Featured on
Featured on
— no diffs detected in snapshot history yet —
No reports yet — be the first to share your triage timing for Kubernetes.
// peer-sourced response times. platforms won’t publish this — hunters can. anonymized in aggregate.
{
"allows_bounty_splitting": true,
"average_time_to_bounty_awarded": 1855,
"average_time_to_first_program_response": 12,
"average_time_to_report_resolved": 1726,
"handle": "kubernetes",
"id": 0,
"managed_program": true,
"name": "Kubernetes",
"offers_bounties": true,
"offers_swag": false,
"response_efficiency_percentage": 69,
"submission_state": "open",
"url": "https://hackerone.com/kubernetes",
"website": "https://kubernetes.io/",
"targets": {
"in_scope": [
{
"asset_identifier": "Community Management & Communications",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Kubernetes community management & communication tools are currently ineligible for bounty. Please avoid disruptions.\n\nList of ineligible community assets:\n\n- k8s.io event calendar: https://calendar.google.com/calendar/r?cid=Y2dudDM2NHZkOHM4NmhyMnBoYXBmamM2dWtAZ3JvdXAuY2FsZW5kYXIuZ29vZ2xlLmNvbQ\n- kubernetes.slack.com\n- @kubernetesio twitter handle\n- Kubernetes meetup account\n- kubeweekly news list: kube.news\n- google groups mailing lists, e.g. https://groups.google.com/forum/#!forum/kubernetes-*\n- subreddit: reddit.com/kubernetes\n- youtube.com/kubernetescommunity\n- Kubernetes zoom accounts\n- stack overflow tag: https://stackoverflow.com/questions/tagged/kubernetes",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "Tier 1",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "Tier 2",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "Tier 3",
"asset_type": "OTHER",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": null,
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "github.com/kubernetes-csi",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kubernetes CSI drivers & infrastructure. Not all repos are eligible for bounty.\n\nEligible for bounty:\n- github.com/kubernetes-csi/external-provisioner\n- github.com/kubernetes-csi/external-snapshotter\n- github.com/kubernetes-csi/node-driver-registrar\n- github.com/kubernetes-csi/livenessprobe\n- github.com/kubernetes-csi/csi-release-tools\n- github.com/kubernetes-csi/csi-lib-utils\n- github.com/kubernetes-csi/kubernetes-csi.github.io\n- github.com/kubernetes-csi/docs\n\nIneligible:\n- github.com/kubernetes-csi/driver-registrar (deprecated)\n- github.com/kubernetes-csi/csi-test\n- github.com/kubernetes-csi/drivers (example code)\n- github.com/kubernetes-csi/cluster-driver-registrar (deprecated)\n- github.com/kubernetes-csi/external-attacher (alpha)\n- github.com/kubernetes-csi/external-resizer (alpha)\n- github.com/kubernetes-csi/csi-driver-host-path (not recommended for production)\n- github.com/kubernetes-csi/csi-driver-iscsi (not stable)\n- github.com/kubernetes-csi/csi-driver-nfs (not stable)\n- github.com/kubernetes-csi/csi-driver-image-populator (not stable)\n- github.com/kubernetes-csi/csi-driver-flex (not stable)\n- github.com/kubernetes-csi/csi-driver-fibre-channel (not stable)\n- github.com/kubernetes-csi/csi-lib-fc (not stable)\n- github.com/kubernetes-csi/csi-lib-iscsi (not stable)",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "github.com/kubernetes-retired",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "The retired projects are no longer maintained",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes-client",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kubernetes client libraries. The stable libraries are eligible for bounty, including:\n- https://github.com/kubernetes-client/python\n- https://github.com/kubernetes-client/java\n\nSupporting libraries are also eligible:\n\n- https://github.com/kubernetes-client/gen\n- https://github.com/kubernetes-client/python-base\n\nAll other libraries are ineligible for bounty due to the alpha status or work in progress status.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes-incubator",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "The kubernetes-incubator process is deprecated.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes-security",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Unauthorized access (read or write) to any repositories under the kubernetes-security github organization is eligible.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes-sigs",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Unless explicitly listed as an eligible asset, repositories under the kubernetes-sigs github org are not eligible for bounty.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/api",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "The canonical location of the Kubernetes API definition.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/apiextensions-apiserver",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "API server for API extensions like CustomResourceDefinitions",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/apimachinery",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/apiserver",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Library for writing a Kubernetes-style API server.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/autoscaler",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Autoscaling components for Kubernetes\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/cli-runtime",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Set of helpers for creating kubectl commands and plugins.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/client-go",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Go client for Kubernetes.