aquasecurity / bench-commonLinks
Common code for hardening benchmarks
☆10Updated 3 months ago
Alternatives and similar repositories for bench-common
Users that are interested in bench-common are comparing it to the libraries listed below
Sorting:
- Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-u…☆67Updated this week
- Administrative tooling for Falco☆111Updated 3 weeks ago
- Manage AppAmormor profiles for Kubernetes cluster☆42Updated 2 years ago
- AI-generated remediations for Falco audit events☆72Updated 2 years ago
- Kubernetes Pod Security Standards implementation - https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/2579-psp-replacem…☆101Updated this week
- Generate an application profile containing metrics/properties for Kubernetes workloads based on runtime behavior.☆14Updated last year
- Cloud Native Security Hub - Security Resources☆54Updated 5 years ago
- Falco plugins registry☆104Updated last week
- Generate a variety of suspect actions that are detected by Falco rulesets☆110Updated 5 months ago
- Kit for building Falco drivers: kernel modules or eBPF probes☆67Updated last week
- Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supp…☆148Updated 2 weeks ago
- Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore☆65Updated last month
- Prometheus Metrics Exporter for Falco output events☆121Updated 6 months ago
- Trivy kubernetes library☆36Updated 3 weeks ago
- A command line tool to automatically generate seccomp profiles.☆27Updated 4 years ago
- Integrates Spiffe and Vault to have secretless authentication☆92Updated 2 weeks ago
- The Falco Project Community☆55Updated 2 weeks ago
- Scans SBOMs for vulnerabilities with Grype☆85Updated last week
- Security risk analysis for Kubernetes resources☆75Updated 9 months ago
- Diagrams to visually learn Falco and its eBPF probe☆15Updated 4 years ago
- Go client and SDK for Falco☆55Updated last month
- A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.☆66Updated this week
- Static Analysis Library for Containers☆198Updated 2 years ago
- ☆109Updated 6 months ago
- Kubevuln is an in-cluster component of the Kubescape security platform. It scans container images for vulnerabilities, using Grype as its…☆24Updated 2 weeks ago
- agent for handling seccomp descriptors for container runtimes☆47Updated last year
- 🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their sig…☆79Updated last year
- sigstore the hard way!☆116Updated 2 months ago
- This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)☆63Updated 4 years ago
- ☆20Updated 5 months ago