GV

GeezerVison

The World Wide Web, restored to 800 pixels of glory.

Home|About|Gaming cabinet|Archives|How it works|Starter sites

On this site

  • Sign in
  • ActionsCI/CD and automation
  • CodespacesCloud development environments
  • All Features
  • Documentation
  • Training
  • Certifications
  • Build with Copilot
  • Customize Copilot
  • Integrations
  • Trending repos
  • GitHub Sponsors
  • Developer articles
  • Enterprises

This view

  • Original page
  • New address

GeezerVison is showing github.com — Build software better, together

#

k8s-security

Star

Here are 25 public repositories matching this topic...

Language: All
Filter by language
All 25 Python 7 Go 3 Shell 3 Dockerfile 1 HCL 1 Jinja 1 Java 1 Makefile 1 YAML 1 Go Template 1
Sort: Most stars
Sort options
Most stars Fewest stars Most forks Fewest forks Recently updated Least recently updated

HummerRisk / HummerRisk

Star 1.5k

HummerRisk 是云原生安全平台,包括混合云安全治理和云原生安全检测。

security vulnerability cloud-native compliance cloud-custodian compliance-as-code prowler sbom kubernetes-security trivy k8s-security cspm cloud-native-security
  • Updated Dec 26, 2024
  • Java

ansible-lockdown / Kubernetes1.6.1-CIS

Star 24

Automated CIS Benchmark Compliance Remediation for Kubernetes 1.6.1 with Ansible

kubernetes ansible ansible-playbook cis automation ansible-role cybersecurity system-hardening cis-benchmark container-security cis-hardening k8s-compliance cis-security k8s-security it-compliance secure-configuration secure-baseline cis-compliance enterprise-hardening k8s-hardening
  • Updated Apr 6, 2023

dormstern / segspec

Star 16

Static analysis from configs → Kubernetes NetworkPolicies in seconds

kubernetes golang networking helm k8s cloud-native devsecops platform-engineering microsegmentation networkpolicy policy-as-code k8s-security shift-left-security
  • Updated May 6, 2026
  • Go

ansible-lockdown / KUBERNETES-STIG

Star 11

Automated CIS Benchmark Compliance Remediation for Kubernetes with Ansible

kubernetes ansible ansible-playbook cis automation ansible-role cybersecurity system-hardening cis-benchmark container-security cis-hardening k8s-compliance cis-security k8s-security it-compliance secure-configuration secure-baseline cis-compliance enterprise-hardening k8s-hardening
  • Updated Aug 21, 2026
  • YAML

zeinoux / siem-falco-wazuh

Star 10

Basic simple integration around falco and wazuh into k8s cluster with daemonset deployment.

security security-audit siem k8s-cluster security-tools devsecops security-auditing-tool security-info k8s-security k8s-audit-log devsecops-tools
  • Updated Jun 16, 2022
  • Dockerfile

mu-majid / aws-k8s-platform-blueprint

Star 9

Production-ready platform for deploying a micro-services architecture in a k8s cluster on AWS.

kubernetes aws microservices terraform grafana prometheus pixie finops eks-cluster k8s-security lgtm-stack
  • Updated Oct 25, 2026
  • HCL

riotkit-org / waf-proxy

Star 7

Web Appliaction Firewall reverse-proxy using Coraza WAF + Caddy with ready-to-use rulesets

kubernetes golang wordpress security openshift waf reverse-proxy caddy k8s wordpress-security web-application-firewall rootless-containers distroless dependabot riotkit k8s-security cloud-native-security coraza-waf
  • Updated Jun 12, 2023
  • Jinja

rudymartinezai / klustershield

Star 3

NIST SP 800-218 (SSDF) compliance automation for Kubernetes — provision, harden, enforce, and audit clusters on-premises and air-gapped environments.

