Skip to content

Commit

Permalink
Merge branch 'main' into dependabot/github_actions/docker/build-push-…
Browse files Browse the repository at this point in the history
…action-5
  • Loading branch information
chen-keinan authored Oct 20, 2023
2 parents 0e29309 + 18f8456 commit 6736b16
Show file tree
Hide file tree
Showing 2 changed files with 7 additions and 2 deletions.
7 changes: 6 additions & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,12 @@ Tests are configured with YAML files, making this tool easy to update as test sp

![Kubernetes Bench for Security](/docs/images/output.png "Kubernetes Bench for Security")

### Quick start
## CIS Scanning as part of Trivy and the Trivy Operator

[Trivy](https://github.com/aquasecurity/trivy), the all in one cloud native security scanner, can be deployed as a [Kubernetes Operator](https://github.com/aquasecurity/trivy-operator) inside a cluster.
Both, the [Trivy CLI](https://github.com/aquasecurity/trivy), and the [Trivy Operator](https://github.com/aquasecurity/trivy-operator) support CIS Kubernetes Benchmark scanning among several other features.

## Quick start

There are multiple ways to run kube-bench.
You can run kube-bench inside a pod, but it will need access to the host's PID namespace in order to check the running processes, as well as access to some directories on the host where config files and other files are stored.
Expand Down
2 changes: 1 addition & 1 deletion job.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -11,7 +11,7 @@ spec:
spec:
containers:
- command: ["kube-bench"]
image: docker.io/aquasec/kube-bench:v0.6.17
image: docker.io/aquasec/kube-bench:v0.6.18
name: kube-bench
volumeMounts:
- mountPath: /var/lib/etcd
Expand Down

0 comments on commit 6736b16

Please sign in to comment.