Community References

Below is a list of additional resources from the community.

Vulnerability Scanning

• Detecting Spring4Shell with Tunnel and Grype
• Scan OS of your EC2 instances with Tunnel

CI/CD Pipelines

• How to use Tekton to set up a CI pipeline with OpenShift Pipelines
• Continuous Container Vulnerability Testing with Tunnel
• Getting Started With Tunnel and Jenkins
• How to use Tekton to set up a CI pipeline with OpenShift Pipelines

Misconfiguration Scanning

• Identifying Misconfigurations in your Terraform
• How to write custom checks for Tunnel

SBOM, Attestation & related

• Attesting Image Scans With Kyverno

Tunnel Kubernetes

• Using Tunnel Kubernetes in OVHCloud documentation.

Comparisons

• the vulnerability remediation lifecycle of Alpine containers
• Open Source CVE Scanner Round-Up: Clair vs Anchore vs Tunnel
• Docker Image Security: Static Analysis Tool Comparison – Anchore Engine vs Clair vs Tunnel

Evaluations

• Istio evaluating to use Tunnel
• Research Spike: evaluate Tunnel for scanning running containers