This repository offers a comprehensive library of security policies designed to enhance the security of Kubernetes cluster configurations. The policies are developed in accordance with the CIS Kubernetes benchmark.
☆177Jun 20, 2026Updated 2 months ago
Alternatives and similar repositories for k8s-security-policies
Users that are interested in k8s-security-policies are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- 📚 The OPA Gatekeeper policy library☆703Updated this week
- A policy management tool for interacting with Gatekeeper☆395Nov 20, 2025Updated 9 months ago
- Rego policies collection☆171Updated this week
- A set of shared policies for use with Conftest and other Open Policy Agent tools☆66Jan 20, 2021Updated 5 years ago
- CLI for searching Rego policies☆106Feb 5, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A simple to use web-based OPA Gatekeeper policy manager☆328Updated this week
- conftest plugin that transforms k8s input object to be compatible with gatekeeper policies☆14Jan 26, 2024Updated 2 years ago
- Rego policies to monitor Kubernetes APIs deprecations.☆143Jul 28, 2021Updated 5 years ago
- Kubernetes security tool for policy enforcement☆440Jan 12, 2023Updated 3 years ago
- Security configuration checks for popular cloud native applications and infrastructure.☆119Feb 16, 2022Updated 4 years ago
- Kubernetes cluster managed by Flux and using git as a "single source of truth."☆14Updated this week
- A curated list of OPA related tools, frameworks and articles☆901Updated this week
- 🐊 Policy Controller for Kubernetes☆4,277Updated this week
- Write tests against structured configuration data using the Open Policy Agent Rego query language☆3,262Updated this week
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Superseded by https://github.com/aquasecurity/trivy-operator☆1,380Jun 10, 2026Updated 3 months ago
- ☆32Dec 1, 2019Updated 6 years ago
- An experimental package manager for distributing Kubernetes configuration as OCI artifacts.☆304Jul 22, 2023Updated 3 years ago
- 🏡 My homelab☆19Updated this week
- MKIT is a Managed Kubernetes Inspection Tool that validates several common security-related configuration settings of managed Kubernetes …☆396Sep 16, 2021Updated 5 years ago
- A curated list of Falco related tools, frameworks, blogs, podcasts, and articles☆201Jul 28, 2021Updated 5 years ago
- cloud native software supply chain ☁️🔗☆66Feb 15, 2021Updated 5 years ago
- Kubernetes RBAC static analysis & visualisation tool☆745Updated this week
- Scan Kubernetes resource files , and helm charts for security configurations issues and best practices.☆203Mar 3, 2023Updated 3 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- Security risk analysis for Kubernetes resources☆1,480Updated this week
- A faster and easier way to manage the lifecycle of applications and tools, running and living around your Kubernetes platform☆181May 13, 2022Updated 4 years ago
- ☆14Sep 20, 2023Updated 2 years ago
- MagTape Policy-as-Code for Kubernetes☆152Apr 24, 2024Updated 2 years ago
- Webhook service for Kubernetes LDAP authentication with the Webhook Token authentication plugin☆10Jun 17, 2020Updated 6 years ago
- Sidecar for managing OPA instances in Kubernetes.☆261Sep 10, 2026Updated last week
- ☆27Aug 31, 2022Updated 4 years ago
- A collection of templates for CAPI + Talos☆16Updated this week
- cert-operator creates and manages certificates for Kubernetes clusters running on Giant Swarm☆35Oct 30, 2024Updated last year
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Security risk analysis for Kubernetes resources☆517Jan 23, 2025Updated last year
- The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.☆132Updated this week
- a tool to deploy to multiple namespaces in a cluster☆20Aug 4, 2020Updated 6 years ago
- 🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their sig…☆79Dec 4, 2025Updated 9 months ago
- Kubernetes utility for exposing image versions in use, compared to latest available upstream, as metrics.☆778Sep 1, 2026Updated 2 weeks ago
- Show who has RBAC permissions to perform actions on different resources in Kubernetes☆920Jul 17, 2024Updated 2 years ago
- my goreleaser.yml files☆13Aug 31, 2026Updated 2 weeks ago