Security and compliance

• Kyverno — baseline Pod Security Standard policies in audit mode, generating PolicyReports.
• Kyverno Policies — community best-practice baseline policies.
• Trivy Operator — continuous vulnerability and misconfiguration scanning.
• Falco — runtime threat detection via eBPF; Falcosidekick forwards events as PolicyReports.
• Policy Reporter — unified dashboard with Prometheus metrics and Grafana dashboards.

shoulders reporter