Batuhan Apaydın

feat: globalEnvs for KO_DOCKER_REPO, annotations and labels for the image config based on build ids

5

Fixes #627 #626 #633 Signed-off-by: Batuhan Apaydın I tested it with the following .ko.yaml .ko.yaml ```YAML dockerRepo: devopps defaultImageConfig: labels: org.opencontainers.image.licenses: MIT org.opencontainers.image.source: https://github.com/google/ko annotations: baz: qux baseImageOverrides: github.com/google/ko: golang:1.17...

## Expected Behavior Specify the `flannel-cfg` volume mount as read-only because it seems that it is necessary for reading the configuration of flannel. I do not know about the other...

kubectl run with stdin not working in k8s.RunKubectl method

3

This is my code below : `output2, _ := k8s.RunKubectlAndGetOutputE(t, kubectlOptions, "run", "netshoot", "--generator=run-pod/v1", "--image=nicolaka/netshoot", "-i", "--", podCommand)` And the output of that command here is : `command.go:87: Running command...

Runtime error: Argument ‘-DAnonymous Request Allowed’ starts with a - but has incorrect syntax. Exiting.

6

**Describe the bug** I got an error while disabling the rule "Anonymous Request Allowed" via the `-D` flag. It has been working for a while unless we upgrade Falco to...

double qoute in rule's condition is not working as expected

35

**Describe the bug** We use Falco custom rules defined in the [Cloud Native Security Hub](https://securityhub.dev/falco-rules/cve-2019-5736). For example, we noticed that there is a rule defined for [CVE-2019-5736 ](https://securityhub.dev/falco-rules/cve-2019-5736) contains a...

sign kubescape binaries and container images with cosign

5

[cosign](https://github.com/sigstore/cosign) is a tool that allows you to sign and verify container images, blobs, etc. with using public/private key pairs or without key (keyless) by taking the strength of the...

use github.repository_owner instead of hardcoded repository name

3

In build GA, I saw that kubescape uses a hardcoded repository name called "armosec" which causes a problem when someone wants to test GA in his fork, so, changing it...

generate/sign SBOM attestation files and attach them to container image with cosign

3

#### What would you like to be added: Since [Syft v0.40.0](https://github.com/anchore/syft/releases/tag/v0.40.0), Syft can generate and sign SBOM attestations by using cosign. It brings another chance that we can now attach...

build a distroless base image to be used for bom based on apko and melange

5

#### What would you like to be added: Based on the [comment](https://github.com/kubernetes-sigs/bom/pull/136#issuecomment-1183462590) that @puerco did, it'd be better to have a base image for bom tool that includes all the...