falcosecurity-retire/cloud-native-security-hub

Cloud Native Security Hub - Security Resources

cloud-native-security-hub's Issues

Add LICENSE

Make download metrics public

As we roll out download tracking metrics, make data available for full transparency

Organize an online workshop to create your own Falco rule and contribute to SecurityHub

What to document

I think that having some kind of online event, or perhaps a Twitch.tv stream creating a new falco rule and contribute to SecurityHub would be great to help new contributors to send some rules.

Automatic resource deployment

Motivation

Automate the security resource deployment.

Feature

When a new security resource is contributed and merged, it requires a manual step by one of the SecurityHub owners, we want to make this automatic once the PR is merged.

Alternatives

Additional context

Keep track of the amount of times a resource is downloaded

Motivation

Which ones are the most requested security resources?

Feature

Implement some download endpoints and keep a counter which will be incremented with each download.

Alternatives

Additional context

Move securityhub.dev infrastructure outside Sysdig hosting

• Includes securityhub.dev domain, K8s hosting and hosted database

Falcoctl installation support

Motivation

Ensure we make easy to try a Falco rule using different methods.

Feature

falcoctl is gaining some traction and we would like to push it. So additionally to helm, include instructions to deploy a new rule using falcoctl

Alternatives

Additional context

Configure CI

Motivation

Quick feedback on resource design.

Feature

Enable CI for every pull request checking the validity of the resource.

Alternatives

Additional context

We will use CircleCI like other falcosecurity projects.

Resource type category

Motivation

Filter security resources using its resource type.

Feature

We support 2 different kind of security resources:

• OPA policies
• Falco Rules

Would be nice if we can filter in the left side menu

Alternatives

Additional context

Discuss with the community how to run a governance model

Define an open model for project governance so there is a policy on what gets accepted into the hub and what requirements are put in place