All pull requests

Pull requests

• fix(eks-security): posture_collect.sh keeps the other instances when one id in a by-id batch is gone

  #478·utkarpun opened Nov 11, 2026Contributor·

  ·

• fix(eks-security): AWS-patched table leaves out a NodePool any advisory holds pending; IMDSv2 posture row read errors

  #477·utkarpun opened Nov 11, 2026Contributor·

  ·

• fix(eks-recon): detect Kyverno and Gatekeeper Pod matches (#291)

  #476·vinh-xbrainn opened Nov 11, 2026Collaborator·2 tasks done·

  ·
  1

• fix(ecs-modernize): App2Container VM case; stop publishing sample app pages

  #475·utkarpun opened Nov 10, 2026Contributor·

  ·

• eks-cost-intelligence: member-account cost method (usage type by cluster tag)

  #474·utkarpun opened Nov 10, 2026Contributor·

  ·
  1

• fix(eks-security): revoke the target role and say who a revoke hits, cover a leaked key's sessions, drop revoke for the node role

  #473·utkarpun opened Nov 10, 2026Contributor·

  ·

• fix(eks-security): posture_score.sh and posture_extra.sh refuse bad arguments with exit 2

  #466·utkarpun opened Nov 10, 2026Contributor·

  ·

• fix(evals): generate_eval_manifest.py refuses arguments; regenerate evals.json

  #465·utkarpun opened Nov 10, 2026Contributor·

  ·

• fix(report_to_html): refuse unknown or extra arguments in two converters

  #464·utkarpun opened Nov 10, 2026Contributor·

  ·

• fix(evals): expect the Kubernetes API caveat on eks-security credential revoke

  #461·utkarpun opened Nov 10, 2026Contributor·

  ·

• ecs-security: an explicit Deny on the task role is not instant and hits every task

  #459·utkarpun opened Nov 10, 2026Contributor·

  ·

• fix(eks-well-architected-review): filter the instance price lookup to marketoption=OnDemand

  #457·utkarpun opened Nov 10, 2026Contributor·

  ·

• docs(eks-security): cut off one node's already-issued role credentials with a per-instance deny

  #454·utkarpun opened Nov 10, 2026Contributor·

  ·

• fix(evals): attach each tool result to its call by tool_use_id (issue 399 item 108)

  #451·utkarpun opened Nov 10, 2026Contributor·

  ·

• fix(evals): record the real runs per prompt, and survive a null user_notes_summary (issue 399 items 111 and 112)

  #450·utkarpun opened Nov 10, 2026Contributor·

  ·

• fix(evals): stage the update-docs mock sync scripts under misc/

  #444·utkarpun opened Nov 10, 2026Contributor·

  ·

• docs(evals): fix eval README credential and offline claims

  #443·utkarpun opened Nov 10, 2026Contributor·

  ·

• fix(evals): keep the host ~/.aws away from the subject under a session policy

  #442·utkarpun opened Nov 10, 2026Contributor·

  ·

• fix(evals): run the update-docs task evals by default

  #441·utkarpun opened Nov 10, 2026Contributor·

  ·

• fix(misc): refuse a reversed marker pair in the reference scripts (issue 399 item 104)

  #438·utkarpun opened Nov 9, 2026Contributor·

  ·

• fix(misc): require each reference marker exactly once and check every marker before writing (issue 399 items 101, 102)

  #437·utkarpun opened Nov 9, 2026Contributor·

  ·

• docs(eks-ingress-migration): name the IAM reads behind the controller and external-dns checks (issue 399 item 96)

  #432·utkarpun opened Nov 9, 2026Contributor·

  ·

• fix(examples): move the karpenter example to AWS provider 6, Helm provider 3 and terraform-aws-eks v21

  #367·utkarpun opened Nov 6, 2026Contributor·

  ·
  1

• fix(eks-ingress-migration): coverage gate for denied reads + one layout

  #257·kritktongrakroj opened Oct 8, 2026Collaborator·

  ·
  2