fkautz

zt.dev

gitbom-go

casserole

Distributed cache for large HTTP objects

serve

A very simple static HTTP server

protonvd

JSON-annotated protobuf definitions for NVD feeds

omnitrail-go

terrapin-go

Go library and CLI tool for creating and verifying data attestations using SHA-256 hashes.

gitbom-cli

gitbom cli built from a reference implementation

archivista

Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

books

Book lists

boopkit

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.

certsar

For those "Special TLS Encryption Operations"

gitbom-rs

"An experimental implementation of gitbom in Rust"

gitoid-py

go-witness

Go implementation of witness

nixos-config-1

My NixOS configurations.

nixpkgs

Nix Packages collection

openssm

OpenSSM: Safe, Reliable, and Trustable Small Specialist Models (SSMs) for Industrial AI Applications.

rekor

Software Supply Chain Transparency Log

sig-security

🔐CNCF Special Interest Group on Security -- secure access, policy control, privacy, auditing, explainability and more!

spiffe

The SPIFFE Project

ssc

swarm

distributed workers

tcp_estats-ebpf

an ebpf thingie for getting at tcpinfo or web100-like network stats

terrapin-rs

tmp

toc

⚖️Technical Oversight Committee (TOC)

url-encode

witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.

xpid

Linux process forensics. Find eBPF probes. Discover hidden processes. See your kernel process tree at runtime.