Supply chain hardening with Cosign and Syft, ECR scanning, Pod Security Standards, Falco runtime detection, network policies, External Secrets Operator, and admission controllers.
Falco
-
Container Security in the Cloud: From Image to Runtime -
Runtime Security with Falco: Syscall-Level Threat Detection for Kubernetes A comprehensive guide to Falco—covering how it works at the kernel level with eBPF, writing custom detection rules, integrating with alerting pipelines, and building a complete runtime security posture for Kubernetes workloads.