Thread by @itaysk

This month's (June 22) updates from @AquaSecTeam Open Source Team - features, content, news and more 🧵

@AquaSecTeam One of the biggest news this past month was that Trivy now scans #kubernetes ⎈ clusters - through the CLI or a native Kubernetes Operator!

https://twitter.com/itaysk/status/1527298213740306432?s=20&t=iMZSADo4LrARNBuEM5GXzg

@AquaSecTeam Check out the introduction video to Trivy #Kubernetes scanning by @urlichsanais

https://twitter.com/urlichsanais/status/1539911642351226880?s=20&t=56aeQE1qkFqySRlNcDkq9A

@AquaSecTeam @urlichsanais Still on the topic of #Kubernetes, Helm Chart 🗺 scanning has landed! Trivy can now find security misconfigurations in Helm charts

https://twitter.com/owenrum/status/1539576582473400323?s=20&t=56aeQE1qkFqySRlNcDkq9A

@AquaSecTeam @urlichsanais Trivy is the sBOMB 💣 just a friendly reminder that you can generate Software Bill of Materials in CycloneDX and SPDX formats. And now with the recently announced GitHub API, Trivy #SBOM can populate the Dependency Graph right within GitHub

https://twitter.com/itaysk/status/1543494156131221504?s=20&t=LXxUxnTrloYYbwpYv1vJ8Q

@AquaSecTeam @urlichsanais Trivy is back to basics with a new killer feature for vulnerability scanning - Trivy now traces back packages and shows the origin tree of vulnerable dependencies 🕵️. Helps you understand how the vulnerability was introduced to your code and how to address the offending package

@AquaSecTeam @urlichsanais If you are interested in following Trivy releases more closely, make sure to subscribe to announcements in GitHub: github.com/aquasecurity/t…

@AquaSecTeam @urlichsanais Imminent Tracee release will include container runtime & Kubernetes enriched metadata, helpful to trace back detections to pods/containers
As well as new events (like Network activity) which will become useful in future developments.
Stay tuned for details in next monthly update

@AquaSecTeam @urlichsanais P.S. Tracee is only 32⭐️ shy of crossing 2K GitHub stars 🤩 can you help us get there?
github.com/aquasecurity/t…

@AquaSecTeam @urlichsanais If you're using our libbpfgo library to create #eBPF applications with #golang, check our the latest release which is based on upstream libbpf 0.8 and implements a bunch of community requested APIs
github.com/aquasecurity/l…

@AquaSecTeam @urlichsanais And while I have your attention, eBPF developers, here's a useful article by our @grant about #eBPF concurrency patterns

https://twitter.com/GrantSeltzer/status/1537474270913253376?s=20&t=rbOGiN3zT0i_COvNrKC5lA

@AquaSecTeam @urlichsanais @grant New videos 🎥 on our YouTube channel:
- Getting started with Security Scanning
- Automating alert Management with Postee
- Using Lens or K9s with Trivy Operator
- What's next for Starboard/Trivy Q&A
- Trivy Docker Desktop
Make sure to subscribe: youtube.com/c/AquaSecurity…

@AquaSecTeam @urlichsanais @grant And lest we forget conference talks! 📢 We've started a YouTube playlist to make it easy to find our public speaking engagements: youtube.com/playlist?list=…

@AquaSecTeam @urlichsanais @grant Finally, a shout out to the amazing Aqua Open Source team: @rafaeldtinoco @josedonizetti @GrantSeltzer @simarpreet7 @urlichsanais @liam_galvin @owenrum @knqyf263 @ChenKeinan - you rock! 🤘

I meant @GrantSeltzer of course 😄