edgelesssys / constellation
Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.
☆1,035Updated this week
Alternatives and similar repositories for constellation
Users that are interested in constellation are comparing it to the libraries listed below
Sorting:
- Deploy and manage confidential containers on Kubernetes☆234Updated this week
- All-in-one Kubernetes access manager. User-level credentials, RBAC, SSO, audit logs.☆1,119Updated last month
- An admission controller that integrates Container Image Signature Verification into a Kubernetes cluster☆455Updated this week
- Kamaji is the Hosted Control Plane Manager for Kubernetes.☆1,433Updated last week
- Timoni is a package manager for Kubernetes, powered by CUE and inspired by Helm.☆1,765Updated 2 weeks ago
- Confidential Containers Community☆265Updated last week
- k0smotron☆587Updated this week
- 🧵 CLI tool for directly patching container images!☆1,293Updated last week
- Build OCI images from APK packages directly without Dockerfile☆1,350Updated this week
- Public Chainguard Images☆595Updated this week
- A CLI tool to sign and verify artifacts☆405Updated this week
- Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact pro…☆472Updated this week
- Evidence store and policy engine for your Software Supply Chain attestations, SBOMs, VEX, SARIF, QA reports, and more☆435Updated last week
- Superseded by https://github.com/aquasecurity/trivy-operator☆1,367Updated 3 weeks ago
- The missing glue to put together large Kubernetes deployments, composed of multiple smaller parts (Helm/Kustomize/...) in a manageable a…☆740Updated last week
- Software Supply Chain Transparency Log☆956Updated last week
- Keyless Git signing using Sigstore☆996Updated last week
- zot - A scale-out production-ready vendor-neutral OCI-native container image/artifact registry (purely based on OCI Distribution Specific…☆1,217Updated last week
- Platform AbstRaction for SECurity service☆486Updated this week
- k8spacket - collects TCP traffic and TLS connection metadata in the Kubernetes cluster using eBPF and visualizes in Grafana☆1,052Updated this week
- Rapid7 | insightCloudSec | Kubernetes RBAC Power Toys - Visualize, Analyze, Generate & Query☆1,013Updated 3 months ago
- Kubernetes RBAC static analysis & visualisation tool☆706Updated last week
- Kubernetes tool for scanning clusters for network policies and identifying unprotected workloads.☆438Updated 2 weeks ago
- jsPolicy - Easier & Faster Kubernetes Policies using JavaScript or TypeScript☆392Updated 3 months ago
- Common go library shared across sigstore services and clients☆485Updated this week
- Sigstore OIDC PKI☆720Updated this week
- pod that scales down to zero☆416Updated 2 weeks ago
- DevSecOps for Airgap & Limited-Connection Systems. https://zarf.dev/☆1,546Updated this week
- The immutable Linux meta-distribution for edge Kubernetes.☆1,323Updated this week
- Blazingly-fast , rock-solid, local application development with Kubernetes.☆727Updated this week