501.nccgroup / PMapper
A tool for quickly evaluating IAM permissions in AWS.
- aws
- iam
- python
- botocore
- cloudsecurity
Ranked by Attention Score: stars gained over the last 180 complete days
501–600 of 1,256 by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
A tool for quickly evaluating IAM permissions in AWS.
Build and distribute Linux packages from sources in an automatic, consistent and reproducible way #obs
Build Rust projects in Nix - no configuration, no code generation, no IFD, sandbox friendly.
🚀 Useful README.md, LICENSE, CONTRIBUTING.md, CODE_OF_CONDUCT.md, SECURITY.md, GitHub Issues, Pull Requests and Actions templates to jumpstart your projects.
Nitric is a multi-language framework for cloud applications with infrastructure from code.
Pode is a Cross-Platform PowerShell web framework for creating REST APIs, Web Sites, and TCP/SMTP servers
Run docker-compose with help from Nix/NixOS
A linux distribution based on Nix [maintainer=@MagicRB]
💽 Doku - Docker disk usage dashboard
Official repository of the AWS SDK for PHP (@awsforphp)
Open-Source ClickHouse http proxy and load balancer
Create multiple TOR instances with a load-balancing.
A utility for arming (creating) many bees (micro EC2 instances) to attack (load test) targets (web applications).
Immersive terminal interface for managing docker containers and services
Open-source eCommerce platform for C# and ASP.NET Core 10 with MongoDB. Build multi-store shops and multi-vendor marketplaces with B2B/B2C, REST API, plugins, Vue 3 and Docker.
An eBPF Manager for Linux and Kubernetes
An open source self-service workflow execution platform
Install Tiledesk on your server using Helm for Kubernetes orchestration and Docker Compose for running multi-container Docker applications. Tiledesk provides an open-source solution comparable to Voiceflow, empowering you to create sophisticated LLM-enabled chatbots that seamlessly transition interactions to human agents when needed.
🦖 Serverless AI Agent Framework with Geo-distributed Edge AI Infra.
Open source security data lake for threat hunting, detection & response, and cybersecurity analytics at petabyte scale on AWS
DebOps - Your Debian-based data center in a box
SirixDB is an an embeddable, bitemporal, append-only database system and event store, storing immutable lightweight snapshots. It keeps the full history of each resource. Every commit stores a space-efficient snapshot through structural sharing. It is log-structured and never overwrites data. SirixDB uses a novel page-level versioning approach.
Open-source, self-hosted enterprise & site search server built on OpenSearch. Crawls web / file / DB / cloud sources, 20+ languages, REST API, and AI/RAG & semantic search. Apache-2.0.
A scalable, mature and versatile web crawler based on Apache Storm
Backend and Frontend application for tracking differences via image comparison
Keep code, data, containers under control with git and git-annex
Paaster is a secure and user-friendly pastebin application that prioritizes privacy and simplicity. With end-to-end encryption and paste history, Paaster ensures that your pasted code remains confidential and accessible.
Container registry which transparently builds images using the Nix package manager. Canonical repository is https://cs.tvl.fyi/depot/-/tree/tools/nixery
The low-level, core functionality of boto3 and the AWS CLI.
µTask is an automation engine that models and executes business processes declared in yaml. ✏️📋
S3 Reverse Proxy with GET, PUT and DELETE methods and authentication (OpenID Connect and Basic Auth)
The CLI for working with JSON Schema. Covers formatting, linting, testing, bundling, and more for both local development and CI/CD pipelines
Simplified distributed locking implementation using Redis
EventMesh is a new generation serverless event middleware for building distributed event-driven applications.
A framework to build Slack apps using Python
Declarative Intent Driven Platform Orchestrator for Internal Developer Platform (IDP).
🎁 A glib-like multi-platform c library
ops - build and run nanos unikernels
Self-host Supabase with Nginx/Caddy and Authelia with just ONE bash script.
eBPF Security Monitoring and Sandboxing Agent Based on Aya
✨ A complete and self-contained solution for developers of any qualification to create a production-ready project with backend (Go), frontend (JavaScript, TypeScript) and deploy automation (Ansible, Docker) by running only one CLI command.
