Jetstack Paranoia: A New Open-Source Tool for Container Image Security

Re:Jetstack Paranoia: A New Open-Source Tool for Container I... by beny23 on Tuesday October 18, 2022 @08:24AM (#33246151)

I feel a bit conned by the headline, it would be better to say "verifying CA certs in images"

[ Parent | on HN ]

Re:Jetstack Paranoia: A New Open-Source Tool for Container I... by pulsar256 on Tuesday October 18, 2022 @08:39AM (#33246265)

I was also a bit confused and expected something like grype -https://github.com/anchore/grype

[ Parent | on HN ]

Re:Jetstack Paranoia: A New Open-Source Tool for Container I... by mirzap on Tuesday October 18, 2022 @08:52AM (#33246383)

I was also expected something like this, but I didn't know for grype till now. Thanks! Is there anything similar to this for npm packages?

[ Parent | on HN ]

Re:Jetstack Paranoia: A New Open-Source Tool for Container I... by ashishbijlani on Tuesday October 18, 2022 @09:02AM (#33246482)

I built Packj https://github.com/ossillate-inc/packj to scan NPM/PyPI/Ruby packages for CVEs and malicious/risky attributes.

[ Parent | on HN ]