python kubernetes security nist opa compliance gatekeeper proxmox ssdf devsecops k3s air-gapped k8s-security nist-800-218
  • Updated Apr 13, 2026
  • Python

ruzickap / cks-notes

Star 3

CKS Notes

kubernetes security public notes k8s cks k8s-security cks-exam cks-exam-preparation
  • Updated Nov 12, 2026

kaaval / kaaval

Star 2

Self-hosted Kubernetes security scanner that ranks every CVE and RBAC finding by a Contextual Risk Score tied to your cluster — with remediation, CIS v1.12.0 mapping, and CI/CD gating.

kubernetes security rbac cloud-native hacktoberfest security-tools devsecops vulnerability-scanner cis-benchmark kubernetes-security k8s-security kyverno
  • Updated Nov 7, 2026
  • Python

ariary / CVE-2021-25741

Star 1

🪄 Instant shell on kubernetes node with CVE-2021-25741 exploit adaptation

kubernetes poc infosec cve hostpath k8s-security
  • Updated Nov 10, 2022
  • Shell

hackyshadab / secure-container-kubernetes-devsecops

Star 1

Enterprise-grade secure container deployment using Kubernetes, GitOps (ArgoCD), image scanning (Trivy), signing (Cosign), and runtime security (Falco).

cybersecurity devsecops cloud-security container-security gitops kubernetes-security k8s-security supply-chain-security
  • Updated Apr 12, 2026
  • Python

vitalykhe / crowdsec-firewall-bouncer-gitops-template

Star 1

Helm charts for Kubernetes node-level security — CrowdSec firewall bouncer (iptables/nftables) to block malicious IPs before they reach ingress-nginx. GitOps-ready for ArgoCD.

kubernetes firewall iptables bouncer devsecops helm-chart gitops argocd k8s-security crowdsec
  • Updated Sep 30, 2026
  • Go Template

garnet-org / api

Star 1

client and types for garnet platform

security runtime-security github-actions k8s-security github-actions-security
  • Updated Nov 11, 2026
  • Go

Opsbreak / rbacscope

Star 0

Kubernetes RBAC analyzer: effective permissions, who-can queries, 17 audit rules and privilege-escalation paths to cluster-admin. Offline.

kubernetes golang rbac privilege-escalation sarif cloud-security k8s-security
  • Updated Oct 8, 2026
  • Go

hassaan-solves / secure-access-in-k8s-with-serviceaccounts-and-rbac

Star 0
kubernetes devops rbac access-control clusterrole k8s-security serviceaccounts
  • Updated Aug 3, 2025
  • Shell

srujantata / k8s-policy-as-code

Star 0

Kubernetes admission control: Kyverno + OPA Gatekeeper policies enforcing no-latest-tag, resource limits, required labels, non-root — every policy has a conftest CI test

kubernetes opa gatekeeper devsecops policy-as-code k8s-security kyverno
  • Updated May 19, 2026
  • Open Policy Agent

santhoshkumar9119 / crowdstrike-k8s-falcon-daemonset

Star 0

Enterprise-grade CrowdStrike Falcon Sensor deployment for Kubernetes using DaemonSet across EKS, AKS, and GKE with centralized Artifact Registry integration.

kubernetes helm falcon gke devsecops daemonset cloud-security crowdstrike aks eks k8s-security artifact-registry
  • Updated Jun 4, 2026
  • Shell

securekamal / k8s-security-hardener

Star 0

Kubernetes CIS Benchmark audit + auto-hardened manifest generator

kubernetes devsecops cis-benchmark container-security k8s-security
  • Updated Mar 11, 2026
  • Python

default-cybe / k8s-guard

Star 0

Hands-on Kubernetes security lab: attack (LFI → SA token theft → cluster-admin privesc), detect (Falco + Security Onion), harden (NSA/CISA guide). CMU 14-761.

kubernetes security security-onion falco cloud-security mitre-attack k8s-security
  • Updated Sep 26, 2026

Add this topic to your repo

To associate your repository with the k8s-security topic, visit your repo's landing page and select "manage topics."

Learn more

You are visitor 01402503 — GeezerVison does not store the pages you look up.
Best viewed with Netscape Navigator 4.7 or Internet Explorer 6 at 800×600. No cookies required.