<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/"><channel><title>CIS-Benchmark on SRE Engineering Practice</title><link>https://www.sre.wang/en/tags/cis-benchmark/</link><description>Recent content in CIS-Benchmark on SRE Engineering Practice</description><generator>Hugo -- gohugo.io</generator><language>en</language><lastBuildDate>Wed, 22 Jul 2026 00:20:00 +0800</lastBuildDate><atom:link href="https://www.sre.wang/en/tags/cis-benchmark/index.xml" rel="self" type="application/rss+xml"/><item><title>K8s Security Scanning and CIS Benchmark Compliance: A Complete Hardening Guide from kube-bench to Production</title><link>https://www.sre.wang/en/posts/k8s-cis-benchmark-security-scan/</link><pubDate>Wed, 22 Jul 2026 00:20:00 +0800</pubDate><guid>https://www.sre.wang/en/posts/k8s-cis-benchmark-security-scan/</guid><description>Run CIS Kubernetes Benchmark compliance checks with kube-bench, combined with Trivy image vulnerability scanning and kube-hunter penetration simulation — the complete hardening path from discovery to remediation</description></item></channel></rss>