CLI to interact with Kondukto

kntrl is an eBPF based runtime agent that monitors and prevents anomalous behaviour defined by you on your pipeline. kntrl achieves this by monitoring kernel calls, and denying access as soon as your defined behaviour is detected.

Kondukto Security Research Library

SBOM generating with Syft & CycloneDX Plugins, Scan with osv-scanner and import on Kondukto with KDT

XXE vulnerability searched by semgrep, remediation and exploitaiton.

Companion repository that shows continuous fuzzing to secure APIs

Helper scripts for Checkmarx post scan action to import results to Kondukto.

Some Semgrep rules for dockerfile best practices