stackrox/bsidessf-2020-workshop

Stars
36
Rank 735,472 (Top 15 %)
Language
Go
License
Apache License 2.0
Created almost 5 years ago
Updated over 2 years ago

stackrox/bsidessf-2020-workshop

stackrox

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Materials for a live workshop at BSidesSF on deployment-level Kubernetes security controls

kube-linter

KubeLinter is a static analysis tool that checks Kubernetes YAML files and Helm charts to ensure the applications represented in them adhere to best practices.

stackrox

The StackRox Kubernetes Security Platform performs a risk analysis of the container environment, delivers visibility and runtime alerts, and provides recommendations to proactively improve security by hardening the environment.

Kubernetes_Security_Specialist_Study_Guide

admission-controller-webhook-demo

Kubernetes admission controller webhook example

go-grpc-http1

A gRPC via HTTP/1 Enabling Library for Go

helm-charts

Helm charts for StackRox Kubernetes Security Platform

collector

Runtime data collection for the StackRox Kubernetes Security Platform using eBPF

contributions

Samples for customer implementations & integrations

scanner

network-policy-examples

YAML files accompanying the StackRox Network Policies guide.

kube-linter-action

GitHub action for automating KubeLinter.

blog-examples

Sample code and files from StackRox blog posts

Open Policy Agent

ansible-demo

Create sales demos on k8s/OpenShift with Ansible

k8s-i-use

Source for k8siuse, a site in the style of caniuse that visualizes GVKs and their fields over different versions of the Kubernetes API

acs-fleet-manager

helmtest

helmtest is a Go-based framework for testing helm charts in various configurations

stackrox-env

Stackrox development environment

berserker

Workload generator for ACS Collector

jenkins-plugin

The StackRox Jenkins Plugin for image scanning and security

dev-docs

kernel-packer

📦 Crawl and repackage kernel headers for collector

roxctl-installer-action

k8s-cves

Curated repo of Kubernetes CVEs

central-login

helm-operator

Helm operator fork of https://github.com/operator-framework/helm-operator-plugins

prometheus-metric-parser

Utility to parse prometheus metrics and compare them against other metrics

workflow

falcosecurity-libs

Internal Fork of https://github.com/falcosecurity/libs

rox-ci-image

istio-cves

dotnet-scraper

.NET scraper houses .NET vulnerabilities, a primitive scraper and a cron job to ensure that we have all the most updated vulns

image-prefetcher

A utility for pre-fetching images onto k8s nodes in parallel

k8s-istio-cve-pusher

This repo pulls CVEs from NVD, filters them and pushes to stackrox google cloud bucket.

junit-parse

Junit parsing CLI

infra

🌧️ Automated infrastructure and demo provisioning

actions

Various Reusable GitHub Actions

nvdtools

bleve

goland-indexes

Shared indexes for stackrox project

automation-standard

🤖 A micro-framework for building standardized cluster automation entrypoints

docker-registry-client

Public fork of github.com/heroku/docker-registry-client

release-registry

A mechanism to mark, identify and search release artifacts using Quality Milestones.