Curating Falco rules with MITRE ATT&CK Matrix

Applied STRIDE to threat model a microservice env.–defining the security architecture and attack surfaces; hardened the app’s Docker environment using Docker-bench, created an RKE cluster, and hardened a Kubernetes cluster using Grype and Trivy. Also implemented runtime monitoring using Grafana to visualize runtime security alerts via Sysdig Falco.

Microservices Security project of the Udacity's Cloud Native Application Architecture Nanodegree

Scan commit between two tags and leverage power of LLM and Package Hunter to early detect any supply chain threats. This program supports two modes: scan commit and early detection.