Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
- docker
- containers
- security
- seccomp
Repository Index
47,133 repositories indexed
1–24 of 25 · Most stars
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.
- service-mesh
- rust
- golang
- kubernetes
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
Open device management
- osquery
- gitops
- device-management
- vulnerability-management
Custom & better AppArmor profile generator for Docker containers.
- docker
- apparmor-profile
- apparmor
- containers
Program to reverse Docker images into Dockerfiles
- security-tools
- security
- docker-security
- reverse-engineering
Give the agent a machine. Just not yours. Each AI coding agent gets its own isolated machine with root, Docker, and systemd - active defense detects and stops threats automatically.
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
Framework for running BPF programs with rules on Linux as a daemon. Container aware.
Powerful open-source CLI to audit security, costs, and best practices in AWS. 🩺 ☁️
- aws
- aws-billing
- aws-cli
- aws-cost-explorer
Substation is a toolkit for routing, normalizing, and enriching security event and audit logs.
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
- api-rest
- connection-pooling
- cybersecurity
- devops
A Highly Accessible and Automated Virtualization Platform for Security Education
- cybersecurity
- virtualization
- docker
- virtualbox
Goma Gateway – Lightweight, High-Performance API Gateway and Reverse Proxy with declarative config, robust middleware, and support for REST, GraphQL, TCP, UDP, and gRPC.
- api-gateway
- go-proxy
- microservices
- api-management
Zero-code K8s sidecar for log sanitization. Detects secrets via Entropy Analysis, preserves JSON integrity, and redacts PII deterministically. 🛡️
- devsecops
- entropy
- gdpr
- golang
preflight helps you verify scripts and executables to mitigate chain of supply attacks such as the recent Codecov hack.
Open-source Docker infrastructure platform. One web UI — containers, security, DNS, VPN, monitoring, backups, reverse proxy, terminal, and multi-node orchestration. Replace a dozen tools with one.
- agplv3
- docker
- docker-container
- docker-deployment
CetusGuard is a tool that protects the Docker daemon socket by filtering calls to its API endpoints.
Statically compiled, zero-dependency Git pre-commit secret scanner and credentials detector written in Go. An alternative to Gitleaks and git-secrets.
- aho-corasick
- cybersecurity
- devops
- git-hook
A developer CLI tool that manages .env files, detects secret leaks, syncs env drift across teammates, and validates environment parity between local/staging/prod all from your terminal. Written in Go.
Open-source eBPF compatibility evidence and CI gate
Static analysis from configs → Kubernetes NetworkPolicies in seconds
Pin AI Skill behavior. Block unapproved drift in CI. See exactly what changed in every PR.
- ai
- ai-skills
- apache-2
- claude-code