All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,791
- 1,325
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 23,881–23,904 of 31,791 skills
- Cis Gke V180 5.10.2Ensure that Alpha clusters are not used for production workloads (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V180 5.10.1Ensure Kubernetes Web UI is Disabled (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V180 5.1.4Ensure only trusted container images are used (Manual)Votes: 0GitHub stars: 3,518
- Cis Gke V180 5.1.3Minimize cluster access to read-only for Container Image repositories (Manual)Votes: 0GitHub stars: 3,518
- Cis Gke V180 5.1.2Minimize user access to Container Image repositories (Manual)Votes: 0GitHub stars: 3,518
- Cis Gke V180 5.1.1Ensure Image Vulnerability Scanning is enabled (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.6.4The default namespace should not be used (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.6.3Apply Security Context to Pods and Containers (Manual)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.6.2Ensure that the seccomp profile is set to RuntimeDefault in the pod definitions (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.6.1Create administrative boundaries between resources using namespaces (Manual)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.5.1Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.4.2Consider external secret storage (Manual)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.4.1Prefer using secrets as files over secrets as environment variables (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.3.2Ensure that all Namespaces have Network Policies defined (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.3.1Ensure that the CNI in use supports Network Policies (Manual)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.2.1Ensure that the cluster enforces Pod Security Standard Baseline profile or stricter for all namespaces (Manual)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.1.9Avoid non-default bindings to system:unauthenticated (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.1.8Avoid bindings to system:anonymous (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.1.7Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.1.6Avoid use of system:masters group (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.1.5Ensure that Service Account Tokens are only mounted where necessary (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.1.4Ensure that default service accounts are not actively used (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.1.3Minimize wildcard use in Roles and ClusterRoles (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V180 4.1.2Minimize access to secrets (Automated)Votes: 0GitHub stars: 3,518