kinvolk / seccompagent
agent for handling seccomp descriptors for container runtimes
☆43Updated 11 months ago
Alternatives and similar repositories for seccompagent:
Users that are interested in seccompagent are comparing it to the libraries listed below
- Kit for building Falco drivers: kernel modules or eBPF probes☆65Updated this week
- ☆24Updated 8 months ago
- A tool for in-depth analysis of container checkpoints☆104Updated last month
- A replacement for "kubectl exec" that works over WebSocket connections.☆36Updated 9 months ago
- Administrative tooling for Falco☆89Updated this week
- Making containers more secure with eBPF and Linux Security Modules (LSM)☆221Updated 7 months ago
- Source-code based coverage for eBPF programs actually running in the Linux kernel☆129Updated 2 years ago
- Evolution process of The Falco Project☆49Updated this week
- ☆74Updated last month
- ptrace-based event producer for udig☆67Updated 2 years ago
- vexctl is a tool to attest VEX impact statements☆44Updated last year
- sigstore the hard way!☆110Updated 8 months ago
- 🐝 BPFBox 📦 Exploring process confinement in eBPF☆101Updated last year
- Shape your traffic the BPF way☆79Updated last year
- Community curated list of System and Network policy templates for the KubeArmor and Cilium☆41Updated 2 months ago
- Cloud Native Security Hub - Security Resources☆54Updated 4 years ago
- OCI hook to trace syscalls and generate a seccomp profile☆307Updated this week
- Runtime security plug to protect user containers☆65Updated last week
- Falco plugins registry☆87Updated this week
- A highly configurable build executor and observer designed to generate signed SLSA provenance attestations about build runs.☆60Updated this week
- Manage AppAmormor profiles for Kubernetes cluster☆40Updated last year
- Simple tool that allows you to detect imposter commits in GitHub Actions workflows.☆23Updated last month
- ☆56Updated 2 years ago
- Library to work with linux namespaces in go☆35Updated last year
- Tooling and library for generation, validation and verification of supply chain metadata documents and frameworks☆31Updated last year
- A command line tool to automatically generate seccomp profiles.☆25Updated 3 years ago
- Build custom Docker seccomp profiles for containers by finding syscalls it uses.☆89Updated 4 years ago
- sget is a keyless safe script retrieval and execution tool☆18Updated 2 years ago
- ☆112Updated last year
- Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supp…☆126Updated this week