Stars
Random code for HashiCorp related projects, training, etc.
A cli tool for importing and exporting Hashicorp Vault secrets
The OpenTF Manifesto expresses concern over HashiCorp's switch of the Terraform license from open-source to the Business Source License (BSL) and calls for the tool's return to a truly open-source …
asciiban generates ASCII banners for given prompts
A demo app covering building an eBPF load-balancer in Rust
An AI-powered tool for discovering privilege escalation opportunities in AWS IAM configurations.
Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀
eBPF-powered network observability for Kubernetes. Indexes L4/L7 traffic with full K8s context, decrypts TLS without keys. Queryable by AI agents via MCP and humans via dashboard.
Auditable CSPRNG-backed credential generator for AI agents and machine-readable pipelines. Stable JSON schema, NIST entropy floors, SLSA 3 + cosign signed releases. CLI, Go/Python/Rust libs, MCP se…
Code signing and transparency for containers and binaries
Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (LSM-BPF, AppArmor).
Open-source framework for native apps from one Java codebase, with a custom-rendered UI you control across iOS, Android, desktop, web, and watches.
Code and configuration to manage Kubernetes project infrastructure, including various *.k8s.io sites
A Go library for the Linux Landlock sandboxing feature
OWASP Coraza WAF is a golang modsecurity compatible web application firewall library
Tiny Rego library with helper functions for unit testing
Cloud cost intelligence for engineers, AI coding agents, and CI/CD 💰📉 Shift FinOps Left!
Kubernetes focused container assessment and context discovery tool for penetration testing
Write tests against structured configuration data using the Open Policy Agent Rego query language