🧰 Kyverno

The items that name it 9

• Financially Motivated Threat Actor BREEZE COMET Targets Brazil
  article2026-09-01

  Dynamic admission controller to block privileged containers

• From Container Escape to Cloud Takeover
  writeup2026-07-26It is written here as Kyverno (admission-time policy enforcement).

  admission-time policy enforcement

• GoogleCloudPlatform/k8s-aibom
  repo2026-07-18

  admission policy tool that can verify the Sigstore bundle format (type: SigstoreBundle) on images

• Policy-Driven Security and Governance in Kubernetes AI Platforms | HackerNoon
  article2026-06-28

  Policy-as-code engine using YAML syntax to enforce Kubernetes policies (e.g., requiring namespace classification labels, approved registries, resource limits).

• Orca: 8 Container Security Best Practices for 2026
  article2026-06-11It is written here as Kyverno (Kubernetes admission policy enforcement using Kubernetes-native policy resources).

  Kubernetes admission policy enforcement using Kubernetes-native policy resources

• AWS Well-Architected: Software Supply Chain Security
  article2026-06-04

  Admission controller for Amazon EKS that verifies image signatures before deployment

• IDP Zero-Dollar
  repo2026-05-13

  Kubernetes policy engine enforcing pod security baseline (no :latest, no privileged containers, non-root, resource limits) and image signature verification

• CVE-2025-62878 — Critical Path Traversal in Rancher Local Path Provisioner (CVSS 10.0)
  advisory2026-02-10

  Admission policy engine recommended to reject StorageClasses with pathPattern values containing ../ traversal sequences

• cks/tasks/cks/course/README.md at master · ViktorUJ/cks
  courseIt is written here as Kyverno (course practical tool, policy engine).

  course practical tool, policy engine