v0.1.0 — CI/CD Pipeline Security Posture for Kubernetes

Initial release of the Fluxgate Operator — a Kubernetes-native controller that continuously monitors and enforces the security posture of CI/CD pipeline configurations connected to your cluster.

Connectors

• ArgoCD: discovers Applications, correlates workloads, suspend/resume sync
• Flux: discovers GitRepositories/Kustomizations, suspend/resume reconciliation
• Tekton: discovers Pipelines/PipelineRuns, advisory suspend

Detection

• 53 rules across 6 platforms via Fluxgate v0.7.0 pkg/scanner

CRDs

• PipelineSecurityPolicy: configurable thresholds and enforcement ladder
• PipelineSecurityReport: compliance state, findings, workload correlation

Enforcement

• annotate, alert (Slack/webhook), suspendSync, labelWorkloads
• Grace periods and automatic compliance restoration

Install

helm install fluxgate-operator charts/fluxgate-operator/ \
  --set github.tokenSecretName=my-github-token

Or with Kustomize:

kubectl apply -k config/default/

See README for full documentation.