cis-gke-v180-4.4.1
Prefer using secrets as files over secrets as environment variables (Automated)
1.21k repo starsObserved in 1 repos
DevOps & Security
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
Prefer using secrets as files over secrets as environment variables (Automated)
Consider external secret storage (Manual)
Configure Image Provenance using ImagePolicyWebhook admission controller (Manual)
Create administrative boundaries between resources using namespaces (Manual)
Apply Security Context to Pods and Containers (Manual)
The default namespace should not be used (Automated)
Minimize user access to Container Image repositories (Manual)
Minimize cluster access to read-only for Container Image repositories (Manual)
Ensure only trusted container images are used (Manual)
Ensure that Alpha clusters are not used for production workloads (Automated)