Git Credential Helper for Github Apps

A transparent monitoring wrapper for programs, for use in nix builds

Runtime sandboxing for Nix

Bear is a tool that generates a compilation database for clang tooling.

A user-friendly method of sandboxing applications using bubblewrap with portals support.

Source code for the pre-print of Attestable Builds

Full-throttle, wire-speed hardware implementation of Wireguard VPN, using low-cost Artix7 FPGA with opensource toolchain. If you seek security and privacy, nothing is private in our codebase. Our d…

NitroTPM Attestation Samples

A middleware tool to assist step-ca with posture info during an ACME device-attest-01 challenge.

The Platform Attribute Certificate Creator can gather component details, create, sign, and validate the TCG-defined Platform Credential. #nsacyber

API Models for all public AWS Services

This project builds the kernel, nsm driver and bootstrap process for AWS Nitro Enclaves.

A vfkit-based linux builder for Nix-darwin

A Certificate Transparency log implementation and monitoring API designed for scalability, ease of operation, and reduced cost.

Pure Go NBD server and client library.

A tool for creating and running Linux containers using lightweight virtual machines on a Mac. It is written in Swift, and optimized for Apple silicon.

Containerization is a Swift package for running Linux containers on macOS.

This module creates an AWS SSM document that can be used to deploy NixOS configurations to EC2 instances.

Diagram-as-code for AWS architecture.

Monitor Go app's performance in seconds, not a day.

Compile-time Dependency Injection for Go

Brings native understanding of Nix packages to containerd

Cross-platform app development in Rust

A CNCF Project to Bootstrap & Maintain Trust on the Edge / Cloud and IoT

SPIRE Server Attestor TPM