News for hackers. Stuff that matters.

A comment on Kubescape – tool for testing if Kubernetes is deployed securely. Parent comment

Re:Kubescape – tool for testing if Kubernetes is deployed se... by gravypod on Saturday September 04, 2021 @05:35PM (#28419490)
If you could check for container signing and providence on all materials and make sure that only a single registry is being used (ex only `internal.company.com:443`) and make sure it's not possible to schedule pods with unsigned/untrusted containers that would be awesome.
[ Parent | on HN ]
Re:Kubescape – tool for testing if Kubernetes is deployed se... by eris_agx on Saturday September 04, 2021 @05:46PM (#28419596)
For materials you can use syft https://github.com/anchore/syft
[ Parent | on HN ]
Re:Kubescape – tool for testing if Kubernetes is deployed se... by jkaftzan on Saturday September 04, 2021 @05:50PM (#28419622)
interesting, I'll send that to our dev team. BTW - you can suggest these things on Kubescape page @ Github and see status etc.
[ Parent | on HN ]
Re:Kubescape – tool for testing if Kubernetes is deployed se... by dwertent on Sunday September 05, 2021 @09:51AM (#28424342)
Yes, we are working on integration with anchore :)
[ Parent | on HN ]
Re:Kubescape – tool for testing if Kubernetes is deployed se... by leeoniya on Saturday September 04, 2021 @07:12PM (#28420231)
s/providence/provenance
[ Parent | on HN ]