ribbybibby

ssl_exporter

Exports Prometheus metrics for TLS certificates

s3_exporter

Exports Prometheus metrics about S3 buckets and objects

always

A registry mirror that serves the same image for every tag.

blog

My Blog

checkov

Prevent cloud misconfigurations during build-time for Terraform, Cloudformation, Kubernetes, Serverless framework and other infrastructure-as-code-languages with Checkov by Bridgecrew.

common

Go libraries shared across Prometheus components and libraries.

cosign

Container Signing

cosign-gatekeeper-provider

🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their signatures

dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

dotfiles

dtrack-client

Go client library for OWASP Dependency-Track

gh-upload-sbom

Publishes BOMs to Dependency-Track from GitHub Actions

guac

GUAC aggregates software security metadata into a high fidelity graph database.

helm-charts

OpenSourced Helm charts

kyverno

Kubernetes Native Policy Management

microservices-demo

Sample cloud-native application with 10 microservices showcasing Kubernetes, Istio, gRPC and OpenCensus.

prometheus

The Prometheus monitoring system and time series database.

ribbybibby.github.io

rummage

sbom-action

GitHub Action for creating software bill of materials using Syft.

sbom-scorecard

Generate a score for your sbom to understand if it will actually be useful.

slsa-provenance-action

Github Action implementation of SLSA Provenance Generation of level 1

syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

terraform-provider-artifactory

Terraform provider to manage Artifactory

terraform-provider-github

Terraform GitHub provider

testy

testy2

trust

trust is an operator for distributing trust bundles across a Kubernetes cluster.

version-checker

Kubernetes utility for exposing image versions in use, compared to latest available upstream, as metrics.

whalesay

A repository in support of the Docker's official whalesay image