Hardening a sketchy containerized application one step at a time
☆54Jan 25, 2022Updated 4 years ago
Alternatives and similar repositories for road-to-secure-kubernetes
Users that are interested in road-to-secure-kubernetes are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Generate K8s RBAC policies based on e2e test runs☆28Jul 6, 2021Updated 5 years ago
- insject is a tool for poking at containers. It enables you to run an arbitrary command in a container or any mix of Linux namespaces.☆50Jan 6, 2022Updated 4 years ago
- my goreleaser.yml files☆13Aug 3, 2026Updated 3 weeks ago
- This project is geared toward running multiple isolated KinD cluster on a single instance☆17Feb 8, 2021Updated 5 years ago
- Writeup of CVE-2017-1002101 with sample "exploit"/escape☆34Mar 23, 2018Updated 8 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- A replacement for "kubectl exec" that works over WebSocket connections.☆43Mar 30, 2024Updated 2 years ago
- ☆46May 12, 2025Updated last year
- A CLI tool for running Go commands with colorized output☆16Nov 3, 2021Updated 4 years ago
- OpenShift CICD Pipeline Library☆13Jul 6, 2022Updated 4 years ago
- Linux Process Discovery. C Library, Go bindings, Runtime.☆224Jul 20, 2022Updated 4 years ago
- A tool for interacting with live processes/containers☆22Sep 21, 2022Updated 3 years ago
- Correlates serviceaccounts and pods to the permissions granted to them via rolebindings and clusterrolesbindings.☆36May 18, 2022Updated 4 years ago
- Easily write tests and fuzz many different programs.☆12Dec 13, 2022Updated 3 years ago
- This is a POC repository showing how a Kubernetes Admission Controller can be made irrelevant when verifying container image signatures☆12Dec 21, 2022Updated 3 years ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- Find out which organisations are best represented in a repository☆16Jan 6, 2022Updated 4 years ago
- A small dependabot for CircleCI orbs and images.☆10Nov 10, 2025Updated 9 months ago
- Security risk analysis for Kubernetes resources☆76Jan 23, 2025Updated last year
- Simple example for using an in-cluster BuildKit instance for container builds☆19Mar 22, 2019Updated 7 years ago
- A kubectl plugin to run kubectl macro that wraps a set of kubectl calls into one command to be run many times.☆11Jun 28, 2021Updated 5 years ago
- Stupid simple controller to create local k3s clusters☆10Sep 2, 2020Updated 5 years ago
- A single repo that shows terraform, terragrunt, helm & docker☆21Jun 8, 2022Updated 4 years ago
- Operator to manage installation of Velero in OpenShift Managed environments☆30Updated this week
- Example repository that demonstrates a supply chain security workflow using Syft, Grype, Cosign☆12Sep 15, 2021Updated 4 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The Attack Surface Detector uses static code analyses to identify web app endpoints by parsing routes and identifying parameters☆14Feb 10, 2022Updated 4 years ago
- A lightweight service exchanging OIDC tokens for Tailscale Auth Keys☆31Apr 28, 2023Updated 3 years ago
- Adds a `with_retry` block for writing `with` statements that are automatically retried.☆11May 22, 2019Updated 7 years ago
- A trivial wrapper around spf13/cobra to simplify some basic patterns☆21Oct 23, 2023Updated 2 years ago
- ☆25Feb 11, 2024Updated 2 years ago
- Multi-arch templates for OpenFaaS☆12Sep 11, 2020Updated 5 years ago
- The Dirty Pipe Vulnerability☆46Mar 8, 2022Updated 4 years ago
- Pusher module for React Native☆11Oct 14, 2015Updated 10 years ago
- PoC created to measure the performance provided by WASM☆28Apr 24, 2026Updated 4 months ago
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- A Kubernetes Operator for managing multi-tenant workloads☆30Dec 14, 2018Updated 7 years ago
- Container image provenance spec that allows tracing CVEs detected in registry images back to a CVE's source of origin.☆45Oct 30, 2023Updated 2 years ago
- A k3s packager and installer, primarily intended for airgapped deployments☆13Jan 25, 2021Updated 5 years ago
- Burp Extender to add unique form tokens to scanner requests.☆14Nov 5, 2024Updated last year
- How to build your own policy engine☆14Jul 24, 2022Updated 4 years ago
- BurpCSJ extension for Burp Pro - Crawljax Selenium JUnit integration☆34Dec 22, 2014Updated 11 years ago
- This is a custom SSM agent which is sorta functional☆17Jul 5, 2021Updated 5 years ago