We created a 2 parts guide on how to implement open source container security on Kubernetes:
Part1: Runtime security https://sysdig.com/blog/oss-container-security-runtime/
Using Falco, NATS, Kubeless
Part2: Image scanning https://sysdig.com/blog/container-security-docker-image-scanning/
Using Anchore Engine, Kubernetes Webhooks and Falco
Would love to know what do you think!