HummerRisk 是云原生安全平台,包括混合云安全治理和云原生安全检测。
-
Updated
Dec 26, 2024 - Java
GeezerVisonThe World Wide Web, restored to 800 pixels of glory. |
| Home|About|Gaming cabinet|Archives|How it works|Starter sites |
GeezerVison is showing github.com — Build software better, together
#
k8s-securityHere are 25 public repositories matching this topic...Language: All
Filter by language
Sort: Most stars
Sort options
HummerRisk 是云原生安全平台,包括混合云安全治理和云原生安全检测。
security vulnerability cloud-native compliance cloud-custodian compliance-as-code prowler sbom kubernetes-security trivy k8s-security cspm cloud-native-security
Automated CIS Benchmark Compliance Remediation for Kubernetes 1.6.1 with Ansible
kubernetes ansible ansible-playbook cis automation ansible-role cybersecurity system-hardening cis-benchmark container-security cis-hardening k8s-compliance cis-security k8s-security it-compliance secure-configuration secure-baseline cis-compliance enterprise-hardening k8s-hardening
Static analysis from configs → Kubernetes NetworkPolicies in seconds
kubernetes golang networking helm k8s cloud-native devsecops platform-engineering microsegmentation networkpolicy policy-as-code k8s-security shift-left-security
Automated CIS Benchmark Compliance Remediation for Kubernetes with Ansible
kubernetes ansible ansible-playbook cis automation ansible-role cybersecurity system-hardening cis-benchmark container-security cis-hardening k8s-compliance cis-security k8s-security it-compliance secure-configuration secure-baseline cis-compliance enterprise-hardening k8s-hardening
Basic simple integration around falco and wazuh into k8s cluster with daemonset deployment.
security security-audit siem k8s-cluster security-tools devsecops security-auditing-tool security-info k8s-security k8s-audit-log devsecops-tools
Production-ready platform for deploying a micro-services architecture in a k8s cluster on AWS.
kubernetes aws microservices terraform grafana prometheus pixie finops eks-cluster k8s-security lgtm-stack
Web Appliaction Firewall reverse-proxy using Coraza WAF + Caddy with ready-to-use rulesets
kubernetes golang wordpress security openshift waf reverse-proxy caddy k8s wordpress-security web-application-firewall rootless-containers distroless dependabot riotkit k8s-security cloud-native-security coraza-waf
NIST SP 800-218 (SSDF) compliance automation for Kubernetes — provision, harden, enforce, and audit clusters on-premises and air-gapped environments.
python kubernetes security nist opa compliance gatekeeper proxmox ssdf devsecops k3s air-gapped k8s-security nist-800-218
CKS Notes
Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.
kubernetes security rbac cloud-native hacktoberfest security-tools devsecops vulnerability-scanner cis-benchmark kubernetes-security k8s-security kyverno
🪄 Instant shell on kubernetes node with CVE-2021-25741 exploit adaptation
Enterprise-grade secure container deployment using Kubernetes, GitOps (ArgoCD), image scanning (Trivy), signing (Cosign), and runtime security (Falco).
cybersecurity devsecops cloud-security container-security gitops kubernetes-security k8s-security supply-chain-security
Helm charts for Kubernetes node-level security — CrowdSec firewall bouncer (iptables/nftables) to block malicious IPs before they reach ingress-nginx. GitOps-ready for ArgoCD.
client and types for garnet platform
Kubernetes RBAC analyzer: effective permissions, who-can queries, 17 audit rules and privilege-escalation paths to cluster-admin. Offline.
Kubernetes admission control: Kyverno + OPA Gatekeeper policies enforcing no-latest-tag, resource limits, required labels, non-root — every policy has a conftest CI test
Enterprise-grade CrowdStrike Falcon Sensor deployment for Kubernetes using DaemonSet across EKS, AKS, and GKE with centralized Artifact Registry integration.
kubernetes helm falcon gke devsecops daemonset cloud-security crowdstrike aks eks k8s-security artifact-registry
Kubernetes CIS Benchmark audit + auto-hardened manifest generator
Hands-on Kubernetes security lab: attack (LFI → SA token theft → cluster-admin privesc), detect (Falco + Security Onion), harden (NSA/CISA guide). CMU 14-761.
Add this topic to your repoTo associate your repository with the k8s-security topic, visit your repo's landing page and select "manage topics." |
| You are visitor 01402503 — GeezerVison does not store the pages you look up. Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required. |