Live data from Hacker News

Docker Sentinel – Preruntime container security tool

github.com

1–2 of 2 posts

Re: Docker Sentinel – Preruntime container security tool

#2
Docker Sentinel - allows you to configure YAML policies which is integrated with Docker Daemon, allowing admins to manager what docker commands can be executed. It can be as granular as a specific cgroup property and also supports integration with secret scanning like trufflehog, vulnerability scanners like Grype, trivy etc. It is really fast and cannot be bypass byt regular users.