Process documentation, non-code deliverables, and miscellaneous artifacts of Kubernetes SIG Security
☆249Jul 17, 2026Updated this week
Alternatives and similar repositories for sig-security
Users that are interested in sig-security are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A place for policy work group related proposals and prototypes.☆66May 21, 2025Updated last year
- 🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!☆2,266Dec 8, 2025Updated 7 months ago
- ☆16Jul 12, 2026Updated last week
- ☆36Jan 4, 2026Updated 6 months ago
- Evaluate the RBAC permissions of Kubernetes identities through policies written in Rego☆353Mar 21, 2025Updated last year
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- The Kubernetes Security Profiles Operator☆860Updated this week
- ☆46May 12, 2025Updated last year
- Integrity Shield is a tool for built-in preventive integrity control for regulated cloud workloads. It provides signature-based assurance…☆17Sep 22, 2022Updated 3 years ago
- 📚 The OPA Gatekeeper policy library☆699Updated this week
- Carvel Terraform provider with resources for ytt and kapp to template and deploy to Kubernetes☆45Sep 26, 2023Updated 2 years ago
- AppArmor and Seccomp profiles for Docker images☆14Dec 9, 2025Updated 7 months ago
- Hunt for security weaknesses in Kubernetes clusters☆5,068Mar 19, 2024Updated 2 years ago
- Bits of Terraform that you can use to do bad things in CI/CD pipelines that run Terraform☆10Nov 10, 2020Updated 5 years ago
- ☆284Mar 19, 2026Updated 4 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Unified Policy as Code☆7,955Updated this week
- KubeArmor runtime security integration with Open Horizon☆13Jan 23, 2026Updated 6 months ago
- 🐊 Policy Controller for Kubernetes☆4,245Updated this week
- A SBOM-centric security scanner.☆23Updated this week
- Kubesonde: network policy testing and verification in K8s☆18Updated this week
- Threat Hunting at Scale: Auditing Thousands of Clusters With Falco + Fluent☆11Aug 13, 2022Updated 3 years ago
- Kyverno Design Proposals☆20Jan 2, 2026Updated 6 months ago
- ☆15Nov 14, 2018Updated 7 years ago
- Sample app that prints the compute region it’s running on☆18Apr 24, 2024Updated 2 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆31Nov 15, 2021Updated 4 years ago
- Vim Plugin for Trivy☆15Feb 20, 2024Updated 2 years ago
- Release tooling for KubeBuilder projects.☆20Jul 6, 2025Updated last year
- Kubernetes Security Process and Security Committee docs☆180May 31, 2026Updated last month
- Kubernetes Pod Security Standards implementation - https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/2579-psp-replacem…☆103Updated this week
- A curated list for Awesome Kubernetes Security resources☆2,003Jun 23, 2026Updated 3 weeks ago
- A walkthrough of how a Kubernetes Pod can be exploited by a hacker☆11Aug 29, 2023Updated 2 years ago
- An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchm…☆774Dec 11, 2024Updated last year
- Research on various techniques to bypass default falco ruleset (based on falco v0.28.1).☆90Jan 28, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Pentester-focused Docker registry tool to enumerate and pull images☆41Oct 19, 2025Updated 9 months ago
- Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark☆8,110Jul 13, 2026Updated last week
- Vulnerable Terraform Projects - Fork of https://github.com/bridgecrewio/terragoat☆17Apr 23, 2024Updated 2 years ago
- Runs checks to see if an EKS cluster follows EKS Best Practices.☆958Jun 20, 2026Updated last month
- Security risk analysis for Kubernetes resources☆1,466Jul 10, 2026Updated last week
- Konstellation is a configuration-driven CLI tool to enumerate cloud resources and store the data into Neo4j.☆35May 5, 2026Updated 2 months ago
- Platform AbstRaction for SECurity service☆513May 1, 2026Updated 2 months ago