On 🌩️Thunder, Kubescape maintainer Ben Hirschberg shows how the tool catches misconfigurations, then watches runtime behavior with eBPF & turns that into a least-privileged NetworkPolicy proposal.

Read the full board notes here: gist.github.com/wiggitywh…

A completed lightboard covered in handwritten colored notes about Kubescape. Sections include Before Kubescape, Threats in Kubernetes, Kubescape Can Do a Lot (infrastructure scanning, workload config scanning, RBAC configuration, vulnerability scanning with GRYPE, hardening and remediation proposals), a Glossary of security terms, and the Kubescape User Experience covering CLI, Operator, and GitHub Action.