3 ms·

cool! happy to hear that. if you have any ideas or comments about Kubescape, we would love to hear them

• gravypod 5y ago
  If you could check for container signing and providence on all materials and make sure that only a single registry is being used (ex only `internal.company.com:443`) and make sure it's not possible to schedule pods with unsigned/untrusted containers that would be awesome.
  • eris_agx 5y ago
    For materials you can use syft https://github.com/anchore/syft https://github.com/anchore/syft
  • jkaftzan 5y ago
    interesting, I'll send that to our dev team. BTW - you can suggest these things on Kubescape page @ Github and see status etc.
    • deleted 5y ago
      [deleted]
  • leeoniya 5y ago
    s/providence/provenance
  • dwertent 5y ago
    Yes, we are working on integration with anchore :)