Feature Gated Insecure Paths

Flag feature-gated behavior whose security assumptions do not hold in both gate-on and gate-off states; require a comment near the gate check for new alpha attack surface.

kubernetes-sigs Updated

File contents

Skill: Feature-Gated Insecure Paths

  • Behavior added behind a feature gate whose security assumptions do not hold when the gate is off and when it is on. A feature gate must not ship a path that would be insecure if accidentally enabled. New alpha gates with new attack surface should note the assumption in a code comment near the gate check.

kubernetes-sigs/kueue/tree/main/cmd/experimental/skills/reviewer/security/feature-gated-insecure-paths commit abaa34a5b6

Frequently asked questions

npx skillmds@latest add kubernetes-sigs-kueue/feature-gated-insecure-paths