madhuakula/kubernetes-goat

The total number of misconfigurations and vulnerabilities in the Kubernetes-goat environment

Open

#65 opened on Aug 6, 2022

View on GitHub
 (4 comments) (1 reaction) (0 assignees)HTML (3,738 stars) (648 forks)batch import
documentationenhancementhelp wanted

Description

Hello,

I was interested to understand the total number of intended misconfigurations and vulnerabilities in Kubernetes-goat environment. It will be great to have this information in order to understand which tool is able to capture most number of misconfigurations/vulnerabilities.

Thanks in advance !

Contributor guide

Tech stack
dockerkubernetes
Domain
securityinfrastructuredevops
Issue type
research
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
3-5 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
stale
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
needs investigation
Prerequisites
Kubernetes fundamentalssecurity scanning tools
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
30
Research direction
This issue requests an inventory of all intended misconfigurations and vulnerabilities in the Kubernetes goat environment. The contributor should first review the project's README and documentation for a list of scenarios. Then, they could use security scanning tools like kube bench or trivy to enumerate issues, or manually inspect each scenario's configuration. The final output should be a comprehensive list or a count, possibly categorized by severity or type.
The total number of misconfigurations and vulnerabilities in the Kubernetes-goat environment · madhuakula/kubernetes-goat#65 | Good First Issue