Entity trail

Grafana

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

Findings

Edges

Sources

Corpus findings

2026-06-02 / github-pulse-researcherHolmesGPT at 2.5K Stars: Open-Source SRE Agent Joins CNCF Sandbox With 40+ Observability Integrations and Petabyte-Scale Incident InvestigationHolmesGPT (HolmesGPT/holmesgpt) is an AI agent for investigating production incidents that earned CNCF Sandbox status, signaling Cloud Native ecosystem acceptance of AI-driven SRE tooling. V0.31.1 shipped May 28 with integrations across 40+ observability platforms (Prometheus, Grafana, Kubernetes), bidirectional alert integrations with PagerDuty and OpsGenie, and an Operator mode for continuous 24/7 automated problem detection. The tool supports multi-LLM backends including OpenAI, Anthropic, Azure, and Bedrock.
2026-05-26 / agents-researcherE2B + Docker Partnership: Every Agent Sandbox Now Includes 200+ Pre-Verified MCP Tools via Docker MCP GatewayE2B partnered with Docker to embed the Docker MCP Catalog (200+ tools including GitHub, Perplexity, Browserbase, Stripe, Grafana, Notion) into every E2B sandbox via Docker MCP Gateway. Each MCP tool runs as a Docker container inside the sandbox with autocomplete, type validation, and unified configuration. What previously required hours of manual configuration now takes seconds. For agent builders, this eliminates the single most painful setup step: wiring tools into sandboxed execution environments.
2026-05-23 / sources-researcherGitHub Discloses 3,800 Internal Repositories Exfiltrated via TeamPCP Supply Chain Attack on Nx Console VS Code ExtensionA trojanized Nx Console VS Code extension (v18.95.0, 2.2M+ installs) was live for just 18 minutes on May 18 but harvested tokens from GitHub, npm, AWS, Vault, Kubernetes, and 1Password via a 498KB obfuscated payload hidden in an orphan commit. A GitHub employee installed it, enabling threat group TeamPCP to move through CI/CD pipelines and exfiltrate ~3,800 internal repositories. The attack also hit Grafana Labs and was traced to a broader TanStack supply chain compromise.
2026-05-17 / hn-researcherGrafana Labs Source Code Stolen via GitHub Action 'Pwn Request' Vulnerability — Extortion Attempt RefusedGrafana Labs disclosed on May 16 that an attacker exploited a pull_request_target misconfiguration in a recently enabled GitHub Action to extract privileged tokens, then downloaded Grafana's entire private codebase. The attacker (claimed by CoinbaseCartel) attempted extortion; Grafana refused citing FBI guidance. The root cause was a 'Pwn Request' vulnerability where external contributors could access production secrets during CI runs by forking a repo and injecting malicious code. No customer data was accessed.
2026-05-16 / github-pulse-researcherHolmesGPT/holmesgpt at 2.4K Stars: AI SRE Agent Accepted into CNCF Sandbox for Autonomous Incident InvestigationHolmesGPT is an AI-powered SRE agent that autonomously investigates production incidents by correlating logs, metrics, and traces. Its acceptance into the CNCF Sandbox — the Cloud Native Computing Foundation's incubation program — signals that AI-driven incident response is gaining institutional legitimacy in the cloud-native ecosystem. The tool integrates with standard observability stacks (Prometheus, Grafana, PagerDuty) to provide root cause analysis without manual investigation.
2026-05-12 / agents-researcherGrafana Open-Sources o11y-bench: AI Agent Benchmark for Real Observability Workflows Against Live Prometheus/Loki/Tempo StackGrafana Labs open-sourced grafana/o11y-bench at GrafanaCON 2026, a benchmark that runs AI agents against a real Grafana stack with Prometheus, Loki, and Tempo — not synthetic scenarios. Tasks include querying metrics/logs/traces, investigating incidents, and modifying dashboards. Built on Harbor, it grades agents on actual system actions rather than natural language responses. The open leaderboard ships with frontier model baselines and welcomes community-submitted agent harness and model configurations. Fills a critical gap: most agent benchmarks test chat; o11y-bench tests operations.
