grafeas / kritis

Deploy-time Policy Enforcer for Kubernetes applications
https://github.com/grafeas/kritis/blob/master/docs/binary-authorization.md
Apache License 2.0
694 stars 135 forks source link

No Longer Maintained #632

Open Spazzy757 opened 9 months ago

Spazzy757 commented 9 months ago

Situation

It looks like this Repository is no longer maintained and should be archived. While I fully understand how much work and effort goes into being an Open Source Maintainer, there are a lot of users that will not check if this tool is updated and secure and as this seems to be a security focused tool, lack of support and active maintainers means that users of this repository might become vulnerable when depending on this repository.

Proposed Fix

Mark this Repository as deprecated/archived with a note in the Readme

OR

Update the various libraries that Kritis depends on

Spazzy757 commented 9 months ago

Also happy to help with updating if the path forward is to carry on maintaining this project

rhdesmond commented 3 weeks ago

These are understandable concerns; right now our primary constraint is engineer bandwidth. We are discussing next quarter what our long term strategy is with respect to maintenance or archival.