kubernetes-security | Topic | Ecosyste.ms: Repos

Topic: "kubernetes-security"

aquasecurity/kube-bench

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

Language: Go - Size: 9.83 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 7,686 - Forks: 1,296

techiescamp/kubernetes-learning-path

A roadmap to learn Kubernetes from scratch (Beginner to Advanced level)

Size: 993 KB - Last synced at: 2 months ago - Pushed at: 2 months ago - Stars: 7,121 - Forks: 932

madhuakula/kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

Language: HTML - Size: 124 MB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 4,778 - Forks: 798

cdk-team/CDK

📦 Make security testing of K8s, Docker, and Containerd easier.

Language: Go - Size: 9.54 MB - Last synced at: about 2 months ago - Pushed at: 6 months ago - Stars: 4,273 - Forks: 575

walidshaari/Certified-Kubernetes-Security-Specialist

Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

Language: AGS Script - Size: 150 KB - Last synced at: about 9 hours ago - Pushed at: 2 months ago - Stars: 2,076 - Forks: 558

DataDog/stratus-red-team

:cloud: :zap: Granular, Actionable Adversary Emulation for the Cloud

Language: Go - Size: 3.8 MB - Last synced at: 3 months ago - Pushed at: 3 months ago - Stars: 2,043 - Forks: 246

HummerRisk/HummerRisk

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

Language: Java - Size: 51.1 MB - Last synced at: 3 months ago - Pushed at: 9 months ago - Stars: 1,492 - Forks: 237

Metarget/metarget

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

Language: Python - Size: 4.93 MB - Last synced at: 3 months ago - Pushed at: 5 months ago - Stars: 1,255 - Forks: 190

ViktorUJ/cks

Open-source Platform for learning kubernetes and aws eks and preparation for for Certified Kubernetes exams (CKA ,CKS , CKAD)

Language: HCL - Size: 2.68 MB - Last synced at: about 14 hours ago - Pushed at: about 14 hours ago - Stars: 1,209 - Forks: 234

paralus/paralus

All-in-one Kubernetes access manager. User-level credentials, RBAC, SSO, audit logs.

Language: Go - Size: 18.9 MB - Last synced at: 10 days ago - Pushed at: 10 days ago - Stars: 1,139 - Forks: 72

edgelesssys/constellation

Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.

Language: Go - Size: 46.9 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 1,068 - Forks: 59

vchinnipilli/kubestriker

A Blazing fast Security Auditing tool for Kubernetes

Language: Python - Size: 22 MB - Last synced at: about 2 months ago - Pushed at: over 1 year ago - Stars: 996 - Forks: 109

ksoclabs/awesome-kubernetes-security

A curated list of awesome Kubernetes security resources

Size: 43 KB - Last synced at: 1 day ago - Pushed at: over 1 year ago - Stars: 944 - Forks: 127

DataDog/KubeHound

Tool for building Kubernetes attack paths

Language: Go - Size: 42.4 MB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 894 - Forks: 56

kabachook/k8s-security

Kubernetes security notes and best practices

Language: Shell - Size: 5.31 MB - Last synced at: 5 months ago - Pushed at: over 3 years ago - Stars: 718 - Forks: 73

HXSecurity/TerraformGoat

TerraformGoat is HXSecurity research lab's "Vulnerable by Design" multi cloud deployment tool.

Language: HCL - Size: 65.9 MB - Last synced at: 4 months ago - Pushed at: almost 3 years ago - Stars: 588 - Forks: 91

mikeroyal/eBPF-Guide

eBPF (extended Berkeley Packet Filter) Guide. Learn all about the eBPF Tools and Libraries for Security, Monitoring , and Networking.

Language: Go - Size: 181 KB - Last synced at: 4 months ago - Pushed at: over 1 year ago - Stars: 584 - Forks: 55

Vinum-Security/kubernetes-security-checklist

Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)

Size: 111 KB - Last synced at: 4 months ago - Pushed at: over 3 years ago - Stars: 474 - Forks: 95

cruise-automation/k-rail 📦

Kubernetes security tool for policy enforcement

Language: Go - Size: 431 KB - Last synced at: 24 days ago - Pushed at: over 2 years ago - Stars: 444 - Forks: 53

darkbitio/mkit 📦

MKIT is a Managed Kubernetes Inspection Tool that validates several common security-related configuration settings of managed Kubernetes cluster objects and the workloads/resources running inside the cluster.

