Add pipeline for kubernetes manifest vulnerability scanning

openmfp / gha

Apache License 2.0

0 stars 0 forks source link

Add pipeline for kubernetes manifest vulnerability scanning #19

Closed akafazov closed 1 week ago

akafazov commented 5 months ago

A pipeline which runs some popular kubernetes vulnerability scanners:

kube-linter
kube-score

Resources:

https://owasp.org/www-project-top-ten/

akafazov commented 1 week ago

the pipeline-chart.yml pipeline was extended to use kube-linter and kube-score for k8s manifest vulnerability scan. The results are published in the Security->Code scanning project tab.