falcosecurity-retire / profiles
Falco container runtime security extras (default rulesets and more)
☆49Updated 5 years ago
Related projects ⓘ
Alternatives and complementary repositories for profiles
- Kubernetes operator for Falco that allows developers to manage rules for detecting intruders and backdoors☆68Updated 4 years ago
- ☆37Updated 4 years ago
- Cloud Native Security Hub - Security Resources☆54Updated 4 years ago
- A static analysis tool for Terraform plans.☆45Updated 2 years ago
- ClusterIP Validating Webhook☆34Updated last year
- Container Security Workshop covering using Falco on Kubernetes.☆105Updated 3 years ago
- Security risk analysis for Kubernetes resources☆74Updated 11 months ago
- ☆33Updated 5 years ago
- Links and resources for the O'Reilly Kubernetes Security book☆98Updated 3 years ago
- A command line tool to provide login credentials from Hashicorp Vault☆34Updated 7 years ago
- ☆32Updated 4 years ago
- Making CoreOS' Clair easily work in CI/CD pipelines☆29Updated last year
- A known vulnerable Flask app with an excessive amount of automated testing☆13Updated 2 weeks ago
- cloud native software supply chain ☁️🔗☆64Updated 3 years ago
- A security monitoring solution for Kubernetes☆131Updated last year
- Web Application Firewall (WAF) on Kubernetes☆68Updated 3 years ago
- Alcide Kubernetes Advisor ... Cluster Hygiene & Security Scanner - Pipeline Integration☆39Updated 3 years ago
- Validating webhook for checking images against Anchore Engine Policy☆21Updated 5 years ago
- Kubernetes Common Configuration Scoring System☆124Updated 2 years ago
- ☆27Updated 2 years ago
- A kubectl plugin which triggers a Sysdig capture☆99Updated last year
- Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect☆22Updated this week
- A simple way to evaluate the security of your Kubernetes deployment against sets of best practices defined by various community sources☆29Updated 4 years ago
- Enhance the security of the EC2 metadata service. (Obsolete thanks to Instance Metadata Service Version 2, see note in README)☆31Updated 4 years ago
- ☆55Updated 6 years ago
- A set of shared policies for use with Conftest and other Open Policy Agent tools☆67Updated 3 years ago