kubescape
Kubescape is an open-source security and compatibility platform developed for Kubernetes environments. Software development supports risk analysis, configuration auditing, and runtime monitoring processes throughout the life cycle. The project, located under the CNCF roof, offers a variety of scanning and improvement tools to ensure cluster safety.
kubescape
100kubescape · DevOps / Build / Infra
Common commercial products in this category: GitHub Actions, CircleCI, Atlassian Bamboo
- You can scan configuration errors and vulnerabilities in your Kubernetes clusters.
- You can detect vulnerabilities in the inclusive images and perform automatic patch operations.
- With eBPF-based tracking tools, you can supervise runtime security.
- • NeutralHacker News
Kubescape – tool for testing if Kubernetes is deployed securely
“The link being used in the curl-to-bash example from the original discussion is a direct link to content in the repo itself — so if you trust that repo server for its content, it doesn't matter whether you curl-to-bash or not. If that Github server is malicious you're in…”
- • NeutralHacker News
Kubescape – tool for testing if Kubernetes is deployed securely
“We are continuing to work on Kubescape and enhance it with more features and capabilities: Kubescape can now check that YAML files and HELM charts are configured correctly as defined by NSA and CISA guidance. No cluster is required and you can scan for misconfigurations as early…”