Language: Dockerfile - Size: 3.13 MB - Last synced at: 5 months ago - Pushed at: almost 4 years ago - Stars: 401 - Forks: 26

DataDog/managed-kubernetes-auditing-toolkit

All-in-one auditing toolkit for identifying common security issues in managed Kubernetes environments. Currently supports Amazon EKS.

Language: Go - Size: 302 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 355 - Forks: 23

PaloAltoNetworks/rbac-police 📦

Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego

Language: Go - Size: 357 KB - Last synced at: 20 days ago - Pushed at: 6 months ago - Stars: 348 - Forks: 40

Metarget/awesome-cloud-native-security

awesome resources about cloud native security 🐿

Size: 83 KB - Last synced at: 1 day ago - Pushed at: almost 2 years ago - Stars: 321 - Forks: 52

Metarget/k0otkit

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

Language: Shell - Size: 4.64 MB - Last synced at: 1 day ago - Pushed at: about 4 years ago - Stars: 292 - Forks: 52

r0binak/MTKPI

🧰 Multi Tool Kubernetes Pentest Image

Language: Shell - Size: 8.36 MB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 245 - Forks: 21

kubewarden/kubewarden-controller

Manage admission policies in your Kubernetes cluster with ease

Language: Go - Size: 2.97 MB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 213 - Forks: 38

developer-guy/awesome-falco

A curated list of Falco related tools, frameworks, blogs, podcasts, and articles

Size: 124 KB - Last synced at: 8 days ago - Pushed at: about 4 years ago - Stars: 203 - Forks: 21

kubesec-diagram/kubesec-diagram.github.io

Language: JavaScript - Size: 313 KB - Last synced at: about 1 month ago - Pushed at: about 1 month ago - Stars: 187 - Forks: 19

stacksimplify/google-kubernetes-engine

Google Kubernetes Engine GKE with DevOps 75 Real-World Demos

Language: HTML - Size: 14.3 MB - Last synced at: 4 months ago - Pushed at: about 1 year ago - Stars: 174 - Forks: 504

kubewarden/policy-server

Webhook server that evaluates WebAssembly policies to validate Kubernetes requests

Language: Rust - Size: 28.6 MB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 150 - Forks: 20

abdennour/certified-kubernetes-security-specialist

References for CKS Exam Objectives - Certified Kubernetes Security Specialist

Size: 2.35 MB - Last synced at: 3 months ago - Pushed at: almost 2 years ago - Stars: 144 - Forks: 62

OWASP/KubeLight

OWASP Kubernetes security and compliance tool [WIP]

Language: Python - Size: 171 KB - Last synced at: 4 months ago - Pushed at: over 2 years ago - Stars: 106 - Forks: 16

falcosecurity-retire/falco-security-workshop 📦

Container Security Workshop covering using Falco on Kubernetes.

Language: Python - Size: 4.59 MB - Last synced at: 5 months ago - Pushed at: over 4 years ago - Stars: 105 - Forks: 39

kubewarden/kwctl

Go-to CLI tool for Kubewarden users

Language: Rust - Size: 4.09 MB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 87 - Forks: 22

JOSHUAJEBARAJ/GCP-GOAT

GCP GOAT is the vulnerable application for learn the GCP Security

Language: TypeScript - Size: 35.8 MB - Last synced at: 4 months ago - Pushed at: 4 months ago - Stars: 64 - Forks: 25

CloudDefenseAI/falco_extended_rules

Curating Falco rules with MITRE ATT&CK Matrix

Language: Python - Size: 102 KB - Last synced at: over 1 year ago - Pushed at: over 1 year ago - Stars: 62 - Forks: 9

vedmichv/CKS-Certified-Kubernetes-Security-Specialist

Shortlist of preparation materials to pass CKS exam

Language: HTML - Size: 83 KB - Last synced at: over 2 years ago - Pushed at: almost 3 years ago - Stars: 56 - Forks: 36

kube-tarian/tarian

Protect your Cloud Native Applications running on Kubernetes from malicious attacks with pre-registered source code, pre-registered runtime processes monitoring, automated actions based on configure-actions, analytics, alerting and also sharing detections with community. Maybe save from Ransomware. Shift-Left your threat detection. Shift Right threat elimination.

