Simple and flexible tool for managing secrets
Repository Index
47,133 repositories indexed
1–24 of 31 · Most stars
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
Lynis - Security auditing tool for Linux, macOS, and UNIX-based systems. Assists with compliance testing (HIPAA/ISO27001/PCI DSS) and system hardening. Agentless, and installation optional.
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
- kubernetes
- security
- nsa
- mitre-attack
A Kubernetes controller and tool for one-way encrypted Secrets
- kubernetes
- kubernetes-secrets
- devops-workflow
- encrypt-secrets
Prevent cloud misconfigurations and find vulnerabilities during build-time in infrastructure as code, container images and open source packages with Checkov by Bridgecrew.
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
- steampipe
- postgresql
- postgresql-fdw
- cloud
Open Source Cloud Native Application Protection Platform (CNAPP)
- cloud-native
- vulnerability-management
- threat-analysis
- devsecops
Bastillion gives you a clean, browser-based way to manage SSH access across all your systems—like a bastion host with a friendly dashboard.
- ssh
- bastion-host
- java
- javascript
Full-stack .Net 10 Clean Architecture (Microservices, Modular Monolith, Monolith), Blazor, Angular 22, React 19, Vue 3.5, BFF with YARP, NextJs 16, Domain-Driven Design, CQRS, SOLID, Asp.Net Core Identity Custom Storage, OpenID Connect, EF Core, OpenTelemetry, SignalR, Background Services, Health Checks, Rate Limiting, Clouds (Azure, AWS, GCP), ...
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Quickly clone or backup massive amounts of org/users repositories into one directory - Supports GitHub, GitLab, Bitbucket, and more 🐇🥚
:tophat: simple, fun and transparent SSH (and telnet) bastion server
ops - build and run nanos unikernels
- unikernels
- devops
- microservice
- serverless
A collection of postmortem templates
- site-reliability-engineering
- site-reliability
- devops
- postmortem
The One CD for All {applications, platforms, operations}
Linting tool for CloudFormation templates
- continuous-testing
- unit-testing
- cloudformation
- aws
Safety guardrails for ai coding agents and human terminal commands
Nginx common useful configuration
- nginx
- configs
- nginx-configuration
- codesandbox
Static Application Security Testing (SAST) engine focused on covering the OWASP Top 10, to make source code analysis to find vulnerabilities right in the source code, focused on a agile and easy to implement software inside your DevOps pipeline. Support the following technologies: Java (Maven and Android), Kotlin (Android), Swift (iOS), .NET Full Framework, C#, and Javascript (Node.js).
- sast
- security-tools
- security-scanner
- security-automation
Keyscope is a key and secret workflow (validation, invalidation, etc.) tool built in Rust
A secure, efficient TCP/UDP tunneling solution that delivers fast, reliable access across network restrictions using pre-established TCP/QUIC/WebSocket or HTTP/2 connections.
- api-rest
- connection-pooling
- cybersecurity
- devops
Cloud-native continuous backup for PostgreSQL - WAL/base-backup streaming, compression, encryption, retention, and monitoring in a single binary.
🔍 Function-level tracing tool for Seccomp profiling, with eBPF
- ebpf
- ebpf-programs
- golang
- seccomp