Stars
📚 Freely available programming books
Production-Grade Container Scheduling and Management
The Moby Project - a collaborative project for the container ecosystem to assemble container-based systems
A book-in-progress about the Linux kernel and its insides.
An open source trusted cloud native registry project that stores, signs, and scans content.
Code signing and transparency for containers and binaries
OpenSSF Scorecard - Security health metrics for Open Source
Golang library for managing configuration data from environment variables
agent runtime security - zero trust, zero setup, zero latency agent sandbox
🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!
GUAC aggregates software security metadata into a high fidelity graph database.
VMware Tanzu Community Edition is no longer an actively maintained project. Code is available for historical purposes only.
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. It monitors network egress, file integrity, and process activity on those runners, detecting threats in re…
Kratix is an open-source framework for building platforms
Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.
Cartographer is a Supply Chain Choreographer.
The Update Framework specification
A universal SBOM representation in protocol buffers