cncf / tag-security
🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!
☆2,088Updated last week
Related projects ⓘ
Alternatives and complementary repositories for tag-security
- Hunt for security weaknesses in Kubernetes clusters☆4,764Updated 8 months ago
- Security risk analysis for Kubernetes resources☆1,240Updated this week
- OpenClarity is an open source tool built to enhance security and observability of cloud native applications and infrastructure☆1,350Updated this week
- A tool to scan Kubernetes cluster for risky permissions☆1,323Updated last week
- Kubernetes Security Training Platform - focusing on security mitigation☆932Updated 2 months ago
- Moved to https://github.com/aquasecurity/trivy-operator☆1,354Updated 2 weeks ago
- A service that analyzes docker images and scans for vulnerabilities☆1,587Updated last year
- in-toto is a framework to protect supply chain integrity.☆882Updated this week
- Supply-chain Levels for Software Artifacts☆1,555Updated this week
- A curated list of awesome Kubernetes security resources☆905Updated 11 months ago
- Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. …☆1,997Updated 4 months ago
- A curated list for Awesome Kubernetes Security resources☆1,915Updated last year
- Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark☆7,076Updated this week
- Linux Runtime Security and Forensics using eBPF☆3,626Updated last week
- OWASP Foundation Web Respository☆566Updated 9 months ago
- GUAC aggregates software security metadata into a high fidelity graph database.☆1,290Updated this week
- Peirates - Kubernetes Penetration Testing tool☆1,243Updated last month
- A Blazing fast Security Auditing tool for Kubernetes☆991Updated 7 months ago
- Find security vulnerabilities, compliance issues, and infrastructure misconfigurations early in the development cycle of your infrastruct…☆2,095Updated this week
- Cloud Native Runtime Security☆7,404Updated this week
- The OWASP DevSecOps Guideline can help us to embedding security as a part of the development pipeline.☆848Updated 4 months ago
- Code signing and transparency for containers and binaries☆4,516Updated this week
- Write tests against structured configuration data using the Open Policy Agent Rego query language☆2,877Updated last week
- eBPF-based Security Observability and Runtime Enforcement☆3,655Updated this week
- 💰💸☁️ For those interested in running Kubernetes in highly regulated environments, particularly financial services☆302Updated 2 years ago
- Kubesploit is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in Golang, focused on containerized en…☆1,123Updated 4 months ago
- Deploy-time Policy Enforcer for Kubernetes applications☆699Updated 7 months ago
- An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…☆728Updated 4 months ago
- Checklist for container security - devsecops practices☆1,525Updated last year