Category
127 posts · Page 2 of 11
Engineering
Author, test, and deploy Kyverno policies faster with the Policy-as-Code Agent. AI-powered Kubernetes policy generation and governance automation from Nirmata.
2 min read
Business
Nirmata is building an AI platform engineering assistant with Kyverno, extending policy-as-code into Kubernetes, IaC, and multi-cloud environments.
4 min read
Engineering
Kyverno writes policies in Kubernetes YAML and can mutate and generate resources. Gatekeeper uses Rego and also works beyond Kubernetes. Compare them here.
7 min read
Engineering
AWS CDK: Bringing Flexibility to Cloud Infrastructure The AWS Cloud Development Kit (CDK) is an open-source framework that enables developers to define cloud…
5 min read
Engineering
As with any IaC, scanning OpenTofu files is crucial for ensuring security, reliability, and compliance of cloud infrastructure deployments. Kyverno by Nirmata can help.
3 min read
Engineering
Shift-Down Security is complementary to Shift Left Security and is an innovative solution involving seamlessly embedding security measures into Dev workflows and…
3 min read
Engineering
Applying the DRY software priniciple to Kyverno's Policy-as-Code for Kubernetes and cloud native environments!
3 min read
Engineering
CVE-2023-2878 makes secrets-store-csi-driver before v1.3.3 log service account tokens at log level 2+. Upgrade, or use Kyverno to keep it at -v=0 or 1.
5 min read
Engineering
Introduction In our previous blog post, we delved into the importance of addressing CVEs within application libraries and outlined strategies for remediation. Continuing…
5 min read
Engineering
Get CVE-free container images: scan with Trivy, trace each library with Gradle dependencyInsight, then upgrade, force or replace it, and fail CI on new CVEs.
9 min read
Engineering
CVE-2024-3094 is a CVSS 10.0 backdoor in XZ Utils 5.6.0 and 5.6.1. Downgrade to 5.4.6 or move to 5.6.2, then block affected images with a Kyverno policy.
6 min read
Engineering
Leaky Vessels (CVE-2024-21626) lets a container reach the host filesystem through runc 1.1.11 and earlier. Patch to runc 1.1.12 and audit nodes with Kyverno.
7 min read
