Open-source security tools for cloud and container applications

It's odd they don't list OPA Gatekeeper, which is probably the best tool for enforcing security and other best practices in Kubernetes clusters.

List of CNCF open source security projects without the blog post: https://landscape.cncf.io/category=security-compliance&forma...

> List of CNCF open source security projects without the blog post: https://landscape.cncf.io/category=security-compliance&forma...

Thanks for this.

It's interesting that OPA doesn't show up in cardmode on CNCF either, but it's there on the landscape view.

OPA is shown under card view: https://landscape.cncf.io/format=card-mode&project=hosted&se...

Ironically that website has no TLS. But the tools in the article are a good collection. Too bad CoreOS got eaten by RH/IBM because that level of integration will probably not be replicated in Fedora. And that in turn might cause Clair to get less development or integration, which is bad for everyone.

I've had good success with Anchore in the past, and yeah, missing Gatekeeper is bizarre.