Language: Go - Size: 12.1 MB - Last synced at: 4 months ago - Pushed at: 9 months ago - Stars: 55 - Forks: 12

appvia/psp-migration

Recreation of common Pod Security Policy configuration in other common Kubernetes policy engines

Language: TypeScript - Size: 16.2 MB - Last synced at: 3 days ago - Pushed at: 8 days ago - Stars: 51 - Forks: 4

lightspin-tech/eks-creation-engine

The Amazon Elastic Kubernetes Service (EKS) Creation Engine (ECE) is a Python command-line program created by the Lightspin Office of the CISO to facilitate the creation and enablement of secure EKS Clusters.

Language: Python - Size: 85.9 KB - Last synced at: over 2 years ago - Pushed at: over 2 years ago - Stars: 39 - Forks: 12

openclarity/kubeclarity 📦

KubeClarity is a tool for detection and management of Software Bill Of Materials (SBOM) and vulnerabilities of container images and filesystems

Language: Go - Size: 7.46 MB - Last synced at: 5 months ago - Pushed at: 11 months ago - Stars: 36 - Forks: 5

cado-security/CloudAndContainerCompromiseSimulator

Simulates a compromise in a cloud and container environment

Language: Shell - Size: 60.7 MB - Last synced at: 9 months ago - Pushed at: 9 months ago - Stars: 32 - Forks: 7

OWASP/www-project-eks-goat

OWASP EKS Goat is a deliberately vulnerable EKS cluster environment to explore AWS cloud-native security through hands-on attack and defense labs with walkthrough.

Language: Shell - Size: 443 KB - Last synced at: 2 days ago - Pushed at: about 1 month ago - Stars: 29 - Forks: 24

afyazici/kubernetes-turkce-kaynak

Youtube'da TechWorld with Nina kanalınında yer alan 4 saatlik "Kubernetes Tutorial for Beginners [FULL COURSE in 4 Hours]" videosunu döküman formatında Türkçeye çeviriyorum.

Language: HTML - Size: 36.4 MB - Last synced at: 27 days ago - Pushed at: over 1 year ago - Stars: 25 - Forks: 1

NordCoderd/cloud-security-plugin

Cloud (IaC) Security plugin for JetBrains IDEs (e.g., IntelliJ IDEA, PyCharm)

Language: Kotlin - Size: 673 KB - Last synced at: 8 days ago - Pushed at: 8 days ago - Stars: 22 - Forks: 1

kubescape/github-action

GitHub action to run Kubescape scans

Language: Shell - Size: 127 KB - Last synced at: 10 days ago - Pushed at: 9 months ago - Stars: 21 - Forks: 21

jumpbox-event/learn-ebpf

Learning eBPF Event 2024

Language: Python - Size: 17.3 MB - Last synced at: 25 days ago - Pushed at: about 1 year ago - Stars: 20 - Forks: 4

javiln8/kubnerable

🔭 Kubernetes out-cluster vulnerability scanner

Language: Go - Size: 449 KB - Last synced at: 4 months ago - Pushed at: about 4 years ago - Stars: 20 - Forks: 1

kubewarden/deprecated-api-versions-policy

A Kubewarden Policy that detects usage of deprecated and dropped Kubernetes resources

Language: Rust - Size: 438 KB - Last synced at: 11 days ago - Pushed at: 12 days ago - Stars: 17 - Forks: 5

raoulx24/trivy-operator-dashboard

Trivy Operator Dashboard: A comprehensive tool for Trivy Operator. Offers various dashboards and interactive pages where you can browse and inspect Trivy Reports. Built with C#, .NET 9 (backend), Angular 20, and Node.js 24 (frontend).

Language: C# - Size: 22.1 MB - Last synced at: 5 days ago - Pushed at: 5 days ago - Stars: 16 - Forks: 1

y4ney/collect-k8s-official-vulns

可爬取、更新并将 K8S 官方漏洞翻译（通过 DeepSeek）成简体中文

Language: Go - Size: 5.77 MB - Last synced at: about 2 months ago - Pushed at: about 2 months ago - Stars: 14 - Forks: 0

kubewarden/docs

Kubewarden's documentation

Language: JavaScript - Size: 462 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 13 - Forks: 27

kubewarden/verify-image-signatures

A Kubewarden Policy that verifies all the signatures of the container images referenced by a Pod

Language: Rust - Size: 582 KB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 13 - Forks: 8

kube-tarian/sigrun

Sign your artifacts, source code or container images using Sigstore tools, Save the Signatures you want to use, and Validate & Control the deployments to allow only the known Sources based on Signatures, Maintainers & other payloads automatically.

