listendev / jibril-releasesLinks
Jibril: A performant and low impact Linux runtime security tool agent.
☆13Updated 6 months ago
Alternatives and similar repositories for jibril-releases
Users that are interested in jibril-releases are comparing it to the libraries listed below
Sorting:
- Proactive security monitoring and threat detection in CI/CD☆15Updated 7 months ago
- Find your favorite eBee☆74Updated 8 months ago
- Generate a variety of suspect actions that are detected by Falco rulesets☆113Updated 6 months ago
- sigstore the hard way!☆116Updated 4 months ago
- An query language and interactive tooling to work with SBOM data.☆14Updated last year
- agent for handling seccomp descriptors for container runtimes☆47Updated last year
- Kit for building Falco drivers: kernel modules or eBPF probes☆67Updated 3 weeks ago
- Community curated list of System and Network policy templates for the KubeArmor and Cilium☆49Updated last month
- Intent driven security automation framework☆26Updated 3 months ago
- Administrative tooling for Falco☆116Updated this week
- ☆74Updated 6 months ago
- Runtime detection and response for malicious events in Kubernetes workloads☆46Updated last year
- Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"☆67Updated 2 years ago
- vexctl is a tool to attest VEX impact statements☆45Updated 2 years ago
- OCI hook to trace syscalls and generate a seccomp profile☆338Updated last month
- Evolution process of The Falco Project☆59Updated this week
- Falco plugins registry☆109Updated this week
- This is a POC repository showing how a Kubernetes Admission Controller can be made irrelevant when verifying container image signatures☆12Updated 2 years ago
- Simple tool that allows you to detect imposter commits in GitHub Actions workflows.☆25Updated 11 months ago
- Runtime security plug to protect user containers☆66Updated last week
- Template Go app repo with local test/lint/build/vulnerability check workflow, and on tag image test/build/release pipelines, with ko gene…☆103Updated last year
- A replacement for "kubectl exec" that works over WebSocket connections.☆42Updated last year
- Kubernetes audit logging, when you don't control the control plane☆90Updated this week
- Curated list of SPIFFE and SPIRE resources☆61Updated 3 years ago
- ☆27Updated 6 months ago
- Discover least permissive security posture, Network Microsegmentation, and Application behaviour based on visibility/observability data e…☆34Updated 6 months ago
- Sneefer is a PoC project showing how to filter out irrelevent vulnerabilities from container image vulnerability scan results. It is base…☆26Updated 2 years ago
- eBPF Map Prometheus Exporter☆24Updated 4 months ago
- ptrace-based event producer for udig☆68Updated 3 years ago
- Hardens eBPF tools against privileged attackers via policy-based access controls☆50Updated 3 weeks ago