Issues

• refactor: consider migrating from hashicorp/golang-lru/v2/expirable to jellydator/ttlcache/v3

  kubescape/node-agent#1014 · Filter by author matthyx opened on Oct 3, 2026

• HTTP gadget fails BPF verification on COS 121 / Linux 6.6.157 (256 KiB read into 32 KiB scratch map)

  kubescape/node-agent#1009 · Filter by author matthyx opened on Oct 2, 2026

• SBOM stuck in initializing on k3s: relative lowerdir resolved against hardcoded containerd root

  bug
  kubescape/node-agent#1004 · Filter by author BroderPeters opened on Oct 2, 2026

• Pin GitHub Actions by commit hash in CI workflows

  good-first-issuehelp-wantedsecurity-slam
  kubescape/node-agent#996 · Filter by author matthyx opened on Oct 2, 2026

• Enforce minimal token permissions across GitHub Actions workflows

  good-first-issuehelp-wantedsecurity-slam
  kubescape/node-agent#995 · Filter by author matthyx opened on Oct 2, 2026

• Scan container images for misplaced secrets

  kubescape/node-agent#987 · Filter by author khuswant18 opened on Sep 27, 2026
  

• hasTty is false on /dev/pts/0: bump trace_exec gadget to v0.55.0+

  kubescape/node-agent#975 · Filter by author darkweaver87 opened on Sep 14, 2026

• Garbage-collect host-data resources after Kubernetes Nodes are deleted

  kubescape/node-agent#963 · Filter by author devantler opened on Sep 8, 2026

• Host sensor warns continuously when kube-proxy is intentionally absent

  kubescape/node-agent#962 · Filter by author devantler opened on Sep 8, 2026

• Syscall observations are silently lost between the advise_seccomp map and the container profile (87% loss measured)

  kubescape/node-agent#918 · Filter by author rotemamsa opened on Aug 24, 2026
  6

• Learned seccomp profile can be marked complete and auto-enforced while missing syscalls the workload needs, with no self-healing path

  kubescape/node-agent#912 · Filter by author matthyx opened on Aug 21, 2026
  2

• Avoid Quay authentication failures for fork PRs in build-and-push-image

  kubescape/node-agent#896 · Filter by author Namanbhatt-01 opened on Aug 17, 2026
  1

• gVisor Sentry-level event export (seccheck) is production-ready and dynamically attachable — a stronger Part B signal source than static config assumes

  kubescape/node-agent#894 · Filter by author doraem-on opened on Aug 16, 2026

• Remove client-side ug- profile merge once storage server-side merge (storage#319) is deployed

  kubescape/node-agent#830 · Filter by author matthyx opened on Jun 4, 2026
  5

• Scanning the Kubernetes host and kernel for vulnerabilities (Monitoring phase)

  backlogsecurity
  kubescape/node-agent#431 · Filter by author matthyx opened on Dec 10, 2024

• Moving to image based Gadgets with Inspektor Gadget

  backlogcore platform enhancements
  kubescape/node-agent#429 · Filter by author matthyx opened on Dec 10, 2024