grantseltzer / karnLinks
Simplifying Seccomp enforcement in containerized or non-containerized apps
☆112Updated 5 years ago
Alternatives and similar repositories for karn
Users that are interested in karn are comparing it to the libraries listed below
Sorting:
- A tool to list and diagnose bpf programs. (Who watches the watchers..? :)☆95Updated 5 years ago
- A package for handling ssh certificates☆45Updated 4 years ago
- PAL: A secret bootstrapping tool for Docker☆85Updated last year
- Generate seccomp profiles from go binaries☆135Updated 7 years ago
- INACTIVE - http://mzl.la/ghe-archive - Linux Audit Plugin for heka written using netlink Protocol in golang and Lua☆74Updated 6 years ago
- Auto generated pdfs of apparmor .odt files direct from launchpad branch.☆29Updated 4 years ago
- Hardening and Auditing Tool For Docker Hosts & Containers☆69Updated 10 years ago
- Strace container output to a file, then shove the syscalls into elastic search.☆50Updated 9 years ago
- DEPRECATED - Propagate users from Mozilla's Person API to third party systems.☆40Updated 3 years ago
- A fast SSL/TLS reconnaisance tool written in Go☆59Updated 9 years ago
- The Container Security Book—a free book for practitioners☆83Updated 5 years ago
- An actuary is a business professional who analyzes the financial consequences of risk.☆81Updated 8 years ago
- A Dockerfile that creates an image with known vulnerabilities.☆49Updated 3 years ago
- Experimental CLI that takes a Docker image url and runs it in a Firecracker VM☆65Updated 6 years ago
- traffic control daemon☆21Updated 8 years ago
- drydock provides a flexible way of assessing the security of your Docker daemon configuration and containers using editable audit templat…☆66Updated 9 years ago
- A dead simple secret store service for anyone using AWS☆37Updated 6 years ago
- Community rules for Commit Watcher☆24Updated 9 years ago
- Hallow is a SSH Certificate Authority designed for use with AWS native environments☆65Updated last year
- efficient linux security monitoring☆26Updated 7 years ago
- API that leverages Clair to scan Docker Registries and Kubernetes Clusters for vulnerabilities☆151Updated 2 years ago
- ☆41Updated 5 years ago
- Kernel assisted microcontainer packer☆24Updated 6 years ago
- X.509 certificate linter, written in Go☆59Updated 7 years ago
- A tool for getting SSH keys out of LDAP☆50Updated 3 years ago
- A proxy for docker.sock that enforces access control and isolated privileges☆144Updated 4 years ago
- eBPF tool for logging process ancestry of outbound TCP connections☆45Updated last week
- Demonstrating that disabling ICC in docker does not block raw packets between containers.☆66Updated 7 years ago
- Auditing & Hardening script for Kubernetes☆46Updated 7 years ago
- Autoupdate binaries with Docker Notary and TUF☆61Updated 5 years ago