5GSEC/nimbus

Issues

• Reports Controller

  #218 opened 6 months ago by nandhued
  1

• DiscoveredPolicy Operator Doesn't Recreate Deleted Resources

  #227 opened 6 months ago by anurag-rajawat
  0

• Adapters: Reduce Privileges of `nimbus-k8tls` Adapter

  #226 opened 6 months ago by anurag-rajawat
  0

• Update `ensureTLS` intentID to `assessTLS`

  #225 opened 6 months ago by anurag-rajawat
  0

• k8tls reporter

  #223 opened 6 months ago by nandhued
  0

• Add the caldera test cases to the e2e tests

  #193 opened 7 months ago by shivaccuknox
  2

• Converting back to runc - coco

  #221 opened 6 months ago by nandhued
  0

• ClusterScope coco policy

  #220 opened 6 months ago by nandhued
  0

• Exclude Name Feature: Please use meaningful name and follow convention to prefix test name with its controller name.

  #179 opened 6 months ago by shivaccuknox
  0

• Intent preventExecutionFromTempOrLogsFolders having issue with listing of directories

  #205 opened 6 months ago by shivaccuknox
  0

• coco kyverno: When an coco intent is applied, the runtime class is not being mutated

  #207 opened 6 months ago by shivaccuknox
  0

• kubearmor: Not working when installed using the combined helm chart

  #211 opened 6 months ago by shivaccuknox
  4

• nimbus-kyverno: kyverno coco policy fails to patch an existing deployment

  #215 opened 6 months ago by shivaccuknox
  0

• Method to obtain the kyverno policy name needs to be changed

  #214 opened 6 months ago by shivaccuknox
  0

• Github action to push helm chart is failing

  #202 opened 6 months ago by shivaccuknox
  0

• coco adapter: kyverno is unable to mutate deployments because of cluster role permissions

  #210 opened 6 months ago by shivaccuknox
  0

• Exclude name feature: The status of a csib shows the number of nimbus policies as zero

  #206 opened 6 months ago by shivaccuknox
  0

• Provide an option in the nimbus operator helm chart to install all the adapters, and their security engine

  #194 opened 7 months ago by shivaccuknox
  0

• nimbus-k8tls: Better to use buffered channels to prevent handlers from blocked if the reconcile function is not scheduled or taking time

  #188 opened 7 months ago by shivaccuknox
  0

• nimbus-k8tls adapter: Possible panic since a close of these channels might be done before sending is stopped

  #187 opened 7 months ago by shivaccuknox
  0

• Exclude feature: all ns, Nimbus policy status not updated

  #178 opened 7 months ago by shivaccuknox
  1

• WAF adapter

  #176 opened 7 months ago by shivaccuknox
  0

• Acquire Infrastructure: EnsureResourceQuotas

  #175 opened 7 months ago by nandhued
  0

• Acquire Infrastructure: DeployUsingHSM

  #174 opened 7 months ago by nandhued
  0

• Acquire Infrastructure: EnsureModuleIsolation

  #173 opened 7 months ago by nandhued
  0

• EnsureUseOfSUCI

  #172 opened 7 months ago by nandhued
  0

• Container Administration Command: PreventPrivilegeExecution (M1026)

  #171 opened 7 months ago by nandhued
  0

• PreventRawUnixSockets (M1035)

  #170 opened 7 months ago by nandhued
  0

• Network Sniffing: ZeroTrustPolicy (M1048, FGM5033)

  #169 opened 7 months ago by nandhued
  0

• Supply Chain Compromise: SBOMVerification

  #168 opened 7 months ago by nandhued
  0

• Supply Chain Compromise: PreventVulnerableImageDeployment (M1016)

  #167 opened 7 months ago by nandhued
  0

• Weaken Integrity: MonitorIntegrityProtection (M1047)

  #166 opened 7 months ago by nandhued
  0

• AuditFileAccesses (DS0022)

  #165 opened 7 months ago by nandhued
  0

• Rootkit: PreventRemoteCommandInjection (DS0008)

  #164 opened 7 months ago by nandhued
  0

• AuditNetworkSessions (DS0029)

  #163 opened 7 months ago by nandhued
  0

• Manipulate Virtual Network Function (VNF) Configuration: LimitSoftwareDeployment (M1033)

  #162 opened 7 months ago by nandhued
  0

• Escape to Host: CheckSuspiciousAccessAttempts (DS0034)

  #161 opened 7 months ago by nandhued
  0

• Escape to Host: AllowVerifiedImageRegistryOriginsOnly (DS0032)

  #160 opened 7 months ago by nandhued
  0

• Escape to Host: ZeroTrustPolicy (M1048)

  #159 opened 7 months ago by nandhued
  0

• Escape to Host: PreventPrivilegeExecution (M1026, M1038)

  #158 opened 7 months ago by nandhued
  0

• Pre-OS Boot: HostProcessWhitelisting

  #157 opened 7 months ago by nandhued
  0

• AuditProcessExecutions

  #156 opened 7 months ago by nandhued
  0

• Pre-OS Boot: CheckSecureBoot

  #155 opened 7 months ago by nandhued
  0

• AllowVerifiedImageRegistryOriginsOnly

  #154 opened 7 months ago by nandhued
  0

• gNodeB Component Manipulation: EnsureReadOnlyVolumeMounts

  #153 opened 7 months ago by nandhued
  0

• Software Deployment Tools: ProtectSystemCertBundle

  #152 opened 7 months ago by nandhued
  0

• DetectInteractiveShellAccess

  #151 opened 7 months ago by nandhued
  0

• NetworkMicrosegmentation

  #150 opened 7 months ago by nandhued
  0

• ProcessWhitelisting

  #149 opened 7 months ago by nandhued
  0

• Registration of malicious network functions: CheckUnusedAccess

  #148 opened 7 months ago by nandhued
  0