Language: Go - Size: 705 KB - Last synced at: 4 months ago - Pushed at: about 2 years ago - Stars: 13 - Forks: 3

rancher/kubewarden-ui

Kubewarden's User Interface

Language: TypeScript - Size: 73.5 MB - Last synced at: 12 days ago - Pushed at: 13 days ago - Stars: 12 - Forks: 16

kubewarden/kubewarden.io

Kubewarden website

Language: SCSS - Size: 15 MB - Last synced at: 13 days ago - Pushed at: 14 days ago - Stars: 11 - Forks: 18

kubewarden/go-policy-template

A template repository to quickly scaffold a Kubewarden policy written with Go language

Language: Go - Size: 1.06 MB - Last synced at: 18 days ago - Pushed at: 18 days ago - Stars: 11 - Forks: 16

kubewarden/policy-sdk-rust

Kubewarden Policy SDK for the Rust programming language

Language: Rust - Size: 440 KB - Last synced at: about 24 hours ago - Pushed at: 1 day ago - Stars: 10 - Forks: 8

kubewarden/pod-privileged-policy

A Kubewarden Policy that limits the ability to create privileged containers

Language: Rust - Size: 556 KB - Last synced at: 3 days ago - Pushed at: 7 days ago - Stars: 10 - Forks: 6

wh0isdxk/StudyNotes

Notas de estudos sobre variados assuntos.

Size: 33.2 KB - Last synced at: 8 days ago - Pushed at: over 3 years ago - Stars: 10 - Forks: 1

kubewarden/policy-sdk-dotnet

Kubewarden Policy SDK for the .NET platform

Language: C# - Size: 146 KB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 9 - Forks: 3

kubewarden/policy-fetcher

Crate used by Kubewarden that is able to pull policies from OCI registries and HTTP servers.

Language: Rust - Size: 677 KB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 9 - Forks: 10

kubewarden/policy-sdk-go

Kubewarden Policy SDK for the Go programming language

Language: Go - Size: 1.03 MB - Last synced at: 14 days ago - Pushed at: 14 days ago - Stars: 9 - Forks: 8

kubewarden/rust-policy-template

A Kubewarden rust policy template to be used with cargo-generate

Language: Rust - Size: 104 KB - Last synced at: 26 days ago - Pushed at: about 1 month ago - Stars: 9 - Forks: 10

kubewarden/k8s-objects-generator

CLI tool that generates Kubernetes Go types that can be used with TinyGo starting from the official OpenAPI spec

Language: Go - Size: 365 KB - Last synced at: 2 days ago - Pushed at: 2 days ago - Stars: 8 - Forks: 5

kubewarden/audit-scanner

Reports evaluation of existing Kubernetes resources with your already deployed Kubewarden policies.

Language: Go - Size: 1.62 MB - Last synced at: 6 days ago - Pushed at: 6 days ago - Stars: 8 - Forks: 9

harshanarayana/sanic-webhook

Kubernetes Mutating and Validating Webhooks written in Sanic

Language: Python - Size: 1.69 MB - Last synced at: over 1 year ago - Pushed at: over 3 years ago - Stars: 8 - Forks: 0

kubewarden/trusted-repos-policy

A Kubewarden policy that restricts what registries, tags and images can pods on your cluster refer to

Language: Rust - Size: 412 KB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 7 - Forks: 5

kubewarden/allowed-proc-mount-types-psp-policy

Replacement for the Kubernetes Pod Security Policy that controls the usage of /proc mount types

Language: Rust - Size: 338 KB - Last synced at: 14 days ago - Pushed at: 14 days ago - Stars: 7 - Forks: 6

kubewarden/user-group-psp-policy

This Kubewarden Policy is a replacement for the Kubernetes Pod Security Policy that controls containers user and groups

Language: Rust - Size: 436 KB - Last synced at: 14 days ago - Pushed at: 14 days ago - Stars: 7 - Forks: 5

kubewarden/k8s-objects

Experimental: Kubernetes Go types that can be used with TinyGo

Size: 5.96 MB - Last synced at: 26 days ago - Pushed at: 2 months ago - Stars: 7 - Forks: 2

kubewarden/apparmor-psp-policy

A Kubewarden Pod Security Policy that controls usage of AppArmor profiles

Language: Rust - Size: 319 KB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 6 - Forks: 5

kubewarden/capabilities-psp-policy

A Pod Security Policy that controls Container Capabilities

Language: Rust - Size: 376 KB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 6 - Forks: 7

