To report a vulnerability: do not open a public issue. Use
GitHub Security Advisories
or email security@keiailab.com.
The latest minor release receives security fixes. Older versions are best-effort.
- Operator controller — RBAC, ServiceAccount token mounting, webhook validation.
- Generated Valkey workloads — PodSecurityContext, NetworkPolicy, TLS.
- Helm chart defaults — least-privilege RBAC,
automountServiceAccountToken.