awesome-container-security

awesome listpushed almost 2 years ago

Awesome list of resources related to container security

AI summary

Container Security Resources

A curated collection of resources and tools related to securing containers in software development

stars: 226
forks: 35
watching: 16
awesome list: 1
entries: 33

What's in the list

33 links in 18 sections, with live GitHub stats.activeno commit in 2y

Port Authority Open Source Security Scanner for Docker

Getting started guide
Source
151over 3 years

Dramatically Reducing Software Vulnerabilities

NIST security content automation protocol
Extensible Configuration Checklist Description Format (XCCDF)
Goes along with the SCAP link above for specifying a security template that containers should conform to

CoreOS Clair

Clair: The Container Image Security Analyzer (by Joey Schorr & Quentin Machu)
Presentation about the Clair platform
A more polished presentation of Clair at CoreOS Fest 2016

Actuary

drydock
Inspired by docker-bench-security with the ability to apply custom security profiles
65over 10 years
Docker bench security
One of the first security linting utility for Docker
2111 years

Buildah

Introduction

Anchore

anchore-cli
1142 years

Commercial solutions

Black Duck Software
Tenable
Includes
GrSecurity
A collection of image hardening tools
Aqua
Full lifecycle container security management platform

Build Management / Commercial solutions

Project Atomic
RedHat's complete container solution with strong built-in security
Docker Cloud
Continuous scanning of images along with a trust mechanism

Networking/Runtime / Cilium

Cilium - Container Security and Networking Using BPF and XDP - Thomas Graf, Covalent
Presentation of Cilium by its creator

Networking/Runtime / Calico

Flannel
Security enforcement for SDN
8.9Kalmost 2 years

Networking/Runtime / Romana

Project
248over 7 years

Networking/Runtime / Commercial solutions

StakRox
Container security solution with adaptive threat protection
NeuVector
Continuous network security
TwistLock
Network activity profiling

Security profiles / Container security as explained by the three pigs

Bringing new security features to Docker
The Container Coloring Book
74over 10 years

Security profiles / Falco

Exploits / waitid

Detailed write-up

Exploits / Dirty COW

Proof of concept
12almost 10 years
Proof of concept collection
3.4K7 years
Dirty COW and why lying is bad even if you are the Linux kernel

Presentations/Posts/Articles / Capability based sandboxing

Awesome Object Capabilities
A language-level implementation of the capability based sandboxing methodology
348over 2 years
Linux port of Capsicum
related to this
206over 6 years

Presentations/Posts/Articles / Container Performance Analysis

Evolution of Container Usage at Netflix
Also provides insight into container monitoring, logging, and security at Netflix

Featured in 1 awesome list

Each link jumps to the spot where the list mentions awesome-container-security.

0ex/more-awesome

More related projects