🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

Plugin index for https://github.com/kubernetes-sigs/krew. This repo is for plugin maintainers.

📦 Find and install kubectl plugins

Showcasing some example workflows to apply SLSA principles

Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

A Kubectl plugin that can detect if any of your workloads or manifest files are mounting the docker.sock volume

Fig adds autocomplete to your terminal.

A vulnerability scanner for container images and filesystems

Catalogue all images of a Kubernetes cluster to Git with Syft

Linux virtual machines, on macOS (aka "Linux-on-Mac", "macOS subsystem for Linux", "containerd for Mac", unofficially)

Multi-platform (manifest list/OCI index) registry image query utility

A collection of reusable Github Actions workflows.

gh cli extension to display a dashboard of PRs - configurable with a beautiful UI.

Backup and migrate Kubernetes applications and their persistent volumes

BuildKit CLI for kubectl is a tool for building container images with your Kubernetes cluster

Container Image Linter for Security, Helping build the Best-Practice Docker Image, Easy to start

Kubernetes Node Autoscaling: built for flexibility, performance, and scalability. https://karpenter.sh

HashiCorp Vault Provider for Secret Store CSI Driver

Kubescape is a K8s open-source tool providing a multi-cloud K8s single pane of glass, including risk analysis, security compliance, RBAC visualizer and image vulnerabilities scanning.

GitHub action to install bom, the Kubernetes SBOM tool

Integrations, examples, and proof-of-concepts that are not part of OPA proper.

🔍 Rekor transparency log monitoring and alerting

vcluster - Create fully functional virtual Kubernetes clusters - Each vcluster runs inside a namespace of the underlying k8s cluster. It's cheaper than creating separate full-blown clusters and it …

Command line tools for working with Fig autocomplete specs