
Security News
vlt Launches "reproduce": A New Tool Challenging the Limits of Package Provenance
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
github.com/datreeio/datree
Datree (pronounced /da-tree/
) secures your Kubernetes by blocking the deployment of misconfigured resources.
Install Datree to get insights on the status of your cluster and enforce your desired policies on new resources.
NOTE:
By default, Datree does not block misconfigured resources, it only monitors and alerts about them.
To enable enforcement mode, see the documentation.
Run the following command in your terminal:
helm repo add datree-webhook https://datreeio.github.io/admission-webhook-datree
helm repo update
Replace <DATREE_TOKEN>
with the token from your dashboard, and run the following command in your terminal:
helm install -n datree datree-webhook datree-webhook/datree-admission-webhook --debug \
--create-namespace \
--set datree.token=<DATREE_TOKEN> \
--set datree.clusterName=$(kubectl config current-context)
This will create a new namespace (datree), where Datree’s services and application resources will reside. datree.token
is used to connect your dashboard to your cluster. Note that the installation can take up to 5 minutes.
Looking for a different installation method?
Datree also supports installation via ArgoCD, Flux and Openshift. See our documentation for instructions.
Datree scans Kubernetes resources against a centrally managed policy, and blocks those that violate your desired policies.
Datree comes with over 100 rules covering various use-cases, such as workload security, high availability, ArgoCD best practices, NSA hardening guide, and many more.
In addition to our built-in rules, you can write any custom rule you wish and then run it against your Kubernetes configurations to check for rule violations. Custom rules can be written in JSON schema or in Rego.
Datree's dashboard provides valuable information about your clusters' health and stability. It details the resources that failed your policy checks, and shows you how to fix each violation.
Datree can be configured via code or via the dashboard. The dashboard offers the following capabilities in an intuitive visual interface:
Datree offers a suite of features to make adoption seamless:
Contributions are welcome!
Thank you to all the people who already contributed to Datree ❤️
FAQs
Unknown package
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Security News
vlt's new "reproduce" tool verifies npm packages against their source code, outperforming traditional provenance adoption in the JavaScript ecosystem.
Research
Security News
Socket researchers uncovered a malicious PyPI package exploiting Deezer’s API to enable coordinated music piracy through API abuse and C2 server control.
Research
The Socket Research Team discovered a malicious npm package, '@ton-wallet/create', stealing cryptocurrency wallet keys from developers and users in the TON ecosystem.