Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
- docker
- containers
- security
- seccomp
Repository Index
47,133 repositories indexed
1–18 of 18 · Most stars
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.
- service-mesh
- rust
- golang
- kubernetes
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
Open device management
- osquery
- gitops
- device-management
- vulnerability-management
Custom & better AppArmor profile generator for Docker containers.
- docker
- apparmor-profile
- apparmor
- containers
Program to reverse Docker images into Dockerfiles
- security-tools
- security
- docker-security
- reverse-engineering
Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️
- aws
- aws-billing
- aws-cli
- aws-cost-explorer
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
Open-source Docker infrastructure platform. One web UI — containers, security, DNS, VPN, monitoring, backups, reverse proxy, terminal, and multi-node orchestration. Replace a dozen tools with one.
- agplv3
- docker
- docker-container
- docker-deployment
CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.
Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
- aho-corasick
- cybersecurity
- devops
- git-hook
A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.
Open-source eBPF compatibility evidence and CI gate
Static analysis from configs → Kubernetes NetworkPolicies in seconds
Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.
- ai
- ai-skills
- apache-2
- claude-code
A framework to manage development and testing environments
- ci
- continuous-integration
- development
- environment-provisioning