From f22b91fd0f433bd3c9375e12e0fafceb4ad4cb96 Mon Sep 17 00:00:00 2001 From: Michael Perel Date: Sat, 31 Oct 2020 16:42:38 -0400 Subject: [PATCH 1/2] A cli-plugin for docker to automatically manage image digests by tracking them in a separate Lockfile. --- README.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/README.md b/README.md index fb89d5b..38b6e6c 100644 --- a/README.md +++ b/README.md @@ -295,6 +295,7 @@ _Source:_ [What is Docker](https://www.docker.com/why-docker) - [Deepfence Threat Mapper](https://github.com/deepfence/ThreatMapper) - Powerful runtime vulnerability scanner for kubernetes, virtual machines and serverless. By [@deepfence](deepfence) - [docker-bench-security](https://github.com/docker/docker-bench-security) - script that checks for dozens of common best-practices around deploying Docker containers in production. By [@docker][docker] - [docker-explorer](https://github.com/google/docker-explorer) - A tool to help forensicate offline docker acquisitions by [@Google][google] +- [docker-lock](https://github.com/safe-waters/docker-lock) - A cli-plugin for docker to automatically manage image digests by tracking them in a separate Lockfile. By [@safe-waters][safe-waters] - [notary](https://github.com/theupdateframework/notary) - a server and a client for running and interacting with trusted collections. By [@TUF](https://github.com/theupdateframework) - [oscap-docker](https://github.com/OpenSCAP/openscap) - OpenSCAP provides oscap-docker tool which is used to scan Docker containers and images. By [OpenSCAP](https://github.com/OpenSCAP) - [Phonito Security](https://phonito.io/?b=b) :heavy_dollar_sign: - a Docker vulnerability scanner with constant Kubernetes monitoring and pipeline integration. @@ -822,6 +823,7 @@ Services to securely store your Docker images. [progrium]: https://github.com/progrium [ramitsurana]: https://github.com/ramitsurana [rancher]: https://github.com/rancher +[safe-waters]: https://github.com/safe-waters [sindresorhus]: https://github.com/sindresorhus/awesome [spotify]: https://github.com/spotify [tomastomecek]: https://github.com/TomasTomecek From 3a4f814cacd123114700dff0ac3f1e65259e544b Mon Sep 17 00:00:00 2001 From: Manuel Schmid Date: Sat, 31 Oct 2020 23:56:16 +0100 Subject: [PATCH 2/2] Fix link for trivy --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 38b6e6c..2a6d4b2 100644 --- a/README.md +++ b/README.md @@ -303,7 +303,7 @@ _Source:_ [What is Docker](https://www.docker.com/why-docker) - [Sysdig Falco](https://github.com/falcosecurity/falco) - Sysdig Falco is an open source container security monitor. It can monitor application, container, host, and network activity and alert on unauthorized activity. - [Sysdig Secure](https://sysdig.com/products/kubernetes-security/runtime-security/) :heavy_dollar_sign: - Sysdig Secure addresses run-time security through behavioral monitoring and defense, and provides deep forensics based on open source Sysdig for incident response. - [Trend Micro DeepSecurity](https://www.trendmicro.com/en_us/business/products/hybrid-cloud/deep-security.html) :heavy_dollar_sign: - Trend Micro DeepSecurity offers runtime protection for container workloads and hosts as well as preruntime scanning of images to identify vulnerabilities, malware and content such as hardcoded secrets. -- [Trivy] (https://github.com/aquasecurity/trivy) - Aqua Security's open source simple and comprehensive vulnerability scanner for containers (suitable for CI). +- [Trivy](https://github.com/aquasecurity/trivy) - Aqua Security's open source simple and comprehensive vulnerability scanner for containers (suitable for CI). ### Service Discovery