Security Testing
Aqua Security: Container and Cloud-Native Security Testing Guide
Container security is different from traditional application security.
Container Security
Latest
Trivy
Trivy Container Scanning: Scan Docker Images and Kubernetes Workloads in CI
Trivy (from Aqua Security) has rapidly become the most popular open-source container vulnerability scanner.
Security Testing
Sigstore and Cosign: Signing and Verifying Container Images
Container image signing closes a critical gap in software supply chain security: verifying that the image running in production is exactly the image your CI pipeline built — and nothing else. Sigstore and its Cosign tool make this practical, with keyless signing that eliminates the burden of managing long-lived private