Issues

• go through every single supposed sbob file in main, and either retune it or delete it

  k8sstormcenter/bob#230 · Filter by author entlein opened on Sep 27, 2026
  2

• cleanup the scripts folder, almost none of this is either used or useful

  k8sstormcenter/bob#228 · Filter by author entlein opened on Sep 27, 2026
  1

• bobctl validate --container fails on a valid single-container SBoB

  k8sstormcenter/bob#227 · Filter by author ConstanzeTU opened on Sep 23, 2026
  1

• Review network spec - when to use which labelSelector

  k8sstormcenter/bob#224 · Filter by author entlein opened on Sep 21, 2026

• ADR : languagne for kubecon talk use stacktrace to identify undesired language or ecosystem in vibecoded app

  k8sstormcenter/bob#212 · Filter by author entlein opened on Aug 26, 2026

• Demo: IngressNightmare (CVE-2025-1974) PG reproducibility — deploy+admission reproduce, RCE injection needs tuning

  k8sstormcenter/bob#206 · Filter by author ConstanzeTU opened on Aug 23, 2026
  2

• SBoB false positives — distinct list (redis + flux) to allowlist

  k8sstormcenter/bob#205 · Filter by author ConstanzeTU opened on Aug 22, 2026

• Make the 127. (localhost) exclusion for R0011 and R0012 an overlay rather than the default

  k8sstormcenter/bob#198 · Filter by author entlein opened on Aug 11, 2026

• Migrate the CI workflows for the new kubescape

  k8sstormcenter/bob#192 · Filter by author entlein opened on Aug 7, 2026
  1

• celnet regression: node-agent learns no ingress at all; R0012 additionally never fires on Flux controllers

  k8sstormcenter/bob#189 · Filter by author entlein opened on Aug 5, 2026
  1

• investigate the scrambled paths in opens, seems an old bug has resurfaced -> causing FalsePositives in opens

  k8sstormcenter/bob#183 · Filter by author entlein opened on Aug 3, 2026
  7

  

• make kubescape / make alertmanager broken on Helm v4 (--post-renderer) + KS_RUNC misdetection

  k8sstormcenter/bob#172 · Filter by author ConstanzeTU opened on Jul 31, 2026

• argocd SBOBs false-positive on vanilla upstream Argo CD (even at matching v2.9.3)

  k8sstormcenter/bob#170 · Filter by author ConstanzeTU opened on Jul 31, 2026

• cleanup: designate example/java-poc as golden test-app source; reconcile example/log4j-chain

  k8sstormcenter/bob#153 · Filter by author entlein opened on Jul 17, 2026

• l4j backend produces zero pg-wire — DB unseeded + backend never connects to postgres (no pgsql for pixie/dx)

  k8sstormcenter/bob#147 · Filter by author entlein opened on Jul 6, 2026
  3

• templatetize the network endpoint e.g. for all sorts of health/readyness/startup probes

  k8sstormcenter/bob#68 · Filter by author entlein opened on Sep 6, 2025
  1

• Create BoB for pixie

  k8sstormcenter/bob#59 · Filter by author entlein opened on Aug 27, 2025
  5

• pin all github workflow tasks to SHA

  good first issue
  k8sstormcenter/bob#2 · Filter by author entlein opened on Jun 11, 2025