vpa-target ValidatingPolicy

  workflow-approval-required
  #1655·VijayabaskarR-06 opened Oct 29, 2026·3 tasks done·

  ·
  1

• feat(other-vpol): add prevent-duplicate-vpa ValidatingPolicy

  needs-author-action
  #1654·VijayabaskarR-06 opened Oct 29, 2026·3 tasks done·

  ·
  2

• feat(other-vpol): add check-vpa-configuration ValidatingPolicy

  needs-author-action
  #1653·VijayabaskarR-06 opened Oct 29, 2026·3 tasks done·

  ·
  2

• fix(best-practices-vpol): make autogen work in require-probes

  ready-for-review
  #1652·mikutas opened Oct 28, 2026·3 tasks done·

  ·
  1

  1

• fix(best-practices-vpol): remove ineffective autogen from require-probes

  workflow-approval-required
  #1650·mikutas opened Oct 28, 2026·3 tasks done·

  ·
  1

  1

• feat(other-vpol): add Secret label and SA token automount guards

  needs-author-action
  #1649·MaxRink opened Oct 27, 2026Contributor·5 tasks done·

  ·
  18

• feat(other-vpol): add require-image-source ValidatingPolicy

  needs-author-action
  #1648·MaxRink opened Oct 27, 2026Contributor·4 tasks done·

  ·
  17

• feat(nginx-ingress-vpol): port ingress-nginx guardrail policies

  needs-author-action
  #1647·MaxRink opened Oct 27, 2026Contributor·7 tasks done·

  ·
  13

• feat(flux-ivpol): verify Flux controller image provenance

  needs-author-action
  #1646·MaxRink opened Oct 27, 2026Contributor·4 tasks done·

  ·
  19

• feat(cert-manager-vpol): port cert-manager guardrail policies

  needs-author-action
  #1645·MaxRink opened Oct 27, 2026Contributor·6 tasks done·

  ·
  17

• fix: block /run socket paths and parent directories in disallow-cri-sock-mount

  needs-author-actionworkflow-approval-required
  #1622·AnKiT-GaRG2 opened Oct 12, 2026·3 tasks done·

  ·
  1

  9

• docs: correct image name in verify-image metadata

  workflow-approval-required
  #1621·SaifuddinM23 opened Oct 10, 2026·

  ·
  1

• test: cover mixed host namespace values

  #1616·moruku36 opened Oct 9, 2026·2 of 5 tasks·

  ·
  2

• fix(disallow-default-namespace): check Pod controllers without namespaceObject

  merge-conflictsneeds-author-actionworkflow-approval-required
  #1582·Allsimon opened Oct 4, 2026·3 tasks done·

  ·
  1

• fix(restrict-node-port): allow Services without an explicit type

  merge-conflictsneeds-author-actionworkflow-approval-required
  #1581·Allsimon opened Oct 4, 2026·3 tasks done·

  ·
  1

• fix(argo-vpol): require spec.project in application-prevent-default-project

  merge-conflictsneeds-author-action
  #1580·PragalvaXFREZ opened Oct 3, 2026Contributor·3 tasks done·

  ·
  3

• test: grant background controller get on secrets for audit-event-on-delete

  needs-author-actionstaletype_legacy
  #1577·JimBugwadia opened Oct 1, 2026Member·

  ·
  2

• fix(vpol): correct block-kubectl-cp command validation

  merge-conflictsneeds-author-action
  #1571·ANAMASGARD opened Oct 1, 2026Contributor·2 of 3 tasks·

  ·
  1