stackrox / collector
Runtime data collection for the StackRox Kubernetes Security Platform using eBPF
☆51Updated this week
Related projects ⓘ
Alternatives and complementary repositories for collector
- Generate a variety of suspect actions that are detected by Falco rulesets☆93Updated this week
- ptrace-based event producer for udig☆67Updated 2 years ago
- Kit for building Falco drivers: kernel modules or eBPF probes☆64Updated last week
- ✨🔐 CNCF Fuzzers☆112Updated last week
- Evolution process of The Falco Project☆48Updated this week
- Sigstore Policy Controller - an admission controller that can be used to enforce policy on a Kubernetes cluster based on verifiable supp…☆123Updated this week
- OCI hook to trace syscalls and generate a seccomp profile☆303Updated this week
- Kubernetes Pod Security Standards implementation - https://github.com/kubernetes/enhancements/blob/master/keps/sig-auth/2579-psp-replacem…☆98Updated this week
- Response Engine for managing threats in your Kubernetes☆118Updated this week
- Trace deep kernel events through eBPF and lsm hooks☆33Updated 3 years ago
- 🐝 BPFBox 📦 Exploring process confinement in eBPF☆101Updated 9 months ago
- Falco rule repository☆96Updated 2 weeks ago
- The regolibrary package contains the controls Kubescape uses for detecting misconfigurations in Kubernetes manifests.☆121Updated this week
- Artifact Ratification Framework☆224Updated this week
- A replacement for "kubectl exec" that works over WebSocket connections.☆27Updated 7 months ago
- Supporting code and demos for KubeCon EU 2023 talk "Malicious Compliance: Reflections on Trusting Container Image Scanners"☆66Updated 11 months ago
- go library for processing container images and simulating a squash filesystem☆81Updated this week
- LSM BPF module to block pwnkit (CVE-2021-4034) like exploits☆20Updated 2 years ago
- ☆30Updated last month
- Service implementation for a Kubernetes Dynamic Webhook controller for interacting with Anchore☆64Updated this week
- A process level network security monitoring and enforcement project for Kubernetes, using eBPF☆40Updated 4 years ago
- Operator to deploy confidential containers runtime☆112Updated this week
- Ansible playbooks to provision firecracker VMs and run Falco kernel tests☆11Updated 6 months ago
- Create Kubernetes AdmissionReview requests from Kubernetes resource manifests☆108Updated this week
- Manage AppAmormor profiles for Kubernetes cluster☆38Updated last year
- ☆19Updated 7 months ago
- The Falco Project Community☆51Updated last month
- Falco plugins registry☆85Updated this week
- ☆24Updated 6 months ago
- A Go implementation of in-toto. in-toto is a framework to protect software supply chain integrity.☆130Updated this week