SDA-SE / cluster-image-scannerLinks
Discover vulnerabilities and container image misconfiguration in production environments.
☆55Updated last month
Alternatives and similar repositories for cluster-image-scanner
Users that are interested in cluster-image-scanner are comparing it to the libraries listed below
Sorting:
- Protect against subdomain takeover☆95Updated 6 months ago
- a tool to audit the istio service mesh☆174Updated 4 years ago
- Tool for auditing RBACs in Kubernetes☆226Updated 2 years ago
- OWASP Kubernetes Security Testing Guide☆41Updated last month
- Clean accounts over permissions in GCP infra at scale☆71Updated 2 years ago
- A deliberately vulnerable Kubernetes cluster☆131Updated 2 years ago
- Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.☆163Updated 2 months ago
- Dynamic Application and API Security Testing☆194Updated 2 years ago
- ☆106Updated 2 months ago
- Container 📦 Security 🔐 Best Practices Checklist 📋 & Slides☆69Updated 5 years ago
- OWASP Kubernetes security and compliance tool [WIP]☆108Updated 2 years ago
- Security scanning & static analysis tool☆93Updated last year
- ☆185Updated last week
- Kubernetes Pwnage for all☆57Updated 5 years ago
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆111Updated last year
- KaiMonkey provides vulnerable infrastructure as code (IaC) to help explore and understand common cloud security threats exposed via IaC.☆105Updated 2 years ago
- Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts☆61Updated 2 years ago
- Dockerfile Security Checker using OPA Rego policies with Conftest☆62Updated 3 years ago
- ## Auto-archived due to inactivity. ## Tooling to simulate runtime attacks and test default runtime detections from Datadog Cloud Securit…☆37Updated last year
- KubeStalk discovers Kubernetes and related infrastructure based attack surface from a black-box perspective.☆177Updated last year
- The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.☆179Updated 2 months ago
- The Swiss Army Container for Cloud Native Security. Container with all the list of useful tools/commands while hacking and securing Conta…☆286Updated 2 years ago
- A utility to (re-)import findings and language data into DefectDojo☆43Updated last year
- Static security checker for Dockerfiles☆104Updated 2 weeks ago
- Modular Kubernetes lab which provides an easy and streamlined way to deploy a test cluster with support for different components.☆53Updated 4 months ago
- Kubernetes focused container assessment and context discovery tool for penetration testing☆475Updated 3 months ago
- PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…☆74Updated 3 years ago
- sgCheckup generates nmap output based on scanning your AWS Security Groups for unexpected open ports.☆81Updated 4 years ago
- Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows☆114Updated this week
- ☆269Updated 3 weeks ago