Process documentation, non-code deliverables, and miscellaneous artifacts of Kubernetes SIG Security
☆249Aug 7, 2026Updated this week
Alternatives and similar repositories for sig-security
Users that are interested in sig-security are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A place for policy work group related proposals and prototypes.☆65May 21, 2025Updated last year
- 🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!☆2,264Dec 8, 2025Updated 8 months ago
- ☆16Jul 12, 2026Updated last month
- ☆36Jan 4, 2026Updated 7 months ago
- Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego☆353Mar 21, 2025Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- The Kubernetes Security Profiles Operator☆863Updated this week
- ☆46May 12, 2025Updated last year
- A comprehensive framework and assessment toolkit for measuring and improving Cloud Native security maturity across 8 critical business fu…☆10Jun 24, 2025Updated last year
- Integrity Shield is a tool for built-in preventive integrity control for regulated cloud workloads. It provides signature-based assurance…☆17Sep 22, 2022Updated 3 years ago
- 📚 The OPA Gatekeeper policy library☆700Updated this week
- AppArmor and Seccomp profiles for Docker images☆14Dec 9, 2025Updated 8 months ago
- Hunt for security weaknesses in Kubernetes clusters☆5,077Mar 19, 2024Updated 2 years ago
- Bits of Terraform that you can use to do bad things in CI/CD pipelines that run Terraform☆10Nov 10, 2020Updated 5 years ago
- Scan images for security vulnerabilities in a Kubernetes cluster using Clair and Klar☆17Jul 20, 2018Updated 8 years ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- Unified Policy as Code☆8,026Updated this week
- Docker images for KinD based on Amazon EKS-D☆11Aug 23, 2021Updated 4 years ago
- ☆23Mar 13, 2023Updated 3 years ago
- 🐊 Policy Controller for Kubernetes☆4,260Updated this week
- A SBOM-centric security scanner.☆25Updated this week
- Kubesonde: network policy testing and verification in K8s☆18Jul 16, 2026Updated 3 weeks ago
- Threat Hunting at Scale: Auditing Thousands of Clusters With Falco + Fluent☆11Aug 13, 2022Updated 3 years ago
- Kyverno Design Proposals☆19Jan 2, 2026Updated 7 months ago
- Sample app that prints the compute region it’s running on☆18Apr 24, 2024Updated 2 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆31Nov 15, 2021Updated 4 years ago
- Release tooling for KubeBuilder projects.☆20Jul 6, 2025Updated last year
- Kubernetes Security Process and Security Committee docs☆181Updated this week
- Kubernetes Pod Security Standards implementation - https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/2579-psp-replacem…☆103Updated this week
- A curated list for Awesome Kubernetes Security resources☆2,002Jul 31, 2026Updated last week
- A walkthrough of how a Kubernetes Pod can be exploited by a hacker☆11Aug 29, 2023Updated 2 years ago
- An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…☆774Dec 11, 2024Updated last year
- Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).☆90Jan 28, 2024Updated 2 years ago
- Pentester-focused Docker registry tool to enumerate and pull images☆41Oct 19, 2025Updated 9 months ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark☆8,137Updated this week
- Vulnerable Terraform Projects - Fork of https://github.com/bridgecrewio/terragoat☆17Apr 23, 2024Updated 2 years ago
- Runs checks to see if an EKS cluster follows EKS Best Practices.☆959Updated this week
- Security risk analysis for Kubernetes resources☆1,471Jul 10, 2026Updated last month
- Konstellation is a configuration-driven CLI tool to enumerate cloud resources and store the data into Neo4j.☆36May 5, 2026Updated 3 months ago
- Platform AbstRaction for SECurity service☆514May 1, 2026Updated 3 months ago
- Service Control Policies that have been Latacora recommended all wrapped up in terraform that is easy to attach to an OU.☆28Jun 16, 2026Updated last month