Skip to content

Releases: Runtime-Radar/runtime-radar

v0.2.0

03 Jun 12:50

Choose a tag to compare

Runtime Radar v0.2.0

This release completes the v0.2 roadmap: smarter threat detection, an expert mode for custom detection sources, and significantly improved observability. All components have been bumped to 0.2.

✨ Highlights

  • Expert mode — add your own detection sources (TracingPolicy), and modify or delete the built-in ones.
  • Observability — new metrics and dashboards across the platform, including Tetragon metrics and message-handling latency monitoring.
  • Optimized threat-detection logic (#13) — refined detection rules and queries.

🛡️ New & updated detectors

  • Hardlink creation detector for sensitive system files (new file-monitoring hardlink function).
  • CS_RT_FIFO_FILE_CREATE — detects FIFO file creation in suspicious paths.
  • CS_RT_BIN_PERM_RAISE — now handles chmod kprobes and covers an expanded directory scope.
  • CVE-2026-31431 (copy-fail) detector added.
  • listen-socket tracing policy extended with AF_ALG support.
  • Reworked sources with new names, descriptions, and functions (io-streams, permissions).

🔧 Improvements & fixes

  • Enabled message-handling latency monitoring.
  • Clearer Tetragon metric descriptions and refined queries.
  • public-api: parse last_password_changed_at as a string from auth-center.
  • UI: fixed empty-screen component.

🧱 Internals

  • Consolidated all module dependencies into a single vendor directory.
  • All services bumped to 0.2: auth-center, cluster-manager, cs-manager, policy-enforcer, notifier, event-processor, history-api, public-api, runtime-monitor, reverse-proxy, UI, Helm chart, and quickstart.
  • Added Runtime Radar 0.2 documentation (#27, #28).

What's Changed

  • docs: Fix formatting of 'Configuring monitoring' section by @gecube in #1
  • Update help.md by @vadimkulmanoff in #5
  • docs: Fix typos in main README.md by @TornaD-oz in #3
  • Add contributing guide and issue templates by @torkel-hoge in #6
  • hotfix: hide password from logs by @danilovid in #8
  • Optimize detection logic; upgrade go to 1.25 by @torkel-hoge in #13
  • Enable Configurable TLS and Auth for Non-Production Environments by @ckaytev in #10
  • docs(helm): update TLS configuration and fix RabbitMQ description by @avlllo in #14
  • Add roadmap to README.md by @torkel-hoge in #15
  • refactor: use lib/logger across services by @danilovid in #18
  • fix: align gorm v1.31.1 and postgres driver v1.6.0 across services by @danilovid in #19
  • fix(helm): pass arrays via per-element --set-string args by @danilovid in #20
  • Release 0.2 by @avlllo in #29

New Contributors

Full Changelog: v0.1.0...v0.2.0

v0.1.0

30 Oct 15:26
c2da3a5

Choose a tag to compare

doc: update quick start install command