5 ms·

I love that since Kube is a standard API we can implement preflight checks like this that work for "any" kube cluster automatically.

• jkaftzan 5y ago
  cool! happy to hear that. if you have any ideas or comments about Kubescape, we would love to hear them
  • gravypod 5y ago
    If you could check for container signing and providence on all materials and make sure that only a single registry is being used (ex only `internal.company.com:443`) and make sure it's not possible to schedule pods with unsigned/untrusted containers that would be awesome.
    • eris_agx 5y ago
      For materials you can use syft https://github.com/anchore/syft https://github.com/anchore/syft
    • jkaftzan 5y ago
      interesting, I'll send that to our dev team. BTW - you can suggest these things on Kubescape page @ Github and see status etc.
      • deleted 5y ago
        [deleted]
    • leeoniya 5y ago
      s/providence/provenance
    • dwertent 5y ago
      Yes, we are working on integration with anchore :)