testifysec / go-ima
go-ima is a tool that checks if a file has been tampered with. It is useful in ensuring integrity in CI systems
☆13Updated last year
Related projects ⓘ
Alternatives and complementary repositories for go-ima
- Red team tool that emulates the SolarWinds CI compromise attack vector.☆22Updated 8 months ago
- An query language and interactive tooling to work with SBOM data.☆14Updated last month
- efficient linux security monitoring☆25Updated 6 years ago
- A trivial wrapper around spf13/cobra to simplify some basic patterns☆22Updated last year
- Go implementation of witness☆26Updated this week
- Kubernetes security scanner based on the open-source container vulnerability scanner Trivy.☆23Updated 4 years ago
- Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect☆22Updated this week
- A curated list of awesome CNAB (Cloud Native Applications Bundles) | https://cnab.io/☆15Updated 3 years ago
- TACOS framework structural details☆20Updated 11 months ago
- vexctl is a tool to attest VEX impact statements☆44Updated last year
- To manage Docker Content Trust and Notary certificates☆12Updated 2 weeks ago
- Tool to automate build instructions generation☆29Updated this week
- A docker CLI plugin for verifying signed attestations on images☆13Updated last year
- Enable Falco to read audit logs from EKS☆11Updated 3 years ago
- replace a k8s deployment by a proxy to a pod in another cluster☆10Updated 3 years ago
- A library for representing OCI image layers in an abstract filesystem☆27Updated 4 years ago
- Wireguard operator☆21Updated 5 years ago
- Kubernetes tools in a "distroless" container☆13Updated last year
- ☆19Updated 5 years ago
- Ergonomic OCI registry Go API☆16Updated last year
- ☆21Updated last year
- Inspect SSL/TLS traffic using eBPF☆16Updated last month
- ☆31Updated 3 months ago
- Home of code related to security of network systems.☆23Updated last year
- Sigstore user stories☆29Updated last year
- ☆17Updated 2 years ago
- ☆12Updated 4 years ago
- Go beyond package manager discovery for SBOM☆19Updated 2 years ago
- A Kubewarden Policy that detects usage of deprecated and dropped Kubernetes resources☆15Updated last week
- Create a dedicated IaaS instance per Pod to mitigate container breakout (including CPU vulnerabilities depending on the instance type)☆22Updated 4 years ago