A tool for exploring each layer in a docker image

🐶 Kubernetes CLI To Manage Your Clusters In Style!

Podman: A tool for managing OCI containers and pods.

Nuclei is a fast, customizable vulnerability scanner powered by the global security community and built on a simple YAML-based DSL, enabling collaboration to tackle trending vulnerabilities on the …

A tool for glamorous shell scripts 🎀

Build Container Images In Kubernetes

Directory/File, DNS and VHost busting tool written in Go

Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernet…

Simulating shitty network connections so you can build better systems.

Go by Example

Kubernetes controller for GitHub Actions self-hosted runners

Go library and CLIs for working with container registries

notes, honeypot, and exploit demo for the xz backdoor (CVE-2024-3094)

Static checker for GitHub Actions workflow files

Writing a container in a few lines of Go code, as seen at DockerCon 2017 and on O'Reilly Safari

Peirates - Kubernetes Penetration Testing tool

🔍🔍 Malware scanner for cloud-native, as part of CI/CD and at Runtime 🔍🔍

A small form factor OpenShift/Kubernetes optimized for edge computing

Generate SBOMs with gh CLI

Add CA certificates into containers

Scans SBOMs for vulnerabilities with Grype

Stuff to make standing up sigstore (esp. for testing) easier for e2e/integration testing.

A tool for syncing the CodeQL Action from GitHub.com to GitHub Enterprise Server, including copying the CodeQL bundle.

An OIDC client to retrieve a GitHub API scoped token from within an Actions workflow

fatbom (Fat Bill Of Materials) is a tool which combines the SBOM generated by various tools into one fat SBOM. Thus leveraging each tool's strength.

Sneefer is a PoC project showing how to filter out irrelevent vulnerabilities from container image vulnerability scan results. It is based on application monitoring using eBPF and Falco base librar…

The plumber you'll hire to install all your Kubernetes network plumbing

Example apps demonstrating Chainguard platform integrations