Generates daily SBOM and vulnerability reports for container images and saves resulting files into GCS bucket and data into BigQuery tables.

Collection of Container Vulnerability Scans of Common Images Using Different Scanners

pre-commit hooks to run grype

Allowlisting grype vulnerability scans

In this project, I threat-modeled, hardened and monitored a microservice application against malicious threat actors and payloads.

Scans all repositories within a specified directory using grype tool.

A CLI tool for scanning Docker images for vulnerabilities using Trivy and Grype.

A demonstration of how GoReleaser can help us to make software supply chain more secure by using bunch of tools such as cosign, syft, grype, slsa-provenance

This Repository consists of all projects that are completed as part of Cloud Native Application Architecture Nanodegree Program powered by Udacity and SUSE

A Rocket microservice for demonstrating vulnerability scanning and remediation with Grype

A tiny job-scraping project to automating job hunting when employers aren't on indeed, built for my wife

A simple CircleCI orb used to install Grype and perform vulnerability scans

Ansible role for 'grype'. Available on Ansible Galaxy.

Wrap Anchore Grype Inside Docker

Microservices Security project of the Udacity's Cloud Native Application Architecture Nanodegree

A python wrapper for Anchore Grype

WORK IN PROGRESS! This is a pet health diary, it is intended that you can log all medication, pet details, observations on health, etc into a database. You can then query that database, get email reminders about upcoming vets appointments and medication administration,and even generate summary reports for your vets to assess their health.

Applied STRIDE to threat model a microservice env.–defining the security architecture and attack surfaces; hardened the app’s Docker environment using Docker-bench, created an RKE cluster, and hardened a Kubernetes cluster using Grype and Trivy. Also implemented runtime monitoring using Grafana to visualize runtime security alerts via Sysdig Falco.

A set of resources around Anchore's grype tool