octarinesec / kccss
Kubernetes Common Configuration Scoring System
☆124Updated 2 years ago
Alternatives and similar repositories for kccss:
Users that are interested in kccss are comparing it to the libraries listed below
- Cloud Native Security Hub - Security Resources☆54Updated 5 years ago
- Container Security Workshop covering using Falco on Kubernetes.☆105Updated 3 years ago
- Links and resources for the O'Reilly Kubernetes Security book☆98Updated 4 years ago
- Owasp Zap chart for Kubernetes☆50Updated 3 years ago
- This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations…☆176Updated last year
- Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore☆64Updated last week
- Security configuration checks for popular cloud native applications and infrastructure.☆118Updated 3 years ago
- Octant plugin for viewing Starboard security information☆57Updated 3 years ago
- a tool to audit the istio service mesh☆173Updated 3 years ago
- Network security testing for Kubernetes DevSecOps workflows☆374Updated 7 months ago
- Security risk analysis for Kubernetes resources☆74Updated 2 months ago
- Kubernetes operator for Falco that allows developers to manage rules for detecting intruders and backdoors☆68Updated 4 years ago
- Dynamic Application and API Security Testing☆192Updated 2 years ago
- MagTape Policy-as-Code for Kubernetes☆147Updated 11 months ago
- Runtime security plug to protect user containers☆65Updated last month
- Demos for several kubernetes security features☆63Updated 3 months ago
- Automated GKE Kubelet Impersonation and Cluster Secret Stealer via kube-env☆102Updated 5 years ago
- ☆39Updated 3 years ago
- Use Snyk to find and fix vulnerabilities in your Kubernetes workloads☆90Updated 2 weeks ago
- CLI for searching Rego policies☆105Updated 3 years ago
- The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.☆125Updated this week
- Check images in your charts for vulnerabilities☆41Updated last year
- Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-u…☆65Updated this week
- A kubectl plugin which triggers a Sysdig capture☆100Updated last year
- 🎟 Voucher creates attestations for Binary Authorization☆73Updated last month
- Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect☆23Updated this week
- Kubernetes Admission Controller for Image Scanning using OPA☆50Updated last year
- Dockerfile Security Checker using OPA Rego policies with Conftest☆59Updated 2 years ago
- A Prometheus exporter for Calico policy packet counts☆92Updated 2 years ago
- ☆37Updated 4 years ago