About andypitcher/ponytail-sec
ponytail's security sibling. Instead of flooding you with findings, it hunts the one dropped capability, the one readOnlyRootFilesystem: true, the one narrowed RBAC verb that kills a link in the attack chain. Butterfly effect for defense: tiny diffs, outsized reduction in attacker leverage.