Security & Runtime
ReferencePublicUpdated 2026-04-08
Security & Runtime
| App | Version | Templates | Description |
|---|---|---|---|
| NeuVector | 5.x | R, E | Runtime behavioral security; detects anomalous process/network activity |
| Trivy Operator | 0.21.x | B, R | Continuous vulnerability scanning for running workloads |
| Falco | 0.38.x | R (optional) | Kernel-level runtime threat detection |
| Cosign | 2.x | B | Container image signing and verification (Sigstore) |
| Syft | 1.x | B | SBOM generation (CycloneDX format) — runs in every Pillars pipeline |
| Grype | 0.77.x | B | CVE scanning against SBOMs — gates pipeline on critical findings |
| Semgrep | 1.x | B | SAST — static analysis security testing in Pillars pipeline |
| OWASP ZAP | 2.15.x | B | DAST — dynamic application security testing |
| Dependency-Track | 4.x | B (optional) | Continuous SBOM tracking and CVE policy enforcement post-deploy |