kubewarden/allow-privilege-escalation-psp-policy

A Kubewarden Pod Security Policy that controls usage of allowPrivilegeEscalation

Language: Rust - Size: 374 KB - Last synced at: 14 days ago - Pushed at: 14 days ago - Stars: 6 - Forks: 8

ronak-agarwal/terraform-provider-k8spolicy

Terraform provider to create OPA Gatekeeper v3 constraints and templates

Language: Go - Size: 111 KB - Last synced at: 9 months ago - Pushed at: about 5 years ago - Stars: 6 - Forks: 1

kubewarden/safe-labels-policy

Kubewarden policy that validates Kubernetes' resource labels

Language: Go - Size: 1.08 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 5 - Forks: 3

kubewarden/ingress-policy

Policy to enforce requirements on Kubernetes Ingress resources.

Language: Go - Size: 1.16 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 5 - Forks: 4

kubewarden/cel-policy

A policy that can run CEL expressions

Language: Go - Size: 517 KB - Last synced at: 14 days ago - Pushed at: 14 days ago - Stars: 5 - Forks: 6

kubewarden/env-variable-secrets-scanner-policy

A Kubewarden Policy that detects secrets (ssh private keys, API tokens, etc) leaked via environment variables

Language: Rust - Size: 369 KB - Last synced at: 21 days ago - Pushed at: 21 days ago - Stars: 5 - Forks: 4

kubewarden/safe-annotations-policy

Kubewarden policy that validates Kubernetes' resource annotations

Language: Go - Size: 1.19 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 4 - Forks: 5

kubewarden/seccomp-psp-policy

A Kubewarden Pod Security Policy that controls usage of Seccomp profiles

Language: Rust - Size: 316 KB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 4 - Forks: 5

kubewarden/pod-runtime-class-policy

A Kubewarden Policy that controls the usage of Pod runtimeClass

Language: Rust - Size: 334 KB - Last synced at: 7 days ago - Pushed at: 7 days ago - Stars: 4 - Forks: 3

kubewarden/github-actions

GitHub actions used by the Kubewarden project

Size: 673 KB - Last synced at: 12 days ago - Pushed at: 17 days ago - Stars: 4 - Forks: 7

kubewarden/opa-policy-template

A template repository to quickly port a Open Policy Agent policy to Kubewarden

Language: Open Policy Agent - Size: 109 KB - Last synced at: 26 days ago - Pushed at: 28 days ago - Stars: 4 - Forks: 2

kubewarden/allowed-fsgroups-psp-policy

Replacement for the Kubernetes Pod Security Policy that controls the usage of fsGroup in the pod security context

Language: Rust - Size: 325 KB - Last synced at: 30 days ago - Pushed at: 30 days ago - Stars: 4 - Forks: 6

kubewarden/rfc

Kubewarden's RFCs

Size: 181 KB - Last synced at: 26 days ago - Pushed at: 3 months ago - Stars: 4 - Forks: 5

husseinahmed-dev/Research-Project-1-Kubernetes-Hardening

Research Project 1 - Kubernetes Hardening - configuration files and source code

Language: HTML - Size: 71.1 MB - Last synced at: over 1 year ago - Pushed at: over 2 years ago - Stars: 4 - Forks: 3

kubewarden/hostpaths-psp-policy

Replacement for the Kubernetes Pod Security Policy that controls the usage of hostpaths

Language: Go - Size: 1.2 MB - Last synced at: 4 days ago - Pushed at: 4 days ago - Stars: 3 - Forks: 4

kubewarden/rego-policies-library

A collection of Rego policies that can be used to enforce best practices in Kubernetes clusters

Language: Open Policy Agent - Size: 1.46 MB - Last synced at: 17 days ago - Pushed at: 17 days ago - Stars: 3 - Forks: 6

kubewarden/community

Kubewarden's community repository

Language: Makefile - Size: 131 KB - Last synced at: 26 days ago - Pushed at: about 1 month ago - Stars: 3 - Forks: 7

mathieu-benoit/mathieu-benoit.github.io

The content of my blog hosted at: https://mathieu-benoit.github.io/

Language: HTML - Size: 3.92 MB - Last synced at: about 1 year ago - Pushed at: about 1 year ago - Stars: 3 - Forks: 3

kubewarden/policy-hub 📦

A place where to find and discover policies

Size: 11.1 MB - Last synced at: over 2 years ago - Pushed at: over 2 years ago - Stars: 3 - Forks: 4