loicsikidi

guac

GUAC aggregates software security metadata into a high fidelity graph database.

allero

By scanning CI/CD misconfigurations, Allero helps reduce production issues, harden your security posture and shift-left CI/CD from DevOps to developers.

GCPGoat

GCPGoat : A Damn Vulnerable GCP Infrastructure

pike

Pike is a tool for determining the permissions or policy required for IAC code

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

secret_handshake

A prototype malware C2 channel using x509 certificates over mTLS

Reloader

A Kubernetes controller to watch changes in ConfigMap and Secrets and do rolling upgrades on Pods with their associated Deployment, StatefulSet, DaemonSet and DeploymentConfig – [✩Star] if you're using it!

openfga

A high performance and flexible authorization/permission engine built for developers and inspired by Google Zanzibar

secure-cicd-maven

workflows-demos

A collection of Workflows samples for various use cases

awesome-container-tinkering

List of awesome tools to tinker with containers.

sbom-operator

Catalogue all images of a Kubernetes cluster to multiple targets with Syft

image-layer-provenance

Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.

fireprox

AWS API Gateway management tool for creating on the fly HTTP pass-through proxies for unique IP rotation

SCMKit

Source Code Management Attack Toolkit

arkade

Open Source Marketplace For Developer Tools

community-operators

The canonical source for Kubernetes Operators that appear on OperatorHub.io, OpenShift Container Platform and OKD.

glide

Automate permissions to your cloud and critical applications.

cloud-analytics

Cloud Analytics helps defenders detect attacks to their cloud infrastructure by developing behavioral analytics for cloud platforms as well as a blueprint for how others can create and use cloud analytics effectively.

gtoken

Securely access AWS services from GKE cluster

mkcert

A simple zero-config tool to make locally trusted development certificates with any names you'd like.

terralist

Terraform Private Registry for modules and providers manageable from a REST API

clair

Vulnerability Static Analysis for Containers

dagda

a tool to perform static analysis of known vulnerabilities, trojans, viruses, malware & other malicious threats in docker images/containers and to monitor the docker daemon and running docker containers for detecting anomalous activities

falco

Cloud Native Runtime Security

repo-info

Extended information (especially license and layer details) about the published Official Images

spiffe-connector

Using SPIFFE Verifiable Identity Documents to seamlessly authenticate to existing services.

policy

CLI for building OPA policies into OCI images

vulhub

Pre-Built Vulnerable Environments Based on Docker-Compose

scorecard

OpenSSF Scorecard - Security health metrics for Open Source