Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or maki...
HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。
🧵 CLI tool for directly patching container images!
ValidKube combines the best open-source tools to help ensure Kubernetes YAML best practices, hygiene & security.
🧹 Cleaning up images from Kubernetes nodes
VULNRΞPO - Free vulnerability report generator and repository, end-to-end encrypted! Templates of issues, CWE,CVE,MITRE ATT&CK,PCI DSS, import Nmap/Nessus/Burp/OpenVAS/Bugcrowd/Trivy, Jira export, TXT...
Import Helm Charts to OCI registries, optionally with vulnerability patching
Vulnerability scanning just got lazier
A set of curated exercises to help you prepare for the CKS exam
m9sweeper is a free and easy kubernetes security platform.
Use Trivy as a plug-in vulnerability scanner in the Harbor registry
Web application that allows to load a Trivy report in json format and displays the vulnerabilities of a single target in an interactive data table.
DevOps Project: AWS EKS, CI/CD, Docker, Kubernetes, Argo CD, Git, Terraform, Prometheus, Grafana, and more. Build a Dev Portfolio with this powerful tech stack.
A Trivy plugin that scans and outputs the results (vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more) to an interactive html file.
Udemy Course on DevSecOps
Vilicus is an open source tool that orchestrates security scans of container images(docker/oci) and centralizes all results into a database for further analysis and metrics.
Practice questions for Certified Kubernetes Security Specialist (CKS) exam
GitHub Action to check for vulnerabilities in your container image
Compare data from multiple vulnerability scanners to get a more complete picture of potential exposures.
DevOps-MasterPiece Project using Git, GitHub, Jenkins, Maven, JUnit, SonarQube, Jfrog Artifactory, Docker, Trivy, AWS S3, Docker Hub, GitHub CLI, EKS, ArgoCD, Prometheus, Grafana, Slack and Hashicorp...