kubescape / regolibrary
The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.
☆119Updated 2 weeks ago
Related projects: ⓘ
- Create Kubernetes AdmissionReview requests from Kubernetes resource manifests☆106Updated last month
- Process documentation, non-code deliverables, and miscellaneous artifacts of Kubernetes SIG Security☆166Updated this week
- Catalogue all images of a Kubernetes cluster to multiple targets with Syft☆189Updated this week
- Runtime detection and response for malicious events in Kubernetes workloads☆38Updated 6 months ago
- Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supp…☆123Updated this week
- BadRobot - Operator Security Audit Tool☆214Updated this week
- Generate a variety of suspect actions that are detected by Falco rulesets☆87Updated 3 weeks ago
- Artifact Ratification Framework☆203Updated this week
- Falco Talon is a Response Engine for managing threats in your Kubernetes☆101Updated this week
- A simple WebUI with latest events from Falco☆110Updated 3 weeks ago
- Style guide for Rego☆196Updated 3 weeks ago
- KBOM - Kubernetes Bill of Materials☆301Updated 3 months ago
- This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations…☆176Updated 10 months ago
- Runtime security plug to protect user containers☆64Updated this week
- kubectl plugin for signing Kubernetes manifest YAML files with sigstore☆78Updated 2 weeks ago
- Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"☆64Updated 9 months ago
- Notice: Postee is no longer under active development or maintenance.☆209Updated this week
- A standalone exporter for vulnerability reports and other CRs created by Trivy Operator (formerly Starboard).☆58Updated this week
- Scan Kubernetes resource files , and helm charts for security configurations issues and best practices.☆207Updated last year
- Creates PolicyReports based on the different Trivy Operator CRDs like VulnerabilityReports☆55Updated this week
- Falco plugins registry☆82Updated this week
- Open source IaC security scanner for public Helm charts☆87Updated 2 years ago
- Sneefer is a PoC project showing how to filter out irrelevent vulnerabilities from container image vulnerability scan results. It is base…☆25Updated 11 months ago
- Trivy's misconfiguration scanning engine☆213Updated 5 months ago
- Kubernetes Pod Security Standards implementation - https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/2579-psp-replacem…☆97Updated this week
- Use Snyk to find and fix vulnerabilities in your Kubernetes workloads☆84Updated last week
- a tool to audit the istio service mesh☆173Updated 2 years ago
- Rego policies collection☆155Updated this week
- A place for policy work group related proposals and prototypes.☆64Updated 2 months ago
- Octant plugin for viewing Starboard security information☆57Updated 2 years ago