Repository Index

Cloud Native Runtime Security

• cncf
• containers
• security
• falco

Linux Runtime Security and Forensics using eBPF

• ebpf
• linux
• bpf
• security

An open-source, next-generation "runc" that empowers rootless containers to run workloads such as Systemd, Docker, Kubernetes, just like VMs.

• containers
• container-runtimes
• container-runtime-security
• docker

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in real-time.

• github-actions
• actions
• supply-chain-security
• hardening

eBPF Security Monitoring and Sandboxing Agent Based on Aya

• aya
• bpf
• ebpf
• security

Community curated list of System and Network policy templates for the KubeArmor and Cilium

• runtime-security
• kubearmor
• cilium
• system-policy

Zero-overhead eBPF process tracer for Linux malware triage and incident response. Traces syscalls, network, and file events per-process without strace overhead.

• bpf
• ebpf
• forensics
• golang