Alternatives and similar repositories for discovery-engine:

Users that are interested in discovery-engine are comparing it to the libraries listed below

• kubearmor / policy-templates
  Community curated list of System and Network policy templates for the KubeArmor and Cilium
  ☆42Updated 2 weeks ago
• 5GSEC / nimbus
  Intent driven security automation framework
  ☆25Updated this week
• kubearmor / kubearmor-client
  KubeArmor cli tool aka kArmor
  ☆40Updated this week
• armosec / kubecop
  Runtime detection and response for malicious events in Kubernetes workloads
  ☆41Updated 11 months ago
• kubescape / cel-admission-library
  This projects contains pre-made policies for Kubernetes Validating Admission Policies. This policy library is based on Kubescape controls…
  ☆52Updated last week
• accuknox / cilium-spire-tutorials
  Tutorials about Cilium and SPIRE integration
  ☆27Updated 3 years ago
• falcosecurity / falcoctl
  Administrative tooling for Falco
  ☆91Updated this week
• falcosecurity / event-generator
  Generate a variety of suspect actions that are detected by Falco rulesets
  ☆101Updated this week
• falcosecurity / plugins
  Falco plugins registry
  ☆87Updated this week
• cert-manager / csi-driver-spiffe
  A Kubernetes CSI plugin to automatically mount SPIFFE certificates to Pods using ephemeral volumes
  ☆77Updated this week
• tstromberg / sigstore-the-local-way
  sigstore installation walkthrough, local
  ☆57Updated 9 months ago
• kinvolk / seccompagent
  agent for handling seccomp descriptors for container runtimes
  ☆44Updated last year
• checkpoint-restore / checkpointctl
  A tool for in-depth analysis of container checkpoints
  ☆106Updated 2 weeks ago
• gardener-attic / connectivity-exporter
  A tool based on eBPF, prometheus and grafana to monitor network connectivity.
  ☆35Updated 2 years ago
• kubescape / sneeffer
  Sneefer is a PoC project showing how to filter out irrelevent vulnerabilities from container image vulnerability scan results. It is base…
  ☆26Updated last year
• k8sstormcenter / honeycluster
  Threat-informed defense for cloudnative: Reference Implementation of a so-called Honeycluster - for kind (and GKE, RKE2, AKS)
  ☆30Updated this week
• isovalent / ebeedex
  Find your favorite eBee
  ☆58Updated last month
• anchore / k8s-inventory
  Anchore Kubernetes Inventory can poll Kubernetes Cluster API(s) to tell Anchore Enterprise which Containers and Images are currently in-u…
  ☆65Updated this week
• ckotzbauer / vulnerability-operator
  Scans SBOMs for vulnerabilities with Grype
  ☆79Updated this week
• Dentrax / falco-gpt
  AI-generated remediations for Falco audit events
  ☆69Updated last year
• sigstore / policy-controller
  Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supp…
  ☆126Updated last week
• stacklok / sigstore-the-hard-way
  sigstore the hard way!
  ☆110Updated 9 months ago
• dlorenc / cosigned
  ☆35Updated 3 years ago
• leodido / traffico
  Shape your traffic the BPF way
  ☆79Updated last year
• sigstore / cosign-gatekeeper-provider
  🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their sig…
  ☆77Updated 10 months ago
• kyverno / reports-server
  Alternate reports storage in Kubernetes outside etcd
  ☆27Updated last week
• jpts / kubectl-execws
  A replacement for "kubectl exec" that works over WebSocket connections.
  ☆36Updated 10 months ago
• wolfi-dev / wolfictl
  A CLI used to work with the Wolfi OSS project
  ☆61Updated this week
• sigstore / k8s-manifest-sigstore
  kubectl plugin for signing Kubernetes manifest YAML files with sigstore
  ☆80Updated 2 months ago
• kubescape / kapprofiler
  Generate an application profile containing metrics/properties for Kubernetes workloads based on runtime behavior.
  ☆14Updated 4 months ago