1aquasecurity / trivy
Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more
+184 stars
from 38,714 · score 5.22
Trending repositories
Ranked by Attention Score: stars gained over the last 7 complete days
1–100 of 112 by Attention Score · Oct 27, 2026 – Nov 2, 2026 (UTC)
2kubernetes / kubernetes
Production-Grade Container Scheduling and Management
+130 stars
from 128,687 · score 4.88
3seaweedfs / seaweedfs
SeaweedFS is a distributed storage system for object storage (S3), file systems, Iceberg table buckets, and Lance vector buckets, designed to handle billions of files with O(1) disk access and effortless horizontal scaling.
+130 stars
from 35,728 · score 4.88
4netdata / netdata
The fastest path to AI-powered full stack observability, even for lean teams.
+118 stars
from 81,126 · score 4.78
5crowdsecurity / crowdsec
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
+107 stars
from 15,309 · score 4.68
6pranshuparmar / witr
Why is this running? Trace any process, port, container, or file back to what started it - CLI + TUI.
+106 stars
from 22,789 · score 4.67
7abiosoft / colima
Container runtimes on macOS (and Linux) with minimal setup
+93 stars
from 31,388 · score 4.54
8VictoriaMetrics / VictoriaMetrics
VictoriaMetrics: fast, cost-effective monitoring solution and time series database
+88 stars
from 17,904 · score 4.49
9google / gvisor
Application Kernel for Containers
+69 stars
from 19,777 · score 4.25
10authelia / authelia
The Single Sign-On Multi-Factor portal for web apps. OpenID Certified™ and Post-Quantum Cryptography Ready.
+65 stars
from 29,409 · score 4.19
11traefik / traefik
The Cloud Native Application Proxy
+60 stars
from 65,369 · score 4.11
+58 stars
from 34,253 · score 4.08
13woodpecker-ci / woodpecker
Woodpecker is a simple, yet powerful CI/CD engine with great extensibility.
+43 stars
from 8,048 · score 3.78
14goharbor / harbor
An open source trusted cloud native registry project that stores, signs, and scans content.
+42 stars
from 29,612 · score 3.76
15podman-container-tools / podman
Podman: A tool for managing OCI containers and pods.
+40 stars
from 33,119 · score 3.71
16cilium / cilium
eBPF-based Networking, Security, and Observability
+40 stars
from 25,711 · score 3.71
17cloudnative-pg / cloudnative-pg
The most popular Kubernetes Operator for PostgreSQL.
+39 stars
from 9,483 · score 3.69
18theagentrouter / agent-router
Manages Unified Access to Generative AI Services built on Envoy Gateway
+38 stars
from 2,290 · score 3.66
19argoproj / argo-cd
Declarative Continuous Deployment for Kubernetes
+37 stars
from 24,472 · score 3.64
20siderolabs / talos
Talos Linux is a modern Linux distribution built for Kubernetes.
+37 stars
from 11,409 · score 3.64
21gravitational / teleport
The easiest, and most secure way to access and protect all of your infrastructure.
+34 stars
from 21,023 · score 3.56
22project-zot / zot
zot - A scale-out production-ready vendor-neutral OCI-native container image/artifact registry (purely based on OCI Distribution Specification)
+32 stars
from 2,906 · score 3.50
23derailed / k9s
🐶 Kubernetes CLI To Manage Your Clusters In Style!
+30 stars
from 34,875 · score 3.43
24crazy-max / diun
Receive notifications when an image is updated on a Docker registry
+26 stars
from 4,996 · score 3.30
25argoproj / argo-workflows
Workflow Engine for Kubernetes
+25 stars
from 17,052 · score 3.26
26crossplane / crossplane
The Cloud Native Control Plane
+24 stars
from 12,192 · score 3.22
27pulumi / pulumi
Pulumi - Infrastructure as Code in any programming language 🚀
+23 stars
from 25,815 · score 3.18
28GoogleCloudPlatform / microservices-demo
Sample cloud-first application with 10 microservices showcasing Kubernetes, Istio, and gRPC.
+22 stars
from 21,090 · score 3.14
29envoyproxy / gateway
Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway
+22 stars
from 3,101 · score 3.14
30kedacore / keda
KEDA is a Kubernetes-based Event Driven Autoscaling component. It provides event driven scale for any container running in Kubernetes
+20 stars
from 10,665 · score 3.04
31stakater / Reloader
A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!
+20 stars
from 10,518 · score 3.04
32rancher / rancher
Complete container management platform
+19 stars
from 26,006 · score 3.00
33dapr / dapr
Dapr is a portable runtime for building distributed applications across cloud and edge, combining event-driven architecture with workflow orchestration.
+18 stars
from 26,154 · score 2.94
34cert-manager / cert-manager
Automatically provision and manage TLS certificates in Kubernetes
+18 stars
from 14,128 · score 2.94
35helm / helm
The Kubernetes Package Manager
+16 stars
from 30,370 · score 2.83
36kubescape / kubescape
Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.
