6 ms·
Another tool that can help here: https://github.com/aquasecurity/kube-bench https://github.com/aquasecurity/kube-bench
by mcdan 8y ago
Another tool that can help here: https://github.com/aquasecurity/kube-bench https://github.com/aquasecurity/kube-bench
- jaytaylor 8y agoThis looks potentially very useful, thanks for sharing! There appear to be several of these worth investigating. Ordered by highest to lowest apparent activity level and update frequency: https://github.com/aquasecurity/kube-bench https://github.com/aquasecurity/kube-bench (Go) https://github.com/neuvector/kubernetes-cis-benchmark https://github.com/neuvector/kubernetes-cis-benchmark (Bash) https://github.com/dev-sec/cis-kubernetes-benchmark https://github.com/dev-sec/cis-kubernetes-benchmark (Ruby)
- kylegalbraith 8y agoThis is quite useful, thank you for pointing me in this direction!
- raesene9 8y agoI'll add https://github.com/nccgroup/kube-auto-analyzer https://github.com/nccgroup/kube-auto-analyzer to that list (disclaimer, I for my sins, wrote it :) )
- aboutsimon 8y agoSuper useful thanks, added it to the guide