CNCF and Kusari offer supply-chain tooling to project maintainers
The news at the time
The CNCF-hosted announcement says CNCF projects receive free access to Kusari Inspector, described as an AI code-review and dependency-management tool.
The announcement lists GUAC, in-toto/Witness and OpenVEX among projects adopting the tool. This is a reported adoption list, not independent evidence that all vulnerabilities were removed.
Follow-up checked during renewal
No additional follow-up fact was established in this renewal. This does not establish that nothing changed.
What to review before applying this
Review eligibility, data handling and dependency coverage before connecting a repository. Measure actionable findings and false positives in the project rather than assuming benefit from tool adoption alone.
Editorial review suggestions; no hands-on product experiment was performed.
Claim-by-claim source evidence
The CNCF-hosted announcement says CNCF projects receive free access to Kusari Inspector, described as an AI code-review and dependency-management tool.
provide CNCF projects with free access to Kusari Inspector
Evidence source ↗
The announcement lists GUAC, in-toto/Witness and OpenVEX among projects adopting the tool. This is a reported adoption list, not independent evidence that all vulnerabilities were removed.
GUAC, in-toto/Witness, OpenVEX
Evidence source ↗
Korean digest for the historical date: 2026-04-11. Quotations and source context were reviewed editorially; this is not an independent experimental verification.
Discussion