By Category

Back to all categories

Security

Jul 8, 2026 Security starboard-exporter v1.1.2
Changed
- Align files according to platform standards in #591 by @giantswarm-align-files[bot]
Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.1.1...v1.1.2
Jul 8, 2026 Security starboard-exporter v1.1.1
Changed
- (deps) Update dependency architect to v9.4.3 in #578 by @renovate[bot]
- (deps) Update dependency architect to v9.5.2 in #579 by @renovate[bot]
- (deps) Update dependency architect to v9.5.3 in #580 by @renovate[bot]
- Align files according to platform standards in #581 by @giantswarm-align-files[bot]
- (deps) Update dependency architect to v9.5.5 in #582 by @renovate[bot]
- Align files according to platform standards in #590 by @giantswarm-align-files[bot]
Fixed
- (deps) Update module github.com/kubescape/storage to v0.0.284 in #577 by @renovate[bot]
- (deps) Update module github.com/aquasecurity/trivy-operator to v0.31.2 in #576 by @renovate[bot]
- (deps) Update module github.com/kubescape/storage to v0.0.288 in #583 by @renovate[bot]
- (nancy) Remediate findings on main in #585 by @heraldbot[bot]
- (nancy) Remediate nancy findings in #586 by @heraldbot[bot]
- (deps) Update module github.com/kubescape/storage to v0.0.291 in #584 by @renovate[bot]
- (nancy) Remediate nancy findings in #587 by @heraldbot[bot]
Full Changelog: https://github.com/giantswarm/starboard-exporter/compare/v1.1.0...v1.1.1
Jul 8, 2026 Security cert-manager-app v4.1.0
Changed
- Updated cert-manager to upstream version v1.20.3.
- Notes: cert-manager-edit ClusterRole no longer grants create on challenges.acme.cert-manager.io, nor create/patch/update on orders.acme.cert-manager.io.
Jul 6, 2026 Security trivy-app v0.16.0
Changed
- Updated trivy to upstream version v0.71.2.
Jul 2, 2026 Security kyverno-policies v0.26.0
Added
- Add optional policies for restricting debug access using ephemeral containers.
- Add io.giantswarm.application.audience and io.giantswarm.application.managed chart annotations for Backstage visibility.
- Push to the default catalog.
Changed
- Migrate chart annotations to OCI-compatible format (change application.giantswarm.io/team to io.giantswarm.application.team, convert restrictions to annotations).
- Updated kyverno-policies to upstream version v1.17.2.
Jun 23, 2026 Security cert-manager-app v4.0.1
Changed
- Improved proxy settings by adding a proxy ConfigMap and setting upstream envFrom values for controller, webhook and cainjector.
Jun 22, 2026 Security cert-manager-app v4.0.0
Changed
- Breaking: Helm values to be passed to the upstream cert-manager chart will now need to use the cert-manager path instead of root. For example, the value crds.enabled: true must now be set with cert-manager.crds.enabled: true.
- Moved vendored chart to helm/cert-manager/charts/ and adapted sync scripts to follow new structure.
Jun 18, 2026 Security starboard-exporter v1.1.0
Added
- Add vulnerability_published_date, vulnerability_target, and vulnerability_class metric labels for Trivy VulnerabilityReports.
- Disable controllers for unsupported resource types to avoid errors in environments where these CRDs are not present.
Changed
- Configure RBAC for only enabled controllers in Helm Chart.
- Disable WatchList semantics for kubescape VulnerabilityManifest.
- Switch to EndpointSlices for peer discovery used by sharding.
- Truncate the chart’s AppVersion when it is used in Kubernetes labels.
Fixed
- Sanitize the helm.sh/chart label so truncated versions cannot end with an invalid character (e.g. a trailing .).
Jun 18, 2026 Security external-secrets v2.5.0
Changed
- Updating to the v2.5.0 version.
Jun 9, 2026 Security falco-app v0.12.1
Changed
- Bumped DaemonSet updateStrategy.rollingUpdate.maxUnavailable to 10% so chart upgrades on larger management clusters can finish within the Flux HelmRelease timeout.