On: Kubescape – tool for testing if Kubernetes is deployed securely

[gravypod]

If you could check for container signing and providence on all materials and make sure that only a single registry is being used (ex only `internal.company.com:443`) and make sure it's not possible to schedule pods with unsigned/untrusted containers that would be awesome.

[eris_agx → gravypod]

For materials you can use syft https://github.com/anchore/syft

[jkaftzan → gravypod]

interesting, I'll send that to our dev team. BTW - you can suggest these things on Kubescape page @ Github and see status etc.

[dwertent → gravypod]

Yes, we are working on integration with anchore :)

[leeoniya → gravypod]

s/providence/provenance