2 ms·
We are looking for something to run as part of our ami/docker testing and as you say, stays fresh on standards (whatever soc2/iso, but ideally also FIPS) , any
by lmeyerov 2y ago
We are looking for something to run as part of our ami/docker testing and as you say, stays fresh on standards (whatever soc2/iso, but ideally also FIPS) , any prefs?
- e1g 2y agoThis is great https://github.com/ComplianceAsCode/content https://github.com/ComplianceAsCode/content I use it for regular scanning, flagging potential issues, automatically making changes, aligning images to CIS Level 2, and for ongoing scanning to satisfy SOC2 auditors.
- deleted 2y ago[deleted]