aquasecurity / kube-bench
Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark
☆7,407Updated last week
Alternatives and similar repositories for kube-bench:
Users that are interested in kube-bench are comparing it to the libraries listed below
- Hunt for security weaknesses in Kubernetes clusters☆4,853Updated last year
- Cloud Native Runtime Security☆7,879Updated this week
- 👀 A Kubernetes cluster resource sanitizer☆5,589Updated last week
- Validation of best practices in your Kubernetes clusters☆3,240Updated last week
- Vulnerability Static Analysis for Containers☆10,605Updated last week
- 🐊 Gatekeeper - Policy Controller for Kubernetes☆3,869Updated this week
- Kubernetes object analysis with recommendations for improved reliability and security. kube-score actively prevents downtime and bugs in …☆2,893Updated last week
- KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adh…☆3,170Updated last week
- A Kubernetes controller and tool for one-way encrypted Secrets☆8,178Updated last week
- Cost monitoring for Kubernetes workloads and cloud costs☆5,737Updated this week
- 📦 Find and install kubectl plugins☆6,609Updated 2 weeks ago
- Validate your Kubernetes configuration files, supports multiple Kubernetes versions☆3,194Updated last year
- Write tests against structured configuration data using the Open Policy Agent Rego query language☆2,966Updated this week
- Kubernetes Security - Best Practice Guide☆2,708Updated 5 years ago
- Backup and migrate Kubernetes applications and their persistent volumes☆9,167Updated this week
- Superseded by https://github.com/aquasecurity/trivy-operator☆1,366Updated 2 weeks ago
- Hubble - Network, Service & Security Observability for Kubernetes using eBPF☆3,764Updated last week
- Customization of kubernetes YAML configurations☆11,418Updated last week
- An implementation of Netflix's Chaos Monkey for Kubernetes clusters☆3,003Updated 10 months ago
- Sonobuoy is a diagnostic tool that makes it easier to understand the state of a Kubernetes cluster by running a set of Kubernetes conform…☆2,957Updated 2 weeks ago
- Go library and CLIs for working with container registries☆3,345Updated this week
- A service that analyzes docker images and scans for vulnerabilities☆1,586Updated 2 years ago
- Tfsec is now part of Trivy☆6,814Updated this week
- Kubectl plugin to ease sniffing on kubernetes pods using tcpdump and wireshark☆3,318Updated 9 months ago
- Progressive delivery Kubernetes operator (Canary, A/B Testing and Blue/Green deployments)☆5,062Updated last week
- Descheduler for Kubernetes☆4,816Updated this week
- Work with remote images registries - retrieving information, images, signing content☆9,081Updated last week
- External Secrets Operator reads information from a third-party service like AWS Secrets Manager and automatically injects the values as K…☆4,966Updated this week
- Highly extensible platform for developers to better understand the complexity of Kubernetes clusters.☆6,268Updated 2 years ago
- Add-on agent to generate and expose cluster-level metrics.☆5,690Updated this week