Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (BPF-LSM, AppArmor).

Example goreleaser + github actions config with keyless signing and SBOM generation

Kubernetes Cluster API Provider Hetzner provides a consistent deployment and day 2 operations of "self-managed" Kubernetes clusters on Hetzner.

The SCS Cluster Stack Operator takes care of life cycle management, configuration and provider specific tasks of Kubernetes clusters created with SCS Cluster Stacks

Cross Platform tool to validate configuration files

A clean and simple personal site/blog theme for the Zola static site generator

OCI registry client - managing content like artifacts, images, packages

Manages Envoy Proxy as a Standalone or Kubernetes-based Application Gateway

monaco font patched with extra nerd glyphs

Vulnerability scanner written in Go which uses the data provided by https://osv.dev

Making containers more secure with eBPF and Linux Security Modules (LSM)

Go based code for the book Data Structures and Algorithms