Issues

• Clean up no-op tests and simplify brittle CLI assertions

  kubescape/kubescape#4153 · Filter by author Nachiket-Roy opened on Oct 14, 2026

• Helm charts are always rendered as Kubernetes v1.20, so version-gated workloads are never scanned

  bug
  kubescape/kubescape#4141 · Filter by author aryanghai12 opened on Oct 13, 2026
  1

  

• v1 report (--format-version=v1) has no paths for rules that set deletePaths since 4.0.13

  kubescape/kubescape#4103 · Filter by author martin-mat opened on Oct 11, 2026

• [feature]: automate OSPS Baseline evaluation (Security Slam Fall 2026 Mechanizer badge)

  kubescape/kubescape#4080 · Filter by author khuswant18 opened on Oct 8, 2026
  3

  

• Proposal: adopt Open-source PDD (Product-Driven Development)

  kubescape/kubescape#4078 · Filter by author itai-gendler opened on Oct 8, 2026
  

• fix: CLI subcommands ignore root context cancellation on interrupt

  kubescape/kubescape#4073 · Filter by author Rucha0901 opened on Oct 7, 2026
  2

  

• [feature]: refresh the security self-assessment and keep it in this repo (Security Slam Fall 2026 Inspector badge)

  feature
  kubescape/kubescape#4072 · Filter by author khuswant18 opened on Oct 7, 2026
  2

• feat: add differential testing against upstream Kubernetes policy semantics

  kubescape/kubescape#4071 · Filter by author nishantbkl3345-ship-it opened on Oct 7, 2026
  1

  

• [feature]: complete the OSPS Baseline Level 2 documentation (Security Slam Fall 2026 Chronicler badge)

  feature
  kubescape/kubescape#4067 · Filter by author khuswant18 opened on Oct 6, 2026
  

• feat(fix): emit Kustomize JSON 6902 patches for Helm-rendered resources

  feature
  kubescape/kubescape#4033 · Filter by author vjkumar2756 opened on Oct 4, 2026
  2

• Scanning a Helm chart triggers unauthenticated network fetch and writes into the scan root

  kubescape/kubescape#4009 · Filter by author MayankSharmaCSE opened on Oct 1, 2026

• [Bug]: Unnecessary Kubernetes API connection attempt during non-cluster scans when AccountID is already provided

  bug
  kubescape/kubescape#4007 · Filter by author vjkumar2756 opened on Oct 1, 2026
  2

• CI: run govulncheck on kubescape's own dependencies (v4.0.15 ships 7 reachable known vulnerabilities)

  kubescape/kubescape#3975 · Filter by author nishantbkl3345-ship-it opened on Sep 29, 2026
  6

  

• C-0236: make the image signature verification policy configurable (no-tlog and keyless signing)

  kubescape/kubescape#3956 · Filter by author nishantbkl3345-ship-it opened on Sep 28, 2026

• containerd v1 replace points at a personal fork that upstream 1.7 will not fix; it comes from the stereoscope fork

  kubescape/kubescape#3940 · Filter by author nishantbkl3345-ship-it opened on Sep 26, 2026
  1

  

• Add Azure support for DescribeRepositories cloud API group

  kubescape/kubescape#3901 · Filter by author Rucha0901 opened on Sep 21, 2026

• Enhancement: Support Azure ACR in Cloud Group Mapping

  kubescape/kubescape#3865 · Filter by author Rucha0901 opened on Sep 18, 2026

• Control proposal : flag writable volume mounts that could adopt bindMountOptions (noexec/nosuid/nodev, K8s 1.37) for hardening

  feature
  kubescape/kubescape#3743 · Filter by author AdeshDeshmukh opened on Sep 7, 2026
  2

• bug: SecurityException resources[].apiGroup is silently unmatchable (upstream armoapi-go DigestAttributesDesignator has no case for it)

  kubescape/kubescape#3655 · Filter by author doraem-on opened on Aug 28, 2026
  6

• eBPF-less Runtime Visibility: Bridging the gVisor Sentry Gap via Real-time runsc Trace Ingestion

  kubescape/kubescape#3424 · Filter by author Rucha0901 opened on Aug 20, 2026

• design(core): define a typed partial-result contract across eager and streaming scans

  kubescape/kubescape#3244 · Filter by author ye11oc4t opened on Aug 15, 2026
  3

• Introduce a Limit on Concurrent Pull Requests to Optimize CI Usage

  feature
  kubescape/kubescape#3020 · Filter by author adity1raut opened on Aug 11, 2026
  5

• Signed, verifiable attestations for scan results

  kubescape/kubescape#2992 · Filter by author Ady0333 opened on Aug 10, 2026
  9

• Framework-scoped exceptions are cached as Passed before per-framework filtering

  kubescape/kubescape#2872 · Filter by author ye11oc4t opened on Aug 9, 2026
  1

• [RFC] Architecture Proposal: CRD-Based Scan Orchestration Controller

  feature
  kubescape/kubescape#2688 · Filter by author manmathbh opened on Aug 2, 2026
  4