Community curated list of System and Network policy templates for the KubeArmor and Cilium
☆51May 26, 2026Updated last month
Alternatives and similar repositories for policy-templates
Users that are interested in policy-templates are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Discover least permissive security posture, Network Microsegmentation, and Application behaviour based on visibility/observability data e…☆35May 19, 2025Updated last year
- KubeArmor cli tool aka kArmor☆45Updated this week
- AccuKnox CI/CD Action for IaC Security Scan☆19May 15, 2026Updated last month
- AccuKnox CI/CD Action for Container Security Scan☆19Feb 26, 2026Updated 4 months ago
- Intent driven security automation framework☆27Aug 12, 2025Updated 10 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (…☆2,440Updated this week
- https://breaking-bits.gitbook.io/breaking-bits/exploit-development/linux-kernel-exploit-development☆44Jan 15, 2022Updated 4 years ago
- ☆55Updated this week
- 🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their sig…☆79Dec 4, 2025Updated 7 months ago
- Source code of the double-fetch bug detection approach based on Coccinelle engine☆10Jan 2, 2017Updated 9 years ago
- LLVM trunk with poolalloc trunk modified to compile only DSA☆12Jul 9, 2015Updated 11 years ago
- A curated collection of scripts for kernel-related devops☆14Nov 23, 2023Updated 2 years ago
- Spectre variant 1 exploitation via PRIME+PROBE☆10May 22, 2019Updated 7 years ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆156Feb 16, 2022Updated 4 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Reading list of more resources to learn about Adversarial Attacks on AI Systems☆39Apr 7, 2026Updated 3 months ago
- ☆11Nov 22, 2021Updated 4 years ago
- ☆113Mar 29, 2026Updated 3 months ago
- Analysis on Kernel Self-Protection: Understanding Security and Performance Implication☆18Apr 20, 2020Updated 6 years ago
- kCFI Documentation☆15Apr 18, 2017Updated 9 years ago
- Wi-Fi Surveying: wardriving, datasets, statistics, tools, and more.☆18Oct 10, 2023Updated 2 years ago
- trust-manager is an operator for distributing trust bundles across a Kubernetes cluster.☆383Updated this week
- Kyverno extension service for Notation and the AWS signer☆16Mar 24, 2026Updated 3 months ago
- Detect intrusions that happened in your Kubernetes cluster through audit logs using Falco☆63Jun 2, 2021Updated 5 years ago
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- This rap optimizations and hl_cfi have be merged in hardenedlinux/linux-unofficial_grsec☆17Oct 3, 2019Updated 6 years ago
- Lite and OSS version of the Kubert Assistant☆16Apr 4, 2026Updated 3 months ago
- An simple application with an HTTP server & SQLite database.☆16May 30, 2021Updated 5 years ago
- Github Actions wrapper for vmtest☆12Jan 10, 2025Updated last year
- ebpfkit-monitor is a tool that detects and protects against eBPF powered rootkits☆141Feb 28, 2023Updated 3 years ago
- Terraform provider for Sigstore Cosign☆12Jun 30, 2026Updated last week
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆115Jan 2, 2025Updated last year
- Various examples of using eBPF code☆18Jan 3, 2024Updated 2 years ago
- LSM BPF module to block pwnkit (CVE-2021-4034) like exploits☆21Feb 17, 2022Updated 4 years ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- The k8s-generic-webhook is a library to simplify the implementation of webhooks for arbitrary customer resources (CR) in the operator-sdk…☆15Jun 29, 2026Updated last week
- ☆25Jun 2, 2024Updated 2 years ago
- Windows Terminal - Watch commands execute (similar to Unix/Linux watch command) with color highlights.☆14May 27, 2026Updated last month
- HTTP middleware for OpenFaaS☆13Apr 18, 2025Updated last year
- Sniff and attack networks that use IP-in-IP or VXLAN encapsulation protocols.☆25Apr 27, 2026Updated 2 months ago
- A helm plugin for ArgoCD to support the lookup function☆10Jun 13, 2026Updated 3 weeks ago
- ☆25Updated this week