+16 stars
from 11,822 · score 2.83
37gravitl / netmaker
Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.
+15 stars
from 11,838 · score 2.77
+15 stars
from 6,547 · score 2.77
39loft-sh / devpod
Codespaces but open-source, client-only and unopinionated: Works with any IDE and lets you use any cloud, kubernetes or just localhost docker.
+14 stars
from 15,291 · score 2.71
40kubeshark / kubeshark
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
+14 stars
from 12,108 · score 2.71
41dexidp / dex
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
+14 stars
from 11,212 · score 2.71
42authzed / spicedb
Open Source, Google Zanzibar-inspired database for scalably storing and querying fine-grained authorization data
+14 stars
from 7,170 · score 2.71
43yeasy / docker_practice
最新Docker容器技术，从真实案例中学习最佳实践！| Learn and understand Docker&Container technologies, with real DevOps practice!
+13 stars
from 26,328 · score 2.64
44etcd-io / etcd
Distributed reliable key-value store for the most critical data of a distributed system
+12 stars
from 52,426 · score 2.56
45ahmetb / kubectx
Faster way to switch between clusters and namespaces in kubectl
+11 stars
from 20,059 · score 2.48
46labring / sealos
Deploy real projects from GitHub or your AI coding agent, then keep them running with AI-powered operations.
+11 stars
from 18,378 · score 2.48
47kubernetes-sigs / kind
Kubernetes IN Docker - local clusters for testing Kubernetes
+11 stars
from 15,576 · score 2.48
48loft-sh / vcluster
vCluster creates tenant clusters: fully isolated environments delivered as managed Kubernetes, or as the foundation for Slurm, Ray, Run:ai and inference clusters. Each gets its own API server, CRDs and RBAC, and runs on an existing cluster or standalone on bare metal. CNCF Certified Kubernetes.
+11 stars
from 11,359 · score 2.48
49bitnami / sealed-secrets
A Kubernetes controller and tool for one-way encrypted Secrets
+10 stars
from 9,317 · score 2.40
50aquasecurity / tracee
Linux Runtime Security and Forensics using eBPF
+10 stars
from 4,653 · score 2.40
51apecloud / kubeblocks
KubeBlocks is a Kubernetes Operator designed to manage a variety of databases and streaming systems, including MySQL, PostgreSQL, MongoDB, Redis, RabbitMQ, RocketMQ, and more, within Kubernetes environments.
+10 stars
from 3,151 · score 2.40
52istio / istio
Connect, secure, control, and observe services.
+9 stars
from 38,472 · score 2.30
53containerd / containerd
An open and reliable container runtime
+9 stars
from 21,443 · score 2.30
54kubesphere / kubesphere
The container platform tailored for Kubernetes multi-cloud, datacenter, and edge management ⎈ 🖥 ☁️
+9 stars
from 17,066 · score 2.30
55agones-dev / agones
Dedicated Game Server Hosting and Scaling for Multiplayer Games on Kubernetes
+9 stars
from 7,086 · score 2.30
56kubernetes / minikube
Run Kubernetes locally
+8 stars
from 32,210 · score 2.20
57vitessio / vitess
Vitess is a database clustering system for horizontal scaling of MySQL.
+8 stars
from 21,390 · score 2.20
58velero-io / velero
Backup and migrate Kubernetes applications and their persistent volumes
+8 stars
from 10,356 · score 2.20
59cloudquery / cloudquery
Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.
+8 stars
from 6,542 · score 2.20
60stefanprodan / podinfo
Go microservice template for Kubernetes
+8 stars
from 6,026 · score 2.20
61litmuschaos / litmus
Litmus helps SREs and developers practice chaos engineering in a Cloud-native way. Chaos experiments are published at the ChaosHub (https://hub.litmuschaos.io). Community notes is at https://hackmd.io/a4Zu_sH4TZGeih-xCimi3Q
+8 stars
from 5,730 · score 2.20
62zalando / postgres-operator
Postgres operator creates and manages PostgreSQL clusters running in Kubernetes
+8 stars
from 5,262 · score 2.20
63hashicorp / consul
Consul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.
+7 stars
from 30,091 · score 2.08
64minekube / gate
Build efficient Bedrock & Java Minecraft networks with multi-version support. Powers global Connect network at production scale. Runs with 10MB.
+7 stars
from 1,081 · score 2.08
65deepflowio / deepflow
eBPF Observability - Distributed Tracing and Profiling
+6 stars
from 4,306 · score 1.95
66openrundev / openrun
Deployment platform for teams to deploy internal tools. Deploy web apps declaratively, on a single-node or on Kubernetes, with OIDC/SAML auth and RBAC.
+6 stars
from 986 · score 1.95
67rook / rook
Storage Orchestration for Kubernetes
+5 stars
from 13,694 · score 1.79
68quay / clair
Vulnerability Static Analysis for Containers
+4 stars
from 11,082 · score 1.61
69ko-build / ko
Build and deploy Go applications
+4 stars
from 8,577 · score 1.61
70kubevela / kubevela
The Modern Application Platform.
