feat(processtree): populate the process start time (SUB-7845) - #873

Merged

matthyx merged 14 commits into

kubescape:mainfrom

AlonLiwsky:feat/processtree-start-time

Aug 3, 2026

Commits on Aug 2, 2026

feat(processtree): read process start time from procfs stat field 22 (SUB-7845)

AlonLiwsky
and
claude
committed
feat(processtree): carry procfs start time through the event pipeline (SUB-7845)

AlonLiwsky
and
claude
committed
feat(processtree): record boot-relative start time in creator side map (SUB-7845)

AlonLiwsky
and
claude
committed
feat(processtree): on-demand start-time read at fork/exec node creation (SUB-7845)

AlonLiwsky
and
claude
committed
feat(processtree): expose boot-relative start time on the manager (SUB-7845)

AlonLiwsky
and
claude
committed
feat(processtree): carry StartTime through branch/copy/enrich (SUB-7845)

AlonLiwsky
and
claude
committed
test(processtree): end-to-end guard that alert branches carry StartTime (SUB-7845)

AlonLiwsky
and
claude
committed
test(processtree): cover the real procfs start-time reader; harden tick pinning (SUB-7845)

AlonLiwsky
and
claude
committed
fix(processtree): a recycled pid must not inherit the dead process's start time (SUB-7845)

AlonLiwsky
and
claude
committed
docs(processtree): document the process start time feature (SUB-7845)

AlonLiwsky
and
claude
committed
fix(processtree): restamp the display start time when a fork reuses a pid (SUB-7845)

AlonLiwsky
and
claude
committed
perf(processtree): take the fork path's /proc read outside the tree lock (SUB-7845)

AlonLiwsky
and
claude
committed

Commits on Aug 3, 2026