NationalSecurityAgency / seabeeLinks
Hardens eBPF tools against privileged attackers via policy-based access controls
☆41Updated last week
Alternatives and similar repositories for seabee
Users that are interested in seabee are comparing it to the libraries listed below
Sorting:
- A project to collect eBPF verifier errors and how they can be resolved☆42Updated 8 months ago
- [Experimental] jail for Go modules☆94Updated last week
- tool for building and running VMs for development and testing☆104Updated this week
- agent for handling seccomp descriptors for container runtimes☆47Updated last year
- A tool for in-depth analysis of container checkpoints☆122Updated 2 weeks ago
- Making containers more secure with eBPF and Linux Security Modules (LSM)☆230Updated last year
- A tool to help programmers debug and analyze Linux Kernel BPF verification failures.☆44Updated this week
- An query language and interactive tooling to work with SBOM data.☆14Updated 11 months ago
- OCI hook to trace syscalls and generate a seccomp profile☆333Updated last week
- A replacement for "kubectl exec" that works over WebSocket connections.☆40Updated last year
- A layer 2 switch for VMs powered by eBPF☆43Updated 6 months ago
- 🔍 Seccomp profiling and function-level tracing tool.☆163Updated 3 months ago
- A CLI used to work with the Wolfi OSS project☆67Updated this week
- Shape your traffic the BPF way☆79Updated 2 years ago
- TC, XDP, KProbe and CGroup eBPF based simple Ethernet interface traffic monitor and reporting tool☆119Updated 2 weeks ago
- Community curated list of System and Network policy templates for the KubeArmor and Cilium☆47Updated this week
- eBPF Map Prometheus Exporter☆24Updated last month
- Jibril: A performant and low impact Linux runtime security tool agent.☆13Updated 3 months ago
- This repo contains various examples to learn, explore, and experiment with eBPF.☆61Updated 2 months ago
- Services for storing and searching information about software content and vulnerabilities☆52Updated last week
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆33Updated 4 months ago
- Intent driven security automation framework☆25Updated last month
- sget is a keyless safe script retrieval and execution tool☆18Updated 3 years ago
- sigstore the hard way!☆117Updated last month
- Goby CLI eBPF Project Generator☆32Updated 7 months ago
- Security Observation Tool written in Rust inspired by Tetragon☆26Updated 3 weeks ago
- Kubernetes Operator for Falco☆13Updated last week
- Find your favorite eBee☆74Updated 5 months ago
- DraNet is a Kubernetes Network Driver that uses Dynamic Resource Allocation (DRA) to deliver high-performance networking for demanding ap…☆109Updated last week
- go library for processing container images and simulating a squash filesystem☆97Updated last week