cncf / tag-security
🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!
☆2,151Updated this week
Alternatives and similar repositories for tag-security:
Users that are interested in tag-security are comparing it to the libraries listed below
- A tool to scan Kubernetes cluster for risky permissions☆1,364Updated 3 months ago
- Supply-chain Levels for Software Artifacts☆1,626Updated this week
- OpenClarity is an open source tool built to enhance security and observability of cloud native applications and infrastructure☆1,388Updated this week
- Superseded by https://github.com/aquasecurity/trivy-operator☆1,364Updated 2 weeks ago
- Hunt for security weaknesses in Kubernetes clusters☆4,827Updated last year
- Security risk analysis for Kubernetes resources☆1,295Updated this week
- A curated list for Awesome Kubernetes Security resources☆1,942Updated last year
- Kubernetes Security Training Platform - focusing on security mitigation☆943Updated 6 months ago
- A service that analyzes docker images and scans for vulnerabilities☆1,588Updated 2 years ago
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,338Updated this week
- Code signing and transparency for containers and binaries☆4,791Updated this week
- Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark☆7,311Updated this week
- in-toto is a framework to protect supply chain integrity.☆905Updated this week
- CLI tool and library for generating a Software Bill of Materials from container images and filesystems☆6,725Updated this week
- Linux Runtime Security and Forensics using eBPF☆3,807Updated this week
- OpenSSF Scorecard - Security health metrics for Open Source☆4,823Updated this week
- Peirates - Kubernetes Penetration Testing tool☆1,290Updated last week
- Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on p…☆4,668Updated last month
- Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. …☆2,036Updated 9 months ago
- A Blazing fast Security Auditing tool for Kubernetes☆996Updated 11 months ago
- Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastruct…☆2,252Updated this week
- The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.☆907Updated last month
- OWASP Foundation Web Respository☆581Updated last year
- An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…☆741Updated 3 months ago
- Checklist for container security - devsecops practices☆1,551Updated last year
- KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adh…☆3,113Updated this week
- Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized en…☆1,157Updated last month
- 💰💸☁️ For those interested in running Kubernetes in highly regulated environments, particularly financial services☆304Updated 2 years ago
- A curated list of awesome Kubernetes security resources☆915Updated last year
- Deploy-time Policy Enforcer for Kubernetes applications☆703Updated last month