Track kubernetes cves every month

[pacoxu]

What would you like to be added?

kubernetes/sig-security#1
It would be continuous work. The list would be helpful.

Why is this needed?

https://github.com/ismyk8ssecure/ismyk8ssecure
可以参考

[sbs2001]

Hey @pacoxu thanks for mentioning ismyk8ssecure . As a side note the data is mostly manually curated because k8s doesn't provide it in structured fashion anywhere currently. I will be updating the data after CVE or new release of k8s is released.

[pacoxu]

@sbs2001

CVE-2022-0185 is a Linux CVE for 5.1-rc1 and was fixed recently. It would be great to detect such case in your tool.

• check kube version
• check components version
• check kernel version as well