go-pillage-registries

Network & Cloud Cloud Security

Pricing: Free

Visit Website ↗

go-pillage-registries

What is go-pillage-registries

Open source multi-cloud security-auditing tool for assessing security posture of cloud environments.

This project utilizes a Docker registry...

This project utilizes a Docker registry and extracts the manifest and configuration for each image in its catalog.

Utilizing Google's Crane Command Package

This tool utilizes Google's crane command package, which must adhere to Docker's keychain semantics. If you wish to override this behavior, simply modify authn.DefaultKeychain as detailed in the documentation found at https://github.com/google/go-containerregistry/tree/master/pkg/authn/k8schain. Installation: ```bash git clone https://github.com/nccgroup/go-pillage-registries.git cd go-pillage-registries go install ./... ``` Usage: ```bash $ pilreg Usage: pilreg <registry> [flags] Flags: -c, --cache string Path to cache image layers (optional, only used if images are pulled) -h, --help Help information for pilreg -i, --insecure Fetch data over plaintext -r, --repos strings List of repositories to scan on the registry. If left blank, pilreg will try to enumerate them using the catalog API. -o, --results string Path to the directory for storing results. If left blank, it outputs configs and manifests as a JSON object to Stdout. (This must be used if 'store-images' is enabled) -k, --skip-tls Disables TLS certificate verification -s, --store-images Downloads filesystem for discovered images and stores an archive in the output directory (disabled by default) ```

go-pillage-registries Reviews

No reviews yet.

Similar Tools

Free
Cloud Security

Wiz

Wiz delivers comprehensive cloud security posture management and risk visibility across multi-cloud environments, containers, and workloads without requiring agents. By leveraging cloud-native APIs from AWS, Azure, and GCP, Wiz provides a unified, 360-degree view of your entire cloud infrastructure, identifying vulnerabilities, misconfigurations, network exposures, and sensitive data. Gain immediate insights and make informed decisions with an up-to-date, holistic representation of your security landscape.

Agentless Cloud Native Security Platform360° Risk Visibility Across Multi-CloudAPI-Driven Security Posture Management
Free
Cloud Security

Prowler

Prowler is a leading open-source tool dedicated to improving the security posture of cloud environments. It empowers organizations with a transparent, customizable, and community-driven approach to cloud security, offering comprehensive checks and policies tailored to individual needs. By providing full visibility into its security logic, Prowler ensures informed decision-making and fosters a collaborative security ecosystem for enhanced protection.

Comprehensive cloud security compliance checksHighly customizable policies and configurationsTransparent security assessment logic
Free
Cloud Security

Plerion

Plerion is a comprehensive, all-in-one cloud security platform designed to unify and simplify security across AWS, Azure, and GCP environments. It provides robust Cloud Security Posture Management (CSPM), workload protection, data security, IAM security, and continuous compliance, offering unparalleled context and 360-degree transparency. Plerion empowers organizations to proactively reduce cyber risk, achieve immediate security posture improvements, and maximize ROI through a single, intuitive interface.

All-in-one Cloud Security PlatformMulti-cloud support (AWS, Azure, GCP)Cloud Security Posture Management (CSPM)
Free
Cloud Security

Orca Security

Orca Security provides continuous, agentless full-stack visibility across your entire cloud environment, identifying vulnerabilities, misconfigurations, and active threats. Its Cloud Security Platform delivers comprehensive insights in minutes, eliminating the need for complex deployments and reducing the time to detect and remediate risks across all your cloud accounts and assets.

Agentless Full-Stack VisibilityPrioritized Risk AlertsVulnerability Management
Free
Cloud Security

Cyscale

Cyscale is an agentless Cloud-Native Application Protection Platform (CNAPP) revolutionizing cloud security with automated, contextual analysis of misconfigurations, vulnerabilities, access, and data. Gain unparalleled visibility and actionable risk assessments to detect and respond to cloud threats with speed and precision. Our unified platform empowers organizations of all sizes to establish, enhance, and maintain robust cloud security programs aligned with industry best practices, simplifying the complex journey of cloud migration and development.

Agentless CNAPP for comprehensive cloud protectionAutomated contextual analysis of misconfigurations and vulnerabilitiesIntelligent detection and response to cloud threats
Free
Cloud Security

CloudDefense.AI

CloudDefense.AI is an advanced, multi-layered Cloud Native Application Protection Platform (CNAPP) designed to provide comprehensive security for your cloud infrastructure and native applications. We simplify complex toolchains, empowering security teams to efficiently identify and remediate vulnerabilities with unparalleled precision. Developed by engineers for engineers, CloudDefense.AI integrates seamlessly into developer workflows, offering an intuitive user experience and automated remediation capabilities to streamline security operations and enhance overall application resilience.

Multi-layered CNAPP protectionCloud infrastructure securityCloud-native application security

Do not let AI keep
recommending someone else

Start your 7-day free trial and get your AI Visibility Score in about a minute. See exactly where you stand, where competitors are beating you, and the ranked fixes to get into the answer. Cancel anytime before the trial ends.

7-day free trial. Cancel anytime before it ends. Trusted by 500+ B2B SaaS teams.

Partnered with
Powered by