Filter by
(2)
Kyverno Readiness Checker is a component that checks the readiness of a Kyverno installation
15m
100K+
Grype is a vulnerability scanner for container images and filesystems. It provides fast and accurate vulnerability detection with support for multiple package ecosystems and output formats.
17m
100K+
Syft is a CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems with support for multiple output formats and package ecosystems.
10m
100K+
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
19m
100K+
TruffleHog is a secrets scanning tool that finds credentials, API keys, and sensitive data in git repositories, filesystems, S3 buckets, and more. Written in Go.
9m
100K+
Istioctl image for managing Istio deployments
16m
100K+
OPA is a policy engine that streamlines policy management across your stack for improved development, security and audit capability.
13m
100K+
Sidecar for managing OPA instances in Kubernetes.
15m
100K+
Kubernetes-native security toolkit that leverages Trivy to continuously scan your Kubernetes cluster for security issues.
9m
100K+
OpenFGA is an open source Fine Grained Authorization solution that implements Google's Zanzibar paper, helping you manage complex authorization rules in your applications.
13m
100K+
Policy Controller for Kubernetes, built on Open Policy Agent.
18m
100K+
Notation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.
13m
100K+
Tailscale lets you securely connect devices and containers without exposing them to the public internet.
6h
100K+
SonarQube is a self-managed, automatic code review tool that systematically helps you deliver clean code.
11m
100K+
Socket CLI scans npm, pnpm, and yarn projects for supply-chain security risks -- malicious packages, typosquats, and known vulnerabilities -- from the command line and CI pipelines.
6h
100K+
3
The AWS EKS Pod Identity Agent runs on Amazon EKS nodes and exchanges Kubernetes service account tokens for temporary AWS IAM credentials, providing pods with IAM roles without using IRSA or instance profiles.
22m
100K+
EFF's ACME client for obtaining and renewing TLS certificates from Let's Encrypt and any ACME-compatible CA.
21m
100K+
2
cert-manager trust-manager manages trust bundles in Kubernetes and OpenShift clusters
9m
100K+
Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. Written in Go.
17m
100K+
node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.
13m
100K+
Lacework is cloud security for AWS, Azure, GCP and other public and private cloud.
21d
1B+
24
Apache APISIX is a dynamic, real-time, high-performance API Gateway.
23m
100K+
Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the command line or as a mutating webhook, Polaris can automatically remediate issues based on policy criteria.
12m
100K+
The Kyverno Policy Reporter UI watches for PolicyReport Resources and displays information on a web based UI
15m
100K+
A Kubernetes utility to identify optimal resource requests and limits using Vertical Pod Autoscalers.
17m
100K+
An open source, Google Zanzibar-inspired database for fine-grained authorization.
10m
100K+
2
Certificate signing request agent for integrating cert-manager with Istio
21m
100K+
