Community curated list of System and Network policy templates for the KubeArmor and Cilium
☆51Aug 14, 2026Updated last week
Alternatives and similar repositories for policy-templates
Users that are interested in policy-templates are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Discover least permissive security posture, Network Microsegmentation, and Application behaviour based on visibility/observability data e…☆35May 19, 2025Updated last year
- AccuKnox CI/CD Action for Container Security Scan☆19Feb 26, 2026Updated 5 months ago
- KubeArmor cli tool aka kArmor☆45Updated this week
- Runtime Security Enforcement System. Workload hardening/sandboxing and implementing least-permissive policies made easy leveraging LSMs (…☆2,582Updated this week
- An eBPF-based security research tool that demonstrates offensive techniques including network discovery, file system monitoring, process …☆40Jul 4, 2026Updated last month
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Intent driven security automation framework☆27Aug 12, 2025Updated last year
- A comprehensive framework and assessment toolkit for measuring and improving Cloud Native security maturity across 8 critical business fu…☆10Jun 24, 2025Updated last year
- Kubernetes workshop for TFC community.☆10Jul 14, 2018Updated 8 years ago
- ☆55Updated this week
- Examples for Selectel Managed Kubernetes Service.☆10Jul 31, 2026Updated 3 weeks ago
- Code repository for experiments in SpecROP paper☆13Sep 3, 2021Updated 4 years ago
- An agentic AI dashboard app that uses AWS Strands SDK. KubeArmor based least-permissive security is showcased.☆16Updated this week
- Cloud Detection & Response GOAT is a scenario-driven, intentionally vulnerable framework designed to help defenders validate detection pi…☆21Updated this week
- Terraform Provider to manage OWASP DependencyTrack☆17Aug 10, 2026Updated last week
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Defending IaaS with ATT&CK is a project to create a collection of ATT&CK techniques relevant to a Linux IaaS environment, as well as a me…☆15May 28, 2025Updated last year
- 🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their sig…☆79Dec 4, 2025Updated 8 months ago
- Source code of the double-fetch bug detection approach based on Coccinelle engine☆10Jan 2, 2017Updated 9 years ago
- Infrastructure-as-code for a serverless knowledge base using Amazon Bedrock, Aurora PostgreSQL (with pgvector), Lambda, and S3. This setu…☆19Mar 23, 2025Updated last year
- LLVM trunk with poolalloc trunk modified to compile only DSA☆12Jul 9, 2015Updated 11 years ago
- bpflock - eBPF driven security for locking and auditing Linux machines☆157Feb 16, 2022Updated 4 years ago
- ⚡ k8s event logger operator - logs configured events to stdout in order to not lose them☆10Updated this week
- Yoda: Post-exploitation tool using eBPF xdp / AF_XDP, running on a userspace gVisor network stack☆16Aug 13, 2025Updated last year
- NamespaceHound is the tool for detecting the risk of potential namespace crossing violations in multi-tenant clusters.☆115Jan 2, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆18Oct 9, 2023Updated 2 years ago
- Bash script installing the latest version of Greenbone Community Edition the artist formerly known as OpenVAS. Greenbone Community Editio…☆23Mar 25, 2026Updated 4 months ago
- trust-manager is an operator for distributing trust bundles across a Kubernetes cluster.☆394Updated this week
- This repository contains examples of Kyverno policies for controlling the creation of Cilium Network policies☆22Nov 2, 2023Updated 2 years ago
- OpenReports API (Kubernetes CRD)☆48Jun 8, 2026Updated 2 months ago
- Ledger Donjon CTF 2020☆17Nov 16, 2021Updated 4 years ago
- Runtime Security Solution for your CI/CD Pipeline☆123Jun 23, 2026Updated 2 months ago
- ☆114Mar 29, 2026Updated 4 months ago
- Analysis on Kernel Self-Protection: Understanding Security and Performance Implication☆19Apr 20, 2020Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- XDP Virtual Server - an eBPF load balancer implementation and supporting Go library☆25Jun 1, 2026Updated 2 months ago
- Welcome to github repository for Visual Cloud Delivery Network. This repository will provide the Ansible playbooks for installing the com…☆22Dec 16, 2024Updated last year
- Detect intrusions that happened in your Kubernetes cluster through audit logs using Falco☆63Jun 2, 2021Updated 5 years ago
- Rego policies collection☆171Updated this week
- Helm Chart to deploy Twistlock Defender☆15May 29, 2026Updated 2 months ago
- An simple application with an HTTP server & SQLite database.☆16May 30, 2021Updated 5 years ago
- ☆12Apr 22, 2025Updated last year