Unterschiede

Hier werden die Unterschiede zwischen zwei Versionen angezeigt.

--- it-wiki:kubernetes:security [2024/04/10 09:39] – angelegt marko
+++ it-wiki:kubernetes:security [2024/04/10 09:44] (aktuell) – marko
@@ Zeile 18: / Zeile 18: @@
   * Software licenses
+===== kube-bench =====
+[[https://github.com/aquasecurity/kube-bench|kube-bench]] is a tool that checks whether Kubernetes is deployed securely by running the checks documented in the CIS Kubernetes Benchmark.
+==== CIS Scanning as part of Trivy and the Trivy Operator ====
+[[security#trivy|Trivy]], the all in one cloud native security scanner, can be deployed as a Kubernetes Operator inside a cluster. Both, the Trivy CLI, and the Trivy Operator support CIS Kubernetes Benchmark scanning among several other features.