grafeas/kritis

View on GitHub

Deploy-time Policy Enforcer for Kubernetes applications

Stars: 709
Forks: 135
Open beginner issues: 0
Indexed issues: 73

Dominant language: Go
License: Apache-2.0
Last GitHub push: Oct 20, 2022
Latest indexed: Sep 17, 2026
Contributing guide: Contributing guide
Code of conduct: No code of conduct
Beginner labels: good first issue help wanted
PR merge metrics: No merged PRs in 30d

Open All

73 open issues indexed

Add a plugin to Reattest all images with new secret Open

enhancement p1

grafeas/kritis#16 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Document plan for how users can update kritis on cluster Open

documentation p0

grafeas/kritis#59 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
verify that if image has not been scanned or is not hosted on GCR, kritis has sane message to user Open

grafeas/kritis#83 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
add prometheus support to kritis Open

enhancement

grafeas/kritis#105 · 0 comments · 1 reaction · 1 assignee · Indexed Sep 17, 2026
Allow Kritis to run on other platforms, e.g. OpenShift Open

enhancement

grafeas/kritis#133 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
outline plan for handling using occurences with different auth/outside-main-proj Open

p0

grafeas/kritis#141 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Use grafeas API for kritis. Open

enhancement

grafeas/kritis#147 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Investigate dropping helm dependency in installation or adding additional non-helm installation methods Open

grafeas/kritis#156 · 0 comments · 1 reaction · 0 assignees · Indexed Sep 17, 2026
Add an AttestationController which will generate a secret if none are present. Open

enhancement good first issue

grafeas/kritis#161 · 0 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
investigate resolve-tags release process and distribution Open

grafeas/kritis#168 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
Parameterize kritis-preinstall-serviceaccount (bug: parallel int tests) Open

bug

grafeas/kritis#175 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
randomize webhook and csr name by default Open

grafeas/kritis#179 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
create container image to automatically create github releases Open

grafeas/kritis#183 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
add url link to kritis error messages so users can easily find what the CVE is Open

grafeas/kritis#194 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
return a list of all CVEs back to user when pod/deployment is blocked Open

grafeas/kritis#195 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Look into benchmarking for kritis Open

p0

grafeas/kritis#198 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
further parellelize kritis int tests - change namespacing method Open

integration-test

grafeas/kritis#232 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
add checksums to resolve-tags releases Open

grafeas/kritis#245 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Add UPDATE checks to deployment webhook Open

grafeas/kritis#248 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Add int tests for Kritis signer service. Open

kritis-signer

grafeas/kritis#259 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Deploy Kritis signer along with Kritis. Open

kritis-signer

grafeas/kritis#260 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Add validate field to CRDs Open

grafeas/kritis#261 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Validate all images against the ISP. Open

enhancement

grafeas/kritis#279 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Consider using CRD validation Open

enhancement techdebt

grafeas/kritis#304 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Look into running kritis integration tests on prow. Open

integration-test

grafeas/kritis#306 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Reuse CRD definitions in preinstall Open

grafeas/kritis#310 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Install Signer in GCP Cloud Functions Open

grafeas/kritis#315 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Flaky integration tests Open

bug integration-test

grafeas/kritis#326 · 2 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
Document Why Kritis attests admitted images. Open

documentation

grafeas/kritis#328 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Go linter should give suggestions compatible with Google-internal style Open

grafeas/kritis#343 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Support for Cloud Build Pub/Sub Format Open

grafeas/kritis#345 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Missing docs for Build Policy Open

documentation

grafeas/kritis#347 · 0 comments · 2 reactions · 0 assignees · Indexed Sep 17, 2026
Dry run capability Open

enhancement

grafeas/kritis#349 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Dynamically resolve tags on image review Open

grafeas/kritis#351 · 4 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Add clarification and example for what PolicyType in AttestationAuthority represents Open

documentation good first issue help wanted

grafeas/kritis#356 · 3 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
Integration test that ensures Grafeas helm chart can be installed and Kritis can point to it Open

enhancement help wanted integration-test

grafeas/kritis#357 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Log format customization Open

grafeas/kritis#362 · 3 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Resolve-tags gives UNAUTHORIZED Open

grafeas/kritis#366 · 7 comments · 2 reactions · 2 assignees · Indexed Sep 17, 2026
panic: interface conversion: interface is nil, not crypto.Signer Open

grafeas/kritis#384 · 10 comments · 0 reactions · 1 assignee · Indexed Sep 17, 2026
Move to CloudBuild for unit and integration tests Open

help wanted integration-test

grafeas/kritis#411 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Support GenericSignedAttestation Open

enhancement help wanted

grafeas/kritis#412 · 8 comments · 3 reactions · 1 assignee · Indexed Sep 17, 2026
Clean up local integration test resources Open

grafeas/kritis#416 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Customizable vulnerability message Open

enhancement good first issue help wanted

grafeas/kritis#424 · 1 comment · 1 reaction · 0 assignees · Indexed Sep 17, 2026
Unifying HandleAttestation behavior in ReviewGAP and ReviewISP Open

grafeas/kritis#432 · 2 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Local integration tests can be run individually Open

grafeas/kritis#439 · 1 comment · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Check image is properly attested in integration tests Open

grafeas/kritis#447 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Document behavior for multiple policies in the same namespace Open

grafeas/kritis#451 · 0 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Support PKIX PublicKey in AttestationAuthority Open

grafeas/kritis#453 · 6 comments · 0 reactions · 0 assignees · Indexed Sep 17, 2026
Support Helm v3 Open

grafeas/kritis#454 · 0 comments · 2 reactions · 0 assignees · Indexed Sep 17, 2026
kritis-vul-signer image rpc error: code = InvalidArgument Open

grafeas/kritis#462 · 1 comment · 0 reactions · 1 assignee · Indexed Sep 17, 2026

grafeas/kritis

Get new issues in your inbox