search

aws / aws-eks-best-practices

A best practices guide for day 2 operations, including operational excellence, security, reliability, performance efficiency, and cost optimization.
https://aws.github.io/aws-eks-best-practices/
Other
1.99k stars 483 forks source link

Add kubescape as a security scanning tool #264

Open ratnopamc opened 1 year ago

ratnopamc commented 1 year ago

Is your idea request related to a problem that you've solved? Please describe. A clear and concise description of the problem.

Describe the best practice As part of the Security Best Practices Guide chapter, add kubescape as a security scanning OSS tool for EKS clusters.

Additional context Kubescape is one of the fastest-growing Kubernetes security tools. It is an open-source Kubernetes security platform and can scan Kubernetes clusters, container images, YAML files, and Helm charts for security vulnerabilities. Kubescape can detect misconfiguration according to multiple frameworks, like NSA-CISA, MITRE ATT&CK®.

ratnopamc commented 1 year ago

I can create a PR for this. Please assign to me if that's ok. Thanks!

jicowan commented 1 year ago

Thanks @ratnopamc. We will consider it. We need to be very particular about which solutions we add to the guide. We don't want to vendor/partners crying fowl because their solution isn't listed. I hope you can appreciate our predicament.

ratnopamc commented 1 year ago

Thanks @jicowan. I totally understand what you mean. Thank you for your consideration.