aquasecurity / kube-bench
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
☆7,367Updated this week
Alternatives and similar repositories for kube-bench:
Users that are interested in kube-bench are comparing it to the libraries listed below
- Hunt for security weaknesses in Kubernetes clusters☆4,845Updated last year
- 👀 A Kubernetes cluster resource sanitizer☆5,537Updated last week
- Validation of best practices in your Kubernetes clusters☆3,235Updated this week
- 🐊 Gatekeeper - Policy Controller for Kubernetes☆3,847Updated this week
- Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in …☆2,878Updated last week
- 📦 Find and install kubectl plugins☆6,581Updated last month
- Backup and migrate Kubernetes applications and their persistent volumes☆9,126Updated this week
- Cloud Native Runtime Security☆7,796Updated last week
- Write tests against structured configuration data using the Open Policy Agent Rego query language☆2,945Updated last week
- KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adh…☆3,137Updated last week
- Superseded by https://github.com/aquasecurity/trivy-operator☆1,366Updated last month
- Vulnerability Static Analysis for Containers☆10,579Updated last week
- Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark☆3,302Updated 8 months ago
- Configure external DNS servers (AWS Route53, Google CloudDNS and others) for Kubernetes Ingresses and Services☆8,073Updated last week
- A Kubernetes controller and tool for one-way encrypted Secrets☆8,101Updated last week
- Sonobuoy is a diagnostic tool that makes it easier to understand the state of a Kubernetes cluster by running a set of Kubernetes conform…☆2,952Updated last month
- kubectl plugin to browse Kubernetes object hierarchies as a tree 🎄 (star the repo if you are using)☆3,113Updated 4 months ago
- Tfsec is now part of Trivy☆6,805Updated 2 months ago
- Cost monitoring for Kubernetes workloads and cloud costs☆5,685Updated this week
- A service that analyzes docker images and scans for vulnerabilities☆1,587Updated 2 years ago
- Tools for observing Kubernetes resources in real time, powered by Pulumi.☆2,921Updated 11 months ago
- Get your resource requests "Just Right"☆2,757Updated last month
- Validate your Kubernetes configuration files, supports multiple Kubernetes versions☆3,193Updated last year
- Kubernetes Security - Best Practice Guide☆2,706Updated 5 years ago
- A helm plugin that shows a diff explaining what a helm upgrade would change☆2,937Updated this week
- Cloud Native Policy Management☆6,226Updated this week
- Hubble - Network, Service & Security Observability for Kubernetes using eBPF☆3,731Updated last week
- Example recipes for Kubernetes Network Policies that you can just copy paste☆5,901Updated 2 months ago
- Descheduler for Kubernetes☆4,782Updated this week
- Kubernetes Reboot Daemon☆2,275Updated last week