+4 stars
from 7,915 · score 1.61
71tsuru / tsuru
Open source and extensible Platform as a Service (PaaS).
+4 stars
from 5,322 · score 1.61
72iximiuz / cdebug
cdebug - a swiss army knife of container debugging
+4 stars
from 1,685 · score 1.61
73kitops-ml / kitops
An open source DevOps tool from the CNCF for packaging and versioning AI/ML models, datasets, code, and configuration into an OCI Artifact.
+4 stars
from 1,434 · score 1.61
74pipe-cd / pipecd
The One CD for All {applications, platforms, operations}
+4 stars
from 1,366 · score 1.61
75k8gb-io / k8gb
A cloud native Kubernetes Global Balancer
+4 stars
from 1,336 · score 1.61
76abahmed / kwatch
kwatch runs inside your Kubernetes cluster, traces every failure to its root cause, and sends one message: what broke, why, who changed it and what to do next.
+4 stars
from 1,021 · score 1.61
77defilantech / LLMKube
Kubernetes operator for self-hosted LLM inference across a heterogeneous GPU fleet: NVIDIA CUDA, AMD Vulkan, and Apple Silicon Metal. Runtimes: llama.cpp, vLLM, TGI, mlx-server. Multi-GPU sharding, model caching, OpenAI-compatible endpoints. Apache-2.0, run across homelab and on-prem fleets, actively developed.
+4 stars
from 245 · score 1.61
78linkerd / linkerd2
Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.
+3 stars
from 11,520 · score 1.39
79TykTechnologies / tyk
Open Source API and AI Gateway supporting REST, GraphQL, TCP, gRPC and MCP (Model Context Protocol)
+3 stars
from 10,870 · score 1.39
80flannel-io / flannel
flannel is a network fabric for containers, designed for Kubernetes
+3 stars
from 9,561 · score 1.39
81fission / fission
Fast and Simple Serverless Functions for Kubernetes
+3 stars
from 8,936 · score 1.39
82cri-o / cri-o
Open Container Initiative-based implementation of Kubernetes Container Runtime Interface
+3 stars
from 5,682 · score 1.39
83werf / werf
A solution for implementing efficient and consistent software delivery to Kubernetes facilitating best practices.
+3 stars
from 4,736 · score 1.39
84alexellis / arkade
Open Source Marketplace For Developer Tools
+3 stars
from 4,623 · score 1.39
85alexei-led / pumba
Chaos testing, network emulation, and stress testing tool for containers
+3 stars
from 3,179 · score 1.39
86trickstercache / trickster
Open Source HTTP Reverse Proxy Cache and TSDB Query Accelerator
+3 stars
from 2,092 · score 1.39
87kool-dev / kool
From local development to the cloud: web apps development with containers made easy.
+3 stars
from 726 · score 1.39
88gogf / gf
A powerful framework for faster, easier, and more efficient project development.
+2 stars
from 13,289 · score 1.10
89prometheus-operator / prometheus-operator
Prometheus Operator creates/configures/manages Prometheus clusters atop Kubernetes
+2 stars
from 9,991 · score 1.10
90turbot / steampipe
Zero-ETL, infinite possibilities. Live query APIs, code & more with SQL. No DB required.
+2 stars
from 7,990 · score 1.10
91easegress-io / easegress
A Cloud Native traffic orchestration system. (CNCF Project)
+2 stars
from 5,870 · score 1.10
92CrunchyData / postgres-operator
Production PostgreSQL for Kubernetes, from high availability Postgres clusters to full-scale database-as-a-service.
+2 stars
from 4,454 · score 1.10
93tazjin / nixery
Container registry which transparently builds images using the Nix package manager. Canonical repository is https://cs.tvl.fyi/depot/-/tree/tools/nixery
+2 stars
from 2,022 · score 1.10
94flux-iac / tofu-controller
A GitOps OpenTofu and Terraform controller for Flux
+2 stars
from 1,718 · score 1.10
95KusionStack / kusion
Declarative Intent Driven Platform Orchestrator for Internal Developer Platform (IDP).
+2 stars
from 1,323 · score 1.10
96apache / camel-k
Apache Camel K is a lightweight integration platform, born on Kubernetes, with serverless superpowers
+2 stars
from 933 · score 1.10
97ankorstore / yokai
Simple, modular, and observable Go framework for backend applications.
+2 stars
from 840 · score 1.10
98bpfman / bpfman
An eBPF Manager for Linux and Kubernetes
+2 stars
from 769 · score 1.10
99pgrwl / pgrwl
Cloud-native continuous backup for PostgreSQL - WAL/base-backup streaming, compression, encryption, retention, and monitoring in a single binary.
+2 stars
from 182 · score 1.10
100kubernetes / kops
Kubernetes Operations (kOps) - Production Grade k8s Installation, Upgrades and Management
+1 stars
from 16,696 · score 0.69