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/cloud-provider",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "cloud-provider defines the shared interfaces which Kubernetes cloud providers implement. These interfaces allow various controllers to integrate with any cloud provider in a pluggable fashion. Also serves as an issue tracker for SIG Cloud Provider.\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/cloud-provider-alibaba-cloud",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "CloudProvider for Alibaba Cloud\n\nVendor-specific plugins are not eligible for bounty. We recommend reporting vulnerabilities through the vendor's bug bounty program instead.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/cloud-provider-aws",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Vendor-specific plugins are not eligible for bounty. We recommend reporting vulnerabilities through the vendor's bug bounty program instead.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/cloud-provider-azure",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Cloud provider for Azure\n\nVendor-specific plugins are not eligible for bounty. We recommend reporting vulnerabilities through the vendor's bug bounty program instead.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/cloud-provider-gcp",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Vendor-specific plugins are not eligible for bounty. We recommend reporting vulnerabilities through the vendor's bug bounty program instead.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/cloud-provider-openstack",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Vendor-specific plugins are not eligible for bounty. We recommend reporting vulnerabilities through the vendor's bug bounty program instead.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/cloud-provider-sample",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Sample of how to build a cloud provider repo. This will build a Kubernetes image which deploys on bare metal. It uses the fake cloud provider. It consumes the K8s/K8s build artifact and adds to it the Cloud Controller Manager and CSI Daemon Set.\n\nExample code.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/cloud-provider-vsphere",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Kubernetes Cloud Provider for vSphere (Beta)\n\nVendor-specific plugins are not eligible for bounty. We recommend reporting vulnerabilities through the vendor's bug bounty program instead.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/cluster-bootstrap",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/cluster-registry",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Cluster Registry API",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/code-generator",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Generators for kube-like API types",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/community",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Kubernetes community content",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/component-base",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Shared code for kubernetes core components",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/cri-api",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Container Runtime Interface (CRI) – a plugin interface which enables kubelet to use a wide variety of container runtimes.\n\n",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/csi-api",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/csi-translation-lib",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Staging repo for CSI Migration/Translation libraries\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/dns",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kubernetes DNS service",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/enhancements",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Features tracking repo for Kubernetes releases\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/examples",
"asset_type": "SOURCE_CODE",
"availability_requirement": "medium",
"confidentiality_requirement": "medium",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Kubernetes application example tutorials",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/frakti",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "The hypervisor-based container runtime for Kubernetes.\n\nVendor-specific plugins are not eligible for bounty. We recommend reporting vulnerabilities through the vendor's bug bounty program instead.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/funding",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Funding requests for project infrastructure, events, and consulting.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/gengo",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Gengo library for code generation.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/git-sync",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "A sidecar app which clones a git repo and keeps it in sync with the upstream.