VEX document crawler and aggregator

BPF portability analyzer for compiled eBPF object files. Reports minimum kernel version requirements, data flow patterns, and CO-RE coverage.

A Kubernetes web UI that is fully-featured, user-friendly and extensible

Conveniently download files, models, tokenizers from HuggingFace Hub

Simple but powerful dependency injection container for Go projects!

Software Bill of Behaviour: A vendor-supplied profile of runtime behaviors for software, designed to be distributed directly within OCI artifacts.

A runtime enforcement solution for your Kubernetes cluster

A little sandbox for local coding agents

Static analysis for GitHub Actions

Run AI coding agents in hardened container sandboxes.

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

language server for systemd unit files - embedded documentation + complete LSP implementation in rust.

Reference implementation of an apiserver for a custom Kubernetes API.

A Go library for function recovery from stripped binaries.

SUSE Rancher's VEX Hub repository

VEX and VEXplanation generation

Prioritize vulnerabilities by real risk, not just CVSS

Given a CVE along with the PURL and the repository URL, identifies the root cause functions/methods for the CVE.

Experiment combining OCI prestart hook and Linux Security Module to profile opened file in a Container using Podman

Collection of tools and resources for managing the statistical disclosure control of trained machine learning models

This tool helps you compute the estimate VRAM usage for GGUF LLms

the ps utility, with an eBPF twist and container context

Tool to capture containers syscalls and generate a Seccomp profile

Born is a modern ML framework for Go — train and deploy models as single binaries. Pure Go, zero CGO, GPU accelerated.

A Go (golang) library wrapping microsoft/onnxruntime.

NetNSCLI is a lightweight Go-based CLI tool, built with Cobra, designed to create and manage local network testbeds effortlessly from YAML configurations.

Simple golang CLI tool to wrap commands and ensure reproducibility on the file system

Deploy a Production Ready Kubernetes Cluster