You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: docs/index.md
+20-12
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,9 @@
1
-
# Secure CINC Auditor Kubernetes Container Scanning
1
+
# Kube Secure Scanner
2
2
3
-
A comprehensive platform for securely scanning Kubernetes containers, including distroless containers, using CINC Auditor with least-privilege security controls.
3
+
A flexible, security-focused framework for scanning containers in Kubernetes environments with multiple scanning engines. Initially built with CINC Auditor (open source InSpec), the platform provides secure RBAC configurations, multiple scanning approaches, and comprehensive CI/CD integration.
4
+
5
+
!!! info "Release Preview v0.90"
6
+
This is an ongoing joint community research effort and is currently at **Release Preview (v0.90)**. Some examples, automation, pipelines, and scripts are still in the process of being fully tested and validated. We'll be releasing updates in v0.9.x versions as we work toward a stable v1.0.0 release.
4
7
5
8
*[CINC]: CINC Is Not Chef
6
9
*[SAF]: Security Automation Framework
@@ -60,15 +63,16 @@ A comprehensive platform for securely scanning Kubernetes containers, including
60
63
61
64
## Scanning Approaches
62
65
63
-
This project offers three distinct approaches for container scanning:
66
+
This project offers three distinct approaches for container scanning, designed to accommodate various container types and Kubernetes environments:
64
67
65
68
=== "Kubernetes API Approach (Recommended)"
66
69
67
-
Direct API-based scanning using the train-k8s-container plugin. Most scalable solution with seamless integration.
70
+
Direct API-based scanning approach. Most scalable solution with seamless integration.
68
71
69
72
- Works with standard containers now
70
73
- Universal solution once distroless support is complete
0 commit comments