Securing CI/CD pipelines through security gates with Kubescape
Guest post originally published on the ARMO blog by Ben Hirschberg DevOps and modern engineering have enabled us to provide higher quality code at greater speeds by introducing guardrails and checks into our automated continuous integration…
CNCF On-Demand Webinar: Securing CI/CD pipelines through Security Gates
Alex Jones, Tech TAG lead at CNCF, and Ben Hirschberg, VP R&D at ARMO
Learn about Kubernetes security best practices for your cloud native application development
Guest post by Deepfactor Given the scalability and flexibility of containers, developers are being encouraged to develop net-new applications—and refactor existing workloads—for Kubernetes. However, the focus on rapid development and deployment presents many security challenges for…
Cloud Native Live: Creating a “paved road” for security in Kubernetes operators
Kubernetes Operators have been an important part of the Kubernetes ecosystem for a number of years. Although they have been extremely useful in many use cases, people carefully need to consider the critical security aspects .This…
CNCF On demand webinar: gVisor+Falco-Strengthen K8s & container security without losing visibility
gVisor is an application kernel that provides an additional layer of isolation between running applications and the host operating system. This extra layer greatly improves the security of workloads, but can impede container visibility. Discover how…
CNCF Live Webinar: Secure software factory – Adding SBOM and code signing to your security checks
The Cloud Native Computing Foundation’s Software Supply Chain Best Practices and reference architecture highlights the necessary steps and required functionality to increase the security level of open-source software development and to minimize risks and vulnerabilities in…
CNCF On-Demand Webinar: Flux increased security & scalability with OCI
Flux is trusted for its high levels of security, and new OCI support brings even greater GitOps security and scalability. Max will cover the benefits like more streamlined repo structure options and better ways to manage…
The 2-minute test for Kubernetes Pod security
Project post originally published on DZone by Jim Bugwadia Learn how to audit your clusters for compliance with the latest Kubernetes Pod Security Standards without installing anything in the cluster. In this post, I will show…
Backstage security audit & updates
Project post originally posted on the Backstage blog by Patrik Oldsberg, Spotify TL;DR: Backstage’s security posture continues to mature! Today, we’re releasing a report from an independent security audit and the first version of the Backstage…
TechTarget: “Kubernetes security reaches maturity milestone with v1.25”
Kubernetes Pod Security Policies were officially removed from version 1.25 this week in favor of the now-stable, slimmed-down Pod Security Admission. Security isn’t the only area where core Kubernetes is delegating advanced features to external community…