Affected by GO-2023-1804 and 3 other vulnerabilities

GO-2023-1804: Kyverno vulnerable due to usage of insecure cipher in github.com/kyverno/kyverno

GO-2023-1819: Kyverno resource with a deletionTimestamp may allow policy circumvention in github.com/kyverno/kyverno

GO-2023-2340: Attacker can cause Kyverno user to unintentionally consume insecure image in github.com/kyverno/kyverno

GO-2024-3230: Kyverno's PolicyException objects can be created in any namespace by default in github.com/kyverno/kyverno

kyverno

module

v1.3.6-rc4 Latest Latest Go to latest Published: May 10, 2021 License: Apache-2.0

Details

Valid go.mod file

The Go module system was introduced in Go 1.11 and is the official dependency management solution for Go.
Redistributable license

Redistributable licenses place minimal restrictions on how software can be used, modified, and redistributed.
Tagged version

Modules with tagged versions give importers more predictable builds.
Stable version

When a project reaches major version v1 it is considered stable.
Learn more about best practices

Repository

github.com/kyverno/kyverno

README ¶

Kyverno

Kubernetes Native Policy Management 🎉

Kyverno is a policy engine designed for Kubernetes. It can validate, mutate, and generate configurations using admission controls and background scans. Kyverno policies are Kubernetes resources and do not require learning a new language. Kyverno is designed to work nicely with tools you already use like kubectl, kustomize, and Git.

📙 Documentation

Kyverno guides and reference documents are available at: kyverno.io.

Try the quick start guide to install Kyverno and create your first policy.

➕ Contributing

Checkout out the Kyverno Community page for ways to get involved and details on joining our next community meeting.

🙋‍♂️ Getting Help

For feature requests and bugs, file an issue.
For discussions or questions, join the #kyverno channel on the Kubernetes Slack
For community meeting access join the mailing list.
To get updates ⭐️ star this repository.

Directories ¶

Path	Synopsis
api
cmd
cli/kubectl-kyverno
initContainer Cleans up stale webhookconfigurations created by kyverno that were not cleanedup	Cleans up stale webhookconfigurations created by kyverno that were not cleanedup
kyverno
hack
chainsaw-matrix Module
controller-gen Module
pkg
api/kyverno
api/kyverno/v1
api/kyverno/v1alpha1 Package v1alpha1 contains API Schema definitions for the policy v1alpha1 API group +k8s:deepcopy-gen=package +kubebuilder:object:generate=true +groupName=kyverno.io Package v1alpha1 contains API Schema definitions for the policy v1alpha1 API group +kubebuilder:object:generate=true +groupName=kyverno.io	Package v1alpha1 contains API Schema definitions for the policy v1alpha1 API group +k8s:deepcopy-gen=package +kubebuilder:object:generate=true +groupName=kyverno.io Package v1alpha1 contains API Schema definitions for the policy v1alpha1 API group +kubebuilder:object:generate=true +groupName=kyverno.io
api/policyreport/v1alpha1 Package v1alpha1 contains API Schema definitions for the policy v1alpha1 API group +k8s:deepcopy-gen=package +kubebuilder:object:generate=true +groupName=wgpolicyk8s.io Package v1alpha1 contains API Schema definitions for the policy v1alpha1 API group +kubebuilder:object:generate=true +groupName=wgpolicyk8s.io	Package v1alpha1 contains API Schema definitions for the policy v1alpha1 API group +k8s:deepcopy-gen=package +kubebuilder:object:generate=true +groupName=wgpolicyk8s.io Package v1alpha1 contains API Schema definitions for the policy v1alpha1 API group +kubebuilder:object:generate=true +groupName=wgpolicyk8s.io
auth
backward_compatibility
client/clientset/versioned This package has the automatically generated clientset.	This package has the automatically generated clientset.
client/clientset/versioned/fake This package has the automatically generated fake clientset.	This package has the automatically generated fake clientset.
client/clientset/versioned/scheme This package contains the scheme of the automatically generated clientset.	This package contains the scheme of the automatically generated clientset.
client/clientset/versioned/typed/kyverno/v1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
client/clientset/versioned/typed/kyverno/v1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
client/clientset/versioned/typed/kyverno/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
client/clientset/versioned/typed/kyverno/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
client/clientset/versioned/typed/policyreport/v1alpha1 This package has the automatically generated typed clients.	This package has the automatically generated typed clients.
client/clientset/versioned/typed/policyreport/v1alpha1/fake Package fake has the automatically generated clients.	Package fake has the automatically generated clients.
client/informers/externalversions
client/informers/externalversions/internalinterfaces
client/informers/externalversions/kyverno
client/informers/externalversions/kyverno/v1
client/informers/externalversions/kyverno/v1alpha1
client/informers/externalversions/policyreport
client/informers/externalversions/policyreport/v1alpha1
client/listers/kyverno/v1
client/listers/kyverno/v1alpha1
client/listers/policyreport/v1alpha1
common
config
dclient
engine
engine/anchor
engine/anchor/common
engine/common
engine/context
engine/jmespath
engine/json-utils
engine/mutate
engine/operator
engine/response
engine/utils
engine/validate
engine/variables
engine/variables/operator
engine/wildcards
event
generate
generate/cleanup
kyverno
kyverno/apply
kyverno/common
kyverno/crds
kyverno/sanitizedError
kyverno/store
kyverno/test
kyverno/validate
kyverno/version
openapi
policy
policy/common
policy/generate
policy/generate/fake
policy/mutate
policy/validate
policycache
policymutation
policyreport
policystatus
resourcecache
signal
testrunner
tls
userinfo
utils
version
webhookconfig
webhooks
webhooks/generate
test
e2e
e2e/generate
e2e/mutate

?	: This menu
/	: Search site
f or F	: Jump to
y or Y	: Canonical URL