kubescape / sneefferLinks
Sneefer is a PoC project showing how to filter out irrelevent vulnerabilities from container image vulnerability scan results. It is based on application monitoring using eBPF and Falco base libraries and writes results in Kubernetes CRDs
☆26Updated 2 years ago
Alternatives and similar repositories for sneeffer
Users that are interested in sneeffer are comparing it to the libraries listed below
Sorting:
- Scans SBOMs for vulnerabilities with Grype☆85Updated last week
- This is a POC repository showing how a Kubernetes Admission Controller can be made irrelevant when verifying container image signatures☆12Updated 2 years ago
- The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.☆128Updated last week
- Simple tool that allows you to detect imposter commits in GitHub Actions workflows.☆25Updated 10 months ago
- Runtime security plug to protect user containers☆66Updated last week
- BadRobot - Operator Security Audit Tool☆223Updated 3 weeks ago
- Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"☆67Updated last year
- sigstore the hard way!☆116Updated 3 months ago
- Administrative tooling for Falco☆111Updated 3 weeks ago
- A replacement for "kubectl exec" that works over WebSocket connections.☆42Updated last year
- ☆20Updated 5 months ago
- A place for policy work group related proposals and prototypes.☆66Updated 5 months ago
- Kubernetes audit logging, when you don't control the control plane☆88Updated this week
- workshop about cloud-native security☆71Updated 3 years ago
- Community curated list of System and Network policy templates for the KubeArmor and Cilium☆49Updated 3 weeks ago
- Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…☆103Updated last year
- a tool to audit the istio service mesh☆173Updated 4 years ago
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆111Updated 10 months ago
- This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)☆63Updated 4 years ago
- Kubernetes Pod Security Standards implementation - https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/2579-psp-replacem…☆101Updated last week
- KBOM - Kubernetes Bill of Materials☆321Updated 3 months ago
- ☆74Updated 5 months ago
- Response Engine for managing threats in your Kubernetes☆180Updated this week
- A kubectl plugin to visualize network policies rules.☆97Updated last year
- A tool to create, transform and attest VEX metadata☆163Updated last week
- Trust Dexter to ensure that all your images are pinned by digest for better security☆31Updated 2 years ago
- Evolution process of The Falco Project☆57Updated this week
- Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supp…☆148Updated 2 weeks ago
- A CLI used to work with the Wolfi OSS project☆66Updated last week
- This repo. is archived. The utility is now at: https://github.com/CycloneDX/sbom-utility☆60Updated 2 years ago