How to scan and control the K8 objects are being created against security threats?

• trivy

  83 21,730 9.8 Go

  Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

  

Trivy to scan your Container Image, for example as an Artefact finished building for your application in CI/CD.

• trivy-operator

  2 1,075 9.6 Go

  Kubernetes-native security toolkit

  

Trivy-Operator (previously known as Starboard) to continuously scan all new workloads in your Kubernetes Cluster. It also uses Trivy so you have a close engine stack.

• InfluxDB

  www.influxdata.com featured

  Power Real-Time Data Analytics at Scale. Get real-time insights from all types of time series data with InfluxDB. Ingest, query, and analyze billions of data points in real-time with unbounded cardinality.

  

• starboard-exporter

  1 57 8.5 Go

  A standalone exporter for vulnerability reports and other CRs created by Trivy Operator (formerly Starboard).

  

Starboard-Operator (by GiantSwam) exposes the Reports created by Trivy-Operator as Prometheus compatible Metrics. Next you can use Grafana to get an overview of all your currently running workloads and their vulnerabilities data.

• Monokle

  47 1,567 9.1 TypeScript

  Monokle is a set of OSS tools designed to help create and maintain high-quality Kubernetes configurations throughout the application lifecycle

  

Monokle is another viable option for doing this pre-deployment. It has OPA functionality integrated so you set up and configure additional policies to be checked earlier in your workflow. It also helps with other pre-deployment validation issues. The performance was a bit off for a while but seems they've been working on it as of late.

Suggest a related project