aquasecurity / linux-bench
Checks whether a Linux server according to security best practices as defined in the CIS Distribution-Independent Linux Benchmark
☆152Updated 9 months ago
Related projects ⓘ
Alternatives and complementary repositories for linux-bench
- Checks whether Docker is deployed according to security best practices as defined in the CIS Docker Benchmark☆212Updated 7 months ago
- Static Analysis Library for Containers☆199Updated last year
- Kubernetes Common Configuration Scoring System☆124Updated 2 years ago
- Cloud Native Security Hub - Security Resources☆54Updated 4 years ago
- Links and resources for the O'Reilly Kubernetes Security book☆98Updated 3 years ago
- Trivy's misconfiguration scanning engine☆215Updated 7 months ago
- Security testing tool for Kubernetes, abusing kubelet credentials on public cloud providers.☆160Updated last year
- This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations…☆176Updated last year
- Prometheus Metrics Exporter for Falco output events☆121Updated last month
- Falco plugins registry☆86Updated last week
- A security monitoring solution for Kubernetes☆131Updated last year
- Generate a variety of suspect actions that are detected by Falco rulesets☆94Updated last week
- Notice: Postee is no longer under active development or maintenance.☆211Updated last month
- Container Security Workshop covering using Falco on Kubernetes.☆105Updated 3 years ago
- Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego☆338Updated 11 months ago
- Attacking and Defending Kubernetes Clusters: A Guided Tour☆206Updated 3 years ago
- ☆233Updated 2 months ago
- Kubernetes focused container assessment and context discovery tool for penetration testing☆438Updated 5 months ago
- Security configuration checks for popular cloud native applications and infrastructure.☆118Updated 2 years ago
- ☆91Updated 6 months ago
- Dynamic Application and API Security Testing☆190Updated last year
- Use Trivy as a plug-in vulnerability scanner in the Harbor registry☆218Updated 2 months ago
- CIS Kubernetes Benchmark - InSpec Profile☆296Updated 3 months ago
- Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore☆64Updated 2 weeks ago
- Use Snyk to find and fix vulnerabilities in your Kubernetes workloads☆86Updated last week
- Runtime security plug to protect user containers☆65Updated 2 weeks ago
- A simple WebUI with latest events from Falco☆112Updated this week
- Securing Alice's, Bob's and Carl's software supply chain using in-toto☆89Updated 3 weeks ago
- Kubernetes Pod Security Standards implementation - https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/2579-psp-replacem…☆98Updated 2 weeks ago