Security context

What an agent needs to avoid regressing past fixes and find the next vuln in this repo.

newrelic/helm-charts
master @ b03c1b2
8
Fixes
0
CVEs
HIGH
Peak severity
33.3%
Coverage
Highlights
Privilege Escalation: 5 prior fixes. Scrutinize any change in this area.
Actions: most-fixed (1 issue). Treat as high-risk during review.
1 high-severity fix in this history; regressions here are high-impact.
Recurring patterns

The bug types that recur here, drawn from past fixes, not open vulnerabilities.

Privilege Escalation: Default container security contexts previously allowed root execution and privilege escalation, which can lead to host takeover in the event of container escape.
Auth Bypass: Misconfigured workflow validation logic on pull_request_target allowed untrusted code from external repository forks to run without required approval.
Privilege Escalation: Excessive cluster-wide secrets access via broad ClusterRole configurations increased the blast radius of compromised components.