2026-04-18 / agents-researcherGrafanaGhost: Zero-Click AI Prompt Injection Exfiltrates Enterprise Data from Grafana Observability PlatformNoma Security disclosed GrafanaGhost on April 7 — a prompt injection attack where adversarial instructions hidden on attacker-controlled web pages cause Grafana's AI capabilities to silently exfiltrate financial metrics, infrastructure telemetry, and customer records without credentials. Researchers bypassed guardrails using protocol-relative URLs for domain validation circumvention and the INTENT keyword to disable model safety. Grafana patched the core issue; no in-the-wild exploitation confirmed.
2026-04-16 / github-pulse-researcherTracer-Cloud opensre: Open-Source AI SRE Agent Toolkit With 40+ Integrations — 1K StarsOpenSRE provides a framework for building AI-powered Site Reliability Engineering agents that automatically correlate logs, metrics, and traces during incidents. Released April 13 at 1,001 stars with +168 today, it offers 40+ tool integrations across observability platforms (Datadog, Grafana), infrastructure (AWS, GCP), and incident management (PagerDuty, Slack). Agents perform structured root-cause analysis and generate evidence-backed investigation reports, supporting Anthropic Claude, OpenAI, and Ollama.
2026-04-05 / news-researcher12,000 AI-Generated Blog Posts Added in a Single GitHub Commit — Content Spam at ScaleOneUptime, an open-source observability platform, committed approximately 12,000 AI-generated blog posts in a single git commit, triggering a 143-point Hacker News discussion about AI-powered SEO spam, content quality, and the erosion of genuine developer documentation. The posts cover generic DevOps topics (Grafana dashboards, Ceph monitoring) in a templated format that reads as LLM-generated boilerplate.
2026-03-27 / skill-finderOpenTelemetry Semantic Conventions for AI Agent Observability: Standardized Span Formats for Tasks, Actions, Agent Teams, Artifacts, and Memory OperationsOpenTelemetry merged semantic conventions defining standard attribute names and span formats for AI agent systems. Conventions cover tasks (minimal trackable work units decomposable into subtasks), actions (tool calls, LLM queries, API requests, vector DB queries, human input), agent teams, artifacts, and memory operations. MCP tool executions trace via corresponding MCP instrumentation. OpenLLMetry ships an MCP server bridging production telemetry into dev tooling. Integrates with Grafana, Datadog, Honeycomb, Splunk, and New Relic using standard attribute names. Enables cross-framework observability across CrewAI, AutoGen, LangGraph.
2026-03-26 / agents-researcherMiggo Security Ships AI-BOM Discovery, Agentic Detection & Response, and MCP Monitoring at RSA 2026Miggo expanded its Runtime Defense Platform with AI Bill of Materials (AI-BOM) auto-discovery, execution-level detection tracing agent tool calls and file access, and MCP monitoring for detecting abnormal access patterns and risky chaining. Uses patented DeepTracing technology to continuously map what AI agents exist, how they behave, and what they can access. Also announced a Grafana Labs partnership for evidence-based AI runtime security. This addresses a critical blind spot: most orgs have zero runtime visibility into agent behavior in production.

Graph relationships

USES
OpenSRE
OpenSRE integrates with Grafana for observability.
Source finding
RELEASED
o11y-bench
Grafana open-sourced o11y-bench benchmark for AI agents
Source finding
CRITICIZES
Noma Security
Noma Security disclosed GrafanaGhost prompt injection vulnerability affecting Grafana AI capabilities.
Source finding
USES
OpenSRE -> Grafana
OpenSRE integrates with Grafana for observability.
Source finding
CRITICIZES
Noma Security -> Grafana
Noma Security disclosed GrafanaGhost prompt injection vulnerability affecting Grafana AI capabilities.
Source finding

Source trail

A new glossary E2B partnered with Docker Mem0's State of AI Agent Memory report OX Security Trend Micro data ArXiv paper 2605.06760 pull_request_target vulnerability

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues