grantseltzer / karn
Simplifying Seccomp enforcement in containerized or non-containerized apps
☆110Updated 4 years ago
Alternatives and similar repositories for karn:
Users that are interested in karn are comparing it to the libraries listed below
- A tool to list and diagnose bpf programs. (Who watches the watchers..? :)☆95Updated 4 years ago
- A package for handling ssh certificates☆45Updated 3 years ago
- Strace container output to a file, then shove the syscalls into elastic search.☆49Updated 8 years ago
- Generate seccomp profiles from go binaries☆135Updated 6 years ago
- PAL: A secret bootstrapping tool for Docker☆84Updated 7 months ago
- INACTIVE - http://mzl.la/ghe-archive - Linux Audit Plugin for heka written using netlink Protocol in golang and Lua☆75Updated 6 years ago
- Hallow is a SSH Certificate Authority designed for use with AWS native environments☆65Updated 10 months ago
- verify https assets with a public transparency log☆75Updated 3 years ago
- A dead simple secret store service for anyone using AWS☆37Updated 6 years ago
- Hardening and Auditing Tool For Docker Hosts & Containers☆68Updated 9 years ago
- Community rules for Commit Watcher☆24Updated 8 years ago
- An actuary is a business professional who analyzes the financial consequences of risk.☆78Updated 7 years ago
- API that leverages Clair to scan Docker Registries and Kubernetes Clusters for vulnerabilities☆151Updated 2 years ago
- Kernel assisted microcontainer packer☆24Updated 6 years ago
- Demonstrating that disabling ICC in docker does not block raw packets between containers.☆65Updated 7 years ago
- efficient linux security monitoring☆26Updated 6 years ago
- Auto generated pdfs of apparmor .odt files direct from launchpad branch.☆29Updated 3 years ago
- Experimental CLI that takes a Docker image url and runs it in a Firecracker VM☆65Updated 6 years ago
- drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templat…☆65Updated 8 years ago
- Command line tool to check the validity and expiration dates of SSL certificates.☆160Updated 4 years ago
- A Dockerfile that creates an image with known vulnerabilities.☆49Updated 3 years ago
- A fast SSL/TLS reconnaisance tool written in Go☆59Updated 8 years ago
- Because Clair needs a friend☆31Updated 5 years ago
- ☆55Updated 7 years ago
- NMAP powered service discovery for passive service registration.☆14Updated 9 years ago
- Autoupdate binaries with Docker Notary and TUF☆61Updated 5 years ago
- ☆33Updated 5 years ago
- CVE feed synchronization to issue management system☆58Updated 10 years ago
- BeyondCorp-style federated access proxy☆48Updated last year
- BPF based FIM solution☆42Updated last year