Hands-On Microservices with Kubernetes

Scan for vulnerabilities

Vulnerabilities in your code or dependencies allow attackers to get access to your system. The national vulnerability database (https://nvd.nist.gov/) is a good place to learn about new vulnerabilities and processes for managing them, such as the Security Content Automation Protocol (SCAP).

Open-source solutions such as Claire (https://github.com/coreos/clair) and Anchore (https://anchore.com/kubernetes/) are available, as well as commercial solutions. Many image registries provide scanning services too.