A CLI to create short-lived (8 hours) GitHub App User Access Token for secure local development

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Declarative CLI Version manager written in Go. Support Lazy Install, Registry, and continuous update with Renovate. CLI version is switched seamlessly

A security layer for Git repositories

Open, Multi-Cloud, Multi-Cluster Kubernetes Orchestration

In-memory state database for Go

Simple netlink library for go.

ebpf-go is a pure-Go library to read, modify and load eBPF programs and attach them to various hooks in the Linux kernel.

🚀2.3x faster than MinIO for 4KB object payloads. RustFS is an open-source, S3-compatible high-performance object storage system supporting migration and coexistence with other S3-compatible platfor…

eBPF-based autoinstrumentation of web applications and network metrics

A library for building fast, reliable and evolvable network services.

BPF IP routing toolkit

BGP implemented in the Go Programming Language

Contour is a Kubernetes ingress controller using Envoy proxy.

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

The Kubernetes Security Profiles Operator

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

OWASP Coraza WAF is a golang modsecurity compatible web application firewall library

A vulnerability scanner for container images and filesystems

🐊 Policy Controller for Kubernetes

An aggregating proxy to enable HA prometheus

Plugin that integrates Kubescape's security and compliance features into the Headlamp dashboard

Squid Web Proxy Cache - Source Code

Hubble - Network, Service & Security Observability for Kubernetes using eBPF

eBPF distributed networking observability tool for Kubernetes

image build and composition scripts for Flatcar Container Linux

The Single Sign-On Multi-Factor portal for web apps, now OpenID Certified™