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/k8s.io",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kubernetes files for various *.k8s.io sites",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/klog",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Forked from golang/glog\nLeveled execution logs for Go (fork of https://github.com/golang/glog)",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kompose",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Go from Docker Compose to Kubernetes\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kops",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kubernetes Operations (kops) - Production Grade K8s Installation, Upgrades, and Management\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kube-aggregator",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Aggregator for Kubernetes-style API servers: dynamic registration, discovery summarization, secure proxy",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kube-controller-manager",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "kube-controller-manager component configs",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kube-deploy",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "A place for cluster deployment automation\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kube-openapi",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kubernetes OpenAPI spec generation & serving",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kube-proxy",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "kube-proxy component configs",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kube-scheduler",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "kube-scheduler component configs",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kube-state-metrics",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Add-on agent to generate and expose cluster-level metrics.\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kubeadm",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Aggregator for issues filed against kubeadm\n\n",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kubectl",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Issue tracker and mirror of kubectl code\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kubelet",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "kubelet component configs",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kubernetes",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Production-Grade Container Scheduling and Management",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kubernetes-anywhere",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "{concise,reliable,cross-platform} turnup of Kubernetes clusters\n\nDEPRECATED",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/kubernetes-template-project",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "A template for starting new projects on the github.com/kubernetes organization",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/legacy-cloud-providers",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "This repository hosts the legacy in-tree cloud providers. Out-of-tree cloud providers can consume packages in this repo to support legacy implementations of their Kubernetes cloud provider.\n\nVendor-specific plugins are not eligible for bounty. We recommend reporting vulnerabilities through the vendor's bug bounty program instead.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/metrics",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kubernetes metrics-related API types and clients",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/minikube",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Run Kubernetes locally\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/node-api",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/node-problem-detector",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "This is a place for various problem detectors running on the Kubernetes nodes.\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/org",
"asset_type": "SOURCE_CODE",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Meta configuration for Kubernetes Github Org\n\n",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/perf-tests",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Performance tests and benchmarks\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/publishing-bot",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Code behind the robot to publish from staging to real repositories.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/release",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Release infrastructure for Kubernetes and related components\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/repo-infra",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kubernetes repository infrastucture tools\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/sample-apiserver",
"asset_type": "SOURCE_CODE",
"availability_requirement": "medium",
"confidentiality_requirement": "medium",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Reference implementation of an apiserver for a custom Kubernetes API.\n\nExample code.",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/sample-cli-plugin",
"asset_type": "SOURCE_CODE",
"availability_requirement": "medium",
"confidentiality_requirement": "medium",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Sample kubectl plugin",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/sample-controller",
"asset_type": "SOURCE_CODE",
"availability_requirement": "medium",
"confidentiality_requirement": "medium",
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Repository for sample controller. Complements sample-apiserver",
"integrity_requirement": "medium",
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/security",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "Kubernetes Security Process and Security Committee docs",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/sig-release",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Repo for SIG release\n\n",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/steering",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": true,
