All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,791
- 1,325
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 23,953–23,976 of 31,791 skills
- Cis Gke V170 4.3.1Ensure that the CNI in use supports Network Policies (Manual)Votes: 0GitHub stars: 3,518
- Cis Gke V170 4.2.1Ensure that the cluster enforces Pod Security Standard Baseline profile or stricter for all namespaces (Manual)Votes: 0GitHub stars: 3,518
- Cis Gke V170 4.1.9Avoid non-default bindings to system:unauthenticated (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 4.1.8Avoid bindings to system:anonymous (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 4.1.7Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)Votes: 0GitHub stars: 3,518
- Cis Gke V170 4.1.6Avoid use of system:masters group (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 4.1.5Ensure that Service Account Tokens are only mounted where necessary (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 4.1.4Ensure that default service accounts are not actively used (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 4.1.3Minimize wildcard use in Roles and ClusterRoles (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 4.1.2Minimize access to secrets (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 4.1.10Avoid non-default bindings to system:authenticated (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 4.1.1Ensure that the cluster-admin role is only used where required (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 3.2.9Ensure that the RotateKubeletServerCertificate argument is set to true (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 3.2.8Ensure that the --rotate-certificates argument is not present or is set to true (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 3.2.7Ensure that the --eventRecordQPS argument is set to 0 or a level which ensures appropriate event capture (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 3.2.6Ensure that the --make-iptables-util-chains argument is set to true (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 3.2.5Ensure that the --streaming-connection-idle-timeout argument is not set to 0 (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 3.2.4Ensure that the --read-only-port is disabled (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 3.2.3Ensure that a Client CA File is Configured (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 3.2.2Ensure that the --authorization-mode argument is not set to AlwaysAllow (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 3.2.1Ensure that the Anonymous Auth is Not Enabled Draft (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 3.1.4Ensure that the kubelet configuration file ownership is set to root:root (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 3.1.3Ensure that the kubelet configuration file has permissions set to 644 (Automated)Votes: 0GitHub stars: 3,518
- Cis Gke V170 3.1.2Ensure that the proxy kubeconfig file ownership is set to root:root (Automated)Votes: 0GitHub stars: 3,518