Prometheus is a popular CNCF project that already has strong security practices such as two-factor authentication for maintainers, one-person review for pull requests, and branch protection rules.

ty of Prometheus is in jeopardy. In this context, it is possible so simply turn off Prometheus (assuming the lifecycle feature enabled) by sending a local or remote administrator with access to its web server …

Introduction “Prometheus exporter for hardware and OS metrics exposed by *NIX kernels, written in Go with pluggable metric collectors.” From https://github.com/prometheus/node_exporter g the …

This report documents the findings of a security assessment targeting the Prometheus software compound and carried out by Cure53 in 2018. It should be noted that the project was sponsored by …