Issues

• fix(results): canonicalise the manifest model so provider/model and bare+provider share a setup id

  kubernetes-sigs/devops-bench#291 · Filter by author isadominguez314 opened on Oct 15, 2026

• fix(scoring): split a provider/model AGENT_MODEL before the judge and chaos fallbacks use it

  kubernetes-sigs/devops-bench#290 · Filter by author isadominguez314 opened on Oct 15, 2026

• fix(scoring): skip judged families when no judge could be built

  kubernetes-sigs/devops-bench#286 · Filter by author isadominguez314 opened on Oct 12, 2026

• fix(agents): the API agent discards its partial trajectory on timeout

  kubernetes-sigs/devops-bench#285 · Filter by author isadominguez314 opened on Oct 12, 2026

• Record whether the agent started, and key unscoreable runs on it

  kubernetes-sigs/devops-bench#283 · Filter by author isadominguez314 opened on Oct 12, 2026
  1

• Make the container metadata-endpoint block a sandbox prerequisite on every cloud

  kubernetes-sigs/devops-bench#271 · Filter by author isadominguez314 opened on Oct 2, 2026

• security(sandbox): harden _chown_after_remap root container and restrict --network kind / host.docker.internal exposure

  kubernetes-sigs/devops-bench#251 · Filter by author eugeneng04 opened on Sep 29, 2026

• security(agents): trajectory tampering in /workspace and unvalidated symlink/config handling during post-run host extraction

  kubernetes-sigs/devops-bench#250 · Filter by author eugeneng04 opened on Sep 29, 2026

• fix(tasks): cve-remediation false-positive cheat detection on service-inventory fixture and cp-recovery pod-security deadlock in sandbox

  kubernetes-sigs/devops-bench#249 · Filter by author eugeneng04 opened on Sep 29, 2026

• security(verification): IdentityPreservedVerifier stores baseline UID and timestamp in agent-writable annotations on the target resource

  kubernetes-sigs/devops-bench#248 · Filter by author eugeneng04 opened on Sep 29, 2026

• feat(cheat-detection): detect indirect task.yaml discovery and parsed verification_spec output

  kubernetes-sigs/devops-bench#245 · Filter by author eugeneng04 opened on Sep 28, 2026

• fix(tasks): balance GitOps objective weights in migration-and-upgrade and enable git_repo_sync in opa-remediation

  kubernetes-sigs/devops-bench#244 · Filter by author eugeneng04 opened on Sep 28, 2026

• fix(metrics): preserve multi-line checklist bullets and require execution_trace corroboration in ChecklistMetric

  kubernetes-sigs/devops-bench#242 · Filter by author eugeneng04 opened on Sep 28, 2026

• security(k8s): prevent sandboxed bench-agent privilege escalation via edit ClusterRole and service-account-token Secrets

  kubernetes-sigs/devops-bench#241 · Filter by author eugeneng04 opened on Sep 28, 2026

• Hold-mode verification follow-ups

  kubernetes-sigs/devops-bench#228 · Filter by author pradeepvrd opened on Sep 21, 2026

• EKS Support

  kubernetes-sigs/devops-bench#227 · Filter by author upodroid opened on Sep 20, 2026
  1

• Add formal task and benchmark versioning

  kubernetes-sigs/devops-bench#226 · Filter by author pradeepvrd opened on Sep 20, 2026
  2

• Task improvements

  kubernetes-sigs/devops-bench#223 · Filter by author pradeepvrd opened on Sep 20, 2026
  3

• A KinD run requires GCP application-default credentials, so the documented no-cloud path fails before the agent starts

  kubernetes-sigs/devops-bench#222 · Filter by author shashank-boyapally opened on Sep 20, 2026

• feat(results): Standardize universal token accounting, rejudge workflows, and offline results normalization

  kubernetes-sigs/devops-bench#169 · Filter by author isadominguez314 opened on Sep 14, 2026

• feat(verification): Enhance deterministic verification engine with hold-window monitoring, fair budget sharing, and expanded verifier suite

  kubernetes-sigs/devops-bench#168 · Filter by author isadominguez314 opened on Sep 14, 2026

• feat(agents): Harden agent CLI execution with flag forwarding, synchronized timeouts, multi-provider transports, and local serving

  kubernetes-sigs/devops-bench#167 · Filter by author isadominguez314 opened on Sep 14, 2026

• feat(infra): Implement fail-closed model preflight, campaign launcher contract, and robust teardown

  kubernetes-sigs/devops-bench#166 · Filter by author isadominguez314 opened on Sep 14, 2026

• A failed tofu apply reaches results.json without its stderr, so provisioning failures cannot be diagnosed after the run

  kubernetes-sigs/devops-bench#157 · Filter by author geojaz opened on Sep 10, 2026

• Bastion scripts should not default the MCP server and skills to gke-mcp

  kubernetes-sigs/devops-bench#140 · Filter by author pradeepvrd opened on Aug 28, 2026