cis-gke-autopilot-v130-4.1.4
Ensure that default service accounts are not actively used (Automated)
1.21k repo starsObserved in 1 repos
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
cis-gke-autopilot-v130-4.1.5
Ensure that Service Account Tokens are only mounted where necessary (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-autopilot-v130-4.1.6
Avoid use of system:masters group (Automated)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-autopilot-v130-4.1.7
Limit use of the Bind, Impersonate and Escalate permissions in the Kubernetes cluster (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-autopilot-v130-4.1.9
Avoid non-default bindings to system:unauthenticated (Automated)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-autopilot-v130-4.2.1
Ensure that the cluster enforces Pod Security Standard Baseline profile or stricter for all namespaces (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-autopilot-v130-4.3.1
Ensure that all Namespaces have Network Policies defined (Automated)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-autopilot-v130-4.4.1
Consider external secret storage (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-autopilot-v130-4.5.1
Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)
1.21k repo starsObserved in 1 repos
DevOps & Security
cis-gke-autopilot-v130-4.6.2
Ensure that the seccomp profile is set to RuntimeDefault in the pod definitions (Automated)
1.21k repo starsObserved in 1 repos
DevOps & Security