For the last month or two, I've seen roughly ten times more vulnerability-scanning activity in my logs than usual. The increase started almost simultaneously across several different domains,…
Over the past month or two, I've noticed roughly ten times more vulnerability-scanning activity in my server logs than usual. The increase started fairly suddenly and is happening…
I'm looking for a practical way to monitor container images after they're deployed, rather than relying only on scans during build time. Is Trivy Operator still the simplest…
I'm looking for a practical way to continuously monitor container images that are already running for known vulnerabilities. Is Trivy Operator still the simplest option for quickly scanning…
At work, our IT team uses Tenable to identify vulnerabilities and an MDM platform to require application updates. We also run scheduled scripts through the MDM to keep…
For cluster infrastructure such as External Secrets Operator, Argo CD, and similar tools, what is a practical way to scan, harden, and manage the Helm charts and container…
We scan container images in CI and block releases when critical vulnerabilities are found. An image passed the scan and was deployed, but about three weeks later the…
We scan container images in CI and block releases when critical vulnerabilities are found. An image passed the scan and was deployed, but about three weeks later the…
Tools like Trivy, Syft, and Grype are useful, but a single successful scan only tells you what was known at that moment. If a new CVE is published…
We're an expanding engineering organization currently using Trivy for scanning container images for vulnerabilities in our workloads, like Python, ArgoCD, and Istio. However, we're experiencing significant alert fatigue…
Hey everyone! I'm working on a small cloud security tool as a side project and I'm looking for your input. The plan is to create a lightweight dashboard…
I'm on the hunt for a good vulnerability scanner that won't break the bank. Recently, I checked out HostedScan, but they lack an enterprise feed for OpenVAS, which…
I work as the sole systems administrator for a small company with about 25 employees. We operate primarily on Windows, managing around 30 servers in a vSphere 8.x…
I'm currently managing Kubernetes clusters that are FedRAMP authorized, and I'm trying to establish a compliant image hardening workflow. I'm focusing on how to meet specific controls including…
I've been exploring our container supply chain and it's quite alarming. We pull base images from Docker Hub and npm packages from uncertain sources, plus our build process…
I'm looking for advice on the best access model for a vulnerability management specialist who works from home full-time. They need to conduct asset discovery and run vulnerability…
I'm working with a Turborepo monorepo in GitHub Actions, and I've set up a full CI pipeline that includes various steps like secret scanning, installing dependencies, linting, running…
Hi everyone! I work for a cloud provider where we offer a managed Kubernetes service. I'm tasked with finding a solution to monitor vulnerabilities within the running containers…
I've set up a CI pipeline, and during the scanning phase, I use Trivy. If it finds any critical vulnerabilities, it halts the pipeline as a pre-deployment check.…