NSA and CISA Kubernetes Security Guidance – A Critical Review

Re:NSA and CISA Kubernetes Security Guidance – A Critical Re... by Ms-J on Sunday September 12, 2021 @06:06PM (#28505476)

So, you would like use to Curl | Bash a TLA security guidance script, really?

No package and hash database?

It's trivial to detect when a script is being downloaded to disk or piped to a shell, btw.

I saw this same group post another thread about this recently.

[ Parent | on HN ]

Re:NSA and CISA Kubernetes Security Guidance – A Critical Re... by chmod-777 on Monday September 13, 2021 @03:45AM (#28508841)

Hi, you do not have to use the curl | bash options, completely understand the concern (I am also like that), but we wanted to make it easy for those who like it easy :-)

It is completely open source, you can take the executables and run it yourself, compile it, change it, however you feel like :-)

If you do try it, let us know how it is, happy to get feedback!

[ Parent | on HN ]