Open-source security tools for cloud and container applications

Posted by alexellisuk on Thursday March 26, 2020 @06:07AM
from the techgenix.com dept.

http://techgenix.com/open-source-security-tools/

( 6 comments | 53 points | on HN )

Re:Open-source security tools for cloud and container applic... by allset_ on Thursday March 26, 2020 @11:35AM (#22694558)

It's odd they don't list OPA Gatekeeper, which is probably the best tool for enforcing security and other best practices in Kubernetes clusters.

List of CNCF open source security projects without the blog post: https://landscape.cncf.io/category=security-compliance&forma...

[ Parent | on HN ]

Re:Open-source security tools for cloud and container applic... by westurner on Thursday March 26, 2020 @02:26PM (#22696376)

> List of CNCF open source security projects without the blog post: https://landscape.cncf.io/category=security-compliance&forma...

Thanks for this.

[ Parent | on HN ]

Re:Open-source security tools for cloud and container applic... by ownagefool on Thursday March 26, 2020 @03:28PM (#22696997)

It's interesting that OPA doesn't show up in cardmode on CNCF either, but it's there on the landscape view.

[ Parent | on HN ]

Re:Open-source security tools for cloud and container applic... by dankohn1 on Thursday March 26, 2020 @03:58PM (#22697308)

OPA is shown under card view: https://landscape.cncf.io/format=card-mode&project=hosted&se...

[ Parent | on HN ]

Re:Open-source security tools for cloud and container applic... by oneplane on Thursday March 26, 2020 @10:46AM (#22694026)

Ironically that website has no TLS. But the tools in the article are a good collection. Too bad CoreOS got eaten by RH/IBM because that level of integration will probably not be replicated in Fedora. And that in turn might cause Clair to get less development or integration, which is bad for everyone.

[ Parent | on HN ]

Re:Open-source security tools for cloud and container applic... by peterloron on Thursday March 26, 2020 @01:15PM (#22695717)

I've had good success with Anchore in the past, and yeah, missing Gatekeeper is bizarre.

[ Parent | on HN ]