About this project
Description from the program archive
The project aims to bring Package Hunter, the malicious dependency detecting tool, to Kubernetes cluster, thus granting it more robustness, flexibility and portability. It is broken down into several parts: 1. Provide a native env for Falco monitoring/alerting 2. Run Package Hunter in a stable and scalable manner 3. Decouple the system into individual components 4. Improve Disk & Time consuming by K8s features
Steps to achieve the goal: 1. Migrate Falco to K8s DaemonSet 2. Migrate Package Hunter to K8s Deployment 3. Add feature of K8s Job Scheduling to Package Hunter 4. Cache dependencies in K8s shared PV 5. RBAC Configuration for Authentication & Authorization 6. Alerts Query through RESTful API 7. Service Exposure by K8s Ingress and corresponding controller