OpenDota: Open source Dota 2 data platform with automated replay parsing
Fastest end-to-end CSV ingestion for Ruby (with C acceleration). SmarterCSV auto-detects formats, applies smart defaults, and returns Rails-ready hashes for seamless use with ActiveRecord, Sidekiq, parallel jobs, and S3 pipelines — even for messy user-uploaded real-world data.
A text-based user interface (TUI) for Ansible.
Terraform Private Registry for modules and providers manageable from a REST API
Canonical GTFS Validator project for schedule (static) files.
OhMyDebn is a debonair Linux desktop for power users. It gives you the stability of a Debian-based distro, the ease of use of the Cinnamon desktop, and the power of AI, containers, and virtualization.
⚠️(OBSOLETE) Curated applications for Kubernetes
Amazon Elastic Container Service Agent
Modern IRC Client for the web, desktop and mobile.
A development tool for all your projects that is fast, easy, powerful and liberating
Makes Linux applications self-contained by copying in the libraries and plugins that the application uses, and optionally generates an AppImage. Can be used for Qt and other applications
An easy to use, selfhostable image sharing service like Imgur with built in converting
Collaborative list of awesome helm charts and resources. PRs are welcome!
Gixy-Next: NGINX Configuration Security Scanner & Performance Checker
A collection of postmortem templates
GitHub actions for Terraform and OpenTofu
Zentral is a control plane for secure, observable Apple endpoints in enterprises. Configure, observe, and enforce the desired state of every Apple endpoint. Manage that desired state as code through GitOps and Terraform.
eBPF based always-on CPU/GPU profiler auto-discovering targets in Kubernetes and systemd, zero code changes or restarts needed!
Public Chainguard Images
pandas on AWS - Easy integration with Athena, Glue, Redshift, Timestream, Neptune, OpenSearch, QuickSight, Chime, CloudWatchLogs, DynamoDB, EMR, SecretManager, PostgreSQL, MySQL, SQLServer and S3 (Parquet, CSV, JSON and EXCEL).
IAM Least Privilege Policy Generator
Enterprise Kubernetes management, accelerated. 🚀
asyncio support for botocore library using aiohttp
ACH implements a reader, writer, and validator for Automated Clearing House (ACH) files. The HTTP server is available in a Docker image and the Go package is available.
A nice Docker homepage
validate the structure of your container images
Translated.NET Core lightweight configuration server
Translatedwalle - 瓦力 (Wali, "Walle") Devops open-source project code deployment platform
Utils for streaming large files (S3, HDFS, gzip, bz2...)
Executing shell commands via HTTP server
iWF is a Workflow-As-Code microservice orchestration platform offering an orchestration coding framework and service for building resilient, fault-tolerant, scalable long-running processes
TranslatedUniversal, flexible, high-performance distributed ID generator.
.NET polycloud storage framework which provides a unified polycloud API across 15+ clouds for Object manipulation, File uploads/downloads, File streaming/seeking, Directory upload/download, Object metadata, Versioning, Tags, Storage tier/class, Presigned URLs and more.
Nuts Java Package Manager
A Cloud Native traffic orchestration system. (CNCF Project)
Build AI (or any) apps with scalable microservices & microfrontends.
A collection of git utilities, useful extra git scripts, tutorials and other useful articles.
Clendar - Minimal Calendar app. Written in SwiftUI.
Framework for simplifying flake setup [maintainer=@accelbread]
40K, small memory footprint, single binary that run list of commands in parallel and waits for their termination
Realistic synthetic events for testing, demos, and pipelines — streamed live or generated in bulk
The official AWS SDK for Ruby
Simplified nix packaging for various programming language ecosystems [maintainer=@DavHau]
kwatch runs inside your Kubernetes cluster, traces every failure to its root cause, and sends one message: what broke, why, who changed it and what to do next.
HTTP load testing for CI/CD — honest latency, CI thresholds, single binary, JSON output
A Go toolkit for building AI agents and applications across multiple providers. Unified LLM client, agent framework with handoffs, tool calling, streaming, structured output, MCP integration, and cost tracking.
Manage local application configuration files using templates and data from etcd or consul
Apache Linkis builds a computation middleware layer to facilitate connection, governance and orchestration between the upper applications and the underlying data engines.
Kubernetes-native IoT gateway
Percona Operator for PostgreSQL
Plan and apply Terraform/OpenTofu via PR automation, using best practices for secure and scalable IaC workflows.