service-mesh-observability
Warn
Audited by Socket on Sep 15, 2026
1 alert found:
AnomalyAnomalyreferences/details.md
LOWAnomalyLOW
references/details.md
No malicious code or supply-chain attack behavior is present. The fragment contains security risks if deployed without hardening: anonymous cluster-wide Kiali access, potentially broadly reachable telemetry receivers, unencrypted Jaeger export, high-volume 100% tracing, and unsigned image references. These should be treated as example configurations and secured before production use.
Confidence: 98%Severity: 67%
Audit Metadata