"instruction": "The Kubernetes Steering Committee",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/test-infra",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Test infrastructure for the Kubernetes project.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/utils",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Non-Kubernetes-specific utility libraries which are consumed by multiple projects.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://github.com/kubernetes/website",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kubernetes website and documentation repo:",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "https://storage.googleapis.com/kubernetes-release/",
"asset_type": "OTHER",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kubernetes release artifacts download server.\n\nWrite access or modification of assets are eligible for bounty. Please DO NOT modify production artifacts. If you need a test target, you can use a test artifact such as `addons/test/crinit/2017-11-17/crinit`",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "k8s.gcr.io",
"asset_type": "OTHER",
"availability_requirement": "high",
"confidentiality_requirement": "high",
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Our official container repository (an alias to gcr.io/google-containers).\n\nThe ability to write to or modify containers in the repository are in scope. Please DO NOT modify production containers. If you need a test target, please use a test image such as fakegitserver.",
"integrity_requirement": "high",
"max_severity": "critical"
},
{
"asset_identifier": "k8s.io",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kubernetes nginx server.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "kubernetes-csi.github.io",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kubernetes CSI documentation site.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "kubernetes.io",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Main kubernetes website, hosted by netlify.",
"integrity_requirement": null,
"max_severity": "critical"
},
{
"asset_identifier": "prow.k8s.io",
"asset_type": "URL",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": true,
"eligible_for_submission": true,
"instruction": "Kubernetes build & test infrastructure.\n\nPlease limit automated scanning to 1qps.",
"integrity_requirement": null,
"max_severity": "critical"
}
],
"out_of_scope": [
{
"asset_identifier": "https://github.com/kubernetes/ingress-gce",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": null,
"max_severity": "none"
},
{
"asset_identifier": "https://github.com/kubernetes/ingress-nginx",
"asset_type": "SOURCE_CODE",
"availability_requirement": null,
"confidentiality_requirement": null,
"eligible_for_bounty": false,
"eligible_for_submission": false,
"instruction": null,
"integrity_requirement": null,
"max_severity": "none"
}
]
}
}Community Management & Communications· criticalTier 1· criticalTier 2· criticalTier 3· criticalstorage.googleapis.com/kubernetes-release/· criticalgithub.com/kubernetes-incubator· criticalgithub.com/kubernetes/autoscaler· criticalgithub.com/kubernetes/cli-runtime· criticalgithub.com/kubernetes/client-go· criticalgithub.com/kubernetes/cloud-provider· criticalgithub.com/kubernetes/cloud-provider-alibaba-cloud· criticalgithub.com/kubernetes/cloud-provider-aws· criticalgithub.com/kubernetes/cloud-provider-azure· criticalgithub.com/kubernetes/cloud-provider-gcp· criticalgithub.com/kubernetes/cloud-provider-openstack· criticalgithub.com/kubernetes/cloud-provider-sample· criticalgithub.com/kubernetes/cloud-provider-vsphere· criticalgithub.com/kubernetes/cluster-bootstrap· criticalgithub.com/kubernetes/cluster-registry· criticalgithub.com/kubernetes/code-generator· criticalgithub.com/kubernetes/community· criticalgithub.com/kubernetes/component-base· criticalgithub.com/kubernetes/cri-api· criticalgithub.com/kubernetes/csi-api· criticalgithub.com/kubernetes/csi-translation-lib· criticalgithub.com/kubernetes/dns· criticalgithub.com/kubernetes/enhancements· criticalgithub.com/kubernetes/examples· criticalgithub.com/kubernetes/frakti· criticalgithub.com/kubernetes/funding· criticalgithub.com/kubernetes/gengo· criticalgithub.com/kubernetes/git-sync· criticalgithub.com/kubernetes/k8s.io· criticalgithub.com/kubernetes/klog· criticalgithub.com/kubernetes/kompose· criticalgithub.com/kubernetes/kops· criticalgithub.com/kubernetes/kube-aggregator· criticalgithub.com/kubernetes/kube-controller-manager· criticalgithub.com/kubernetes/kube-deploy· criticalgithub.com/kubernetes/kube-openapi· criticalgithub.com/kubernetes/kube-proxy· criticalgithub.com/kubernetes/kube-scheduler· criticalgithub.com/kubernetes/kube-state-metrics· criticalgithub.com/kubernetes/kubeadm· criticalgithub.com/kubernetes/kubectl· criticalgithub.com/kubernetes/kubelet· criticalgithub.com/kubernetes/kubernetes· criticalgithub.com/kubernetes/kubernetes-anywhere· criticalgithub.com/kubernetes/kubernetes-template-project· criticalgithub.com/kubernetes/legacy-cloud-providers· criticalgithub.com/kubernetes/metrics· criticalgithub.com/kubernetes/minikube· criticalgithub.com/kubernetes/node-api· criticalgithub.com/kubernetes/node-problem-detector· criticalgithub.com/kubernetes/org· criticalgithub.com/kubernetes/perf-tests· criticalgithub.com/kubernetes/publishing-bot· criticalgithub.com/kubernetes/release· criticalgithub.com/kubernetes/repo-infra· criticalgithub.com/kubernetes/sample-apiserver· criticalgithub.com/kubernetes/sample-cli-plugin· criticalgithub.com/kubernetes/sample-controller· criticalgithub.com/kubernetes/security· criticalgithub.com/kubernetes/sig-release· criticalgithub.com/kubernetes/steering· criticalgithub.com/kubernetes/test-infra· criticalgithub.com/kubernetes/utils· criticalgithub.com/kubernetes/website· criticalk8s.gcr.io· critical