I recently implemented a software updating system using [The Update Framework](https://theupdateframework.io/) directly, with [go-tuf](https://github.com/theupdateframework/go-tuf). It required a lot of design work around how we were going to do package management on top of using it for a secure updating system. This was due to TUF's designing around the... - Source: Hacker News / 4 months ago

The Update Framework (TUF): TUF is a framework, not a tool, designed to enhance the security of software update systems. It focuses on resilience against key compromises and attacks, employing verifiable records to verify the authenticity of update files. TUF's flexibility and integration ease make it a foundational element in securing software updates, though it's not a direct image signing tool like the others. - Source: dev.to / over 1 year ago

Here’s to hoping they employ some security to prevent the machines from being hacked and attacking our own infra ala TUF (https://theupdateframework.io/) or the tech from Foundries.io. - Source: Hacker News / over 1 year ago

Release signing—or attestation—was a hot topic at KubeCon among vendors, with many offering their own solutions. One in particular that stood out was CNCF’s recently graduated The Update Framework (TUF). - Source: dev.to / about 2 years ago

One of the other solution for signature and handling their upgrade is https://theupdateframework.io/ . Haven't come around implementing it yet, but it sounds like a robust solution to this problem. Have you looked at it before? Source: over 2 years ago

1. Kubescape: https://github.com/kubescape/kubescape Kubescape is the first tool for testing if Kubernetes clusters are deployed securely as defined in Kubernetes Hardening Guidance by NSA and CISA. - Source: dev.to / about 1 year ago

Kustomize: It provides a solution to customize the Kubernetes resource base configuration and differential configuration without template and DSL. It does not solve the constraint problem itself, but needs to cooperate with a large number of additional tools to check constraints, such as Kube-linter, Checkov and kubescape. - Source: dev.to / over 1 year ago

Kubescape is the first Kubernetes security scanner that was accepted to the cloud native computing foundation. Kubescape 3.0 is a major release that extended the functionality of the original misconfiguration scanner to include vulnerabilities and usabillty improvements. If you are interested in an overview, feel free to check out the blog post. To dive straight into the code check out the repo. I'd love it... - Source: dev.to / over 1 year ago

Hi! Take a look over our project: https://github.com/kubescape/kubescape New contributors al always welcome! P.S. Tomorrow we are going to have the community meeting: https://github.com/kubescape/kubescape#community. Feel free to join and say hi :). Source: almost 2 years ago

New contributors are always welcome :) Https://github.com/kubescape/kubescape. Source: about 2 years ago