Alternatives and similar repositories for cluster-image-scanner

Users that are interested in cluster-image-scanner are comparing it to the libraries listed below

• raesene / container-security-site
  ☆103Updated 2 weeks ago
• praetorian-inc / snowcat
  a tool to audit the istio service mesh
  ☆173Updated 4 years ago
• domain-protect / domain-protect-gcp
  Protect against subdomain takeover
  ☆94Updated 4 months ago
• wiz-sec-public / namespacehound
  NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.
  ☆111Updated 11 months ago
• gojek / CureIAM
  Clean accounts over permissions in GCP infra at scale
  ☆71Updated 2 years ago
• OWASP / KubeLight
  OWASP Kubernetes security and compliance tool [WIP]
  ☆107Updated 2 years ago
• smithy-security / smithy
  The security workflow engine!
  ☆134Updated last week
• OWASP / www-project-kubernetes-security-testing-guide
  OWASP Kubernetes Security Testing Guide
  ☆41Updated last week
• ReversecLabs / IceKube
  ☆182Updated 7 months ago
• cyberark / kubernetes-rbac-audit
  Tool for auditing RBACs in Kubernetes
  ☆225Updated last year
• 4ARMED / kubeletmein
  Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.
  ☆161Updated this week
• iriusrisk / OpenThreatModel
  The Open Threat Modeling Format (OTM) defines a platform independent way to define the threat model of any system.
  ☆177Updated last year
• banzaicloud / dast-operator
  Dynamic Application and API Security Testing
  ☆193Updated 2 years ago
• ksoclabs / kube-goat
  A deliberately vulnerable Kubernetes cluster
  ☆130Updated last year
• MaibornWolff / dd-import
  A utility to (re-)import findings and language data into DefectDojo
  ☆43Updated last year
• madhuakula / hacker-container
  The Swiss Army Container for Cloud Native Security. Container with all the list of useful tools/commands while hacking and securing Conta…
  ☆285Updated 2 years ago
• cr0hn / dockerfile-security
  Static security checker for Dockerfiles
  ☆95Updated last year
• gunjan5 / container-security
  Container 📦 Security 🔐 Best Practices Checklist 📋 & Slides
  ☆69Updated 5 years ago
• alexivkin / kubepwn
  Kubernetes Pwnage for all
  ☆56Updated 5 years ago
• marco-lancini / k8s-lab-plz
  Modular Kubernetes lab which provides an easy and streamlined way to deploy a test cluster with support for different components.
  ☆53Updated 2 months ago
• Rezonate-io / github-oidc-checker
  Tools that checks for misconfigured access to Github OIDC from AWS roles and GCP service accounts
  ☆61Updated 2 years ago
• TinderSec / gh-workflow-auditor
  Script to audit GitHub Action Workflow files for potential vulnerabilities.
  ☆156Updated last year
• bullfrogsec / bullfrog
  Simple plug-and-play Github Action to block unauthorized outbound traffic (egress) in your Github workflows
  ☆114Updated this week
• redhuntlabs / KubeStalk
  KubeStalk discovers Kubernetes and related infrastructure based attack surface from a black-box perspective.
  ☆176Updated 10 months ago
• nccgroup / ccs
  ☆114Updated 2 years ago
• rusakovichma / TicTaaC
  Easy-to-use Threat modeling-as-a-Code (TaaC) solution following DevSecOps principles. Simple CI/CD integration as well as console usage. …
  ☆67Updated 5 months ago
• wiz-sec-public / peach-framework
  PEACH - a step-by-step framework for modeling and improving SaaS and PaaS tenant isolation, by managing the attack surface exposed by use…
  ☆73Updated 2 years ago
• antitree / go-pillage-registries
  Pentester-focused Docker registry tool to enumerate and pull images
  ☆37Updated last month
• madhuakula / docker-security-checker
  Dockerfile Security Checker using OPA Rego policies with Conftest
  ☆62Updated 3 years ago
• OWASP / www-project-top-10-ci-cd-security-risks
  OWASP Foundation Web Respository
  ☆100Updated this week