{"id":13508174,"url":"https://github.com/cilium/tetragon","last_synced_at":"2025-05-12T15:33:11.548Z","repository":{"id":37085733,"uuid":"473137633","full_name":"cilium/tetragon","owner":"cilium","description":"eBPF-based Security Observability and Runtime Enforcement","archived":false,"fork":false,"pushed_at":"2025-05-08T13:00:48.000Z","size":78080,"stargazers_count":3949,"open_issues_count":260,"forks_count":415,"subscribers_count":53,"default_branch":"main","last_synced_at":"2025-05-08T14:20:04.537Z","etag":null,"topics":["bpf","ebpf","kernel","kubernetes","security"],"latest_commit_sha":null,"homepage":"https://tetragon.io","language":"C","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cilium.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":"CONTRIBUTING.md","funding":null,"license":"LICENSE","code_of_conduct":"CODE_OF_CONDUCT.md","threat_model":null,"audit":null,"citation":null,"codeowners":".github/CODEOWNERS","security":"SECURITY.md","support":null,"governance":null,"roadmap":null,"authors":"AUTHORS","dei":null,"publiccode":null,"codemeta":null,"zenodo":null}},"created_at":"2022-03-23T10:25:36.000Z","updated_at":"2025-05-08T08:49:38.000Z","dependencies_parsed_at":"2023-10-14T16:28:08.730Z","dependency_job_id":"fdf2a476-5f7e-4e8e-b2b1-0beeb212d8e2","html_url":"https://github.com/cilium/tetragon","commit_stats":{"total_commits":3980,"total_committers":117,"mean_commits":34.01709401709402,"dds":0.828643216080402,"last_synced_commit":"001d8a72125e0db2f39db775feb37c3a38407410"},"previous_names":[],"tags_count":51,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cilium%2Ftetragon","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cilium%2Ftetragon/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cilium%2Ftetragon/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cilium%2Ftetragon/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cilium","download_url":"https://codeload.github.com/cilium/tetragon/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":253765965,"owners_count":21960824,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bpf","ebpf","kernel","kubernetes","security"],"created_at":"2024-08-01T02:00:49.278Z","updated_at":"2025-05-12T15:33:06.534Z","avatar_url":"https://github.com/cilium.png","language":"C","funding_links":[],"categories":["Projects Related to eBPF","C","Go","Security","By Industry","Tools","Observability and Monitoring 🛰️","security","Observability \u0026 Monitoring","BPF and eBPF Projects","eBPF 相关项目","By Language","Cilium related projects","Container and Kubernetes Security","Container Security","🔐 Supply Chain \u0026 Runtime Security"],"sub_categories":["Security","DevOps","Detection","Notes","安全","C","Runtime Security","Image Distribution \u0026 Caching"],"readme":"\u003ca href=\"https://tetragon.io\"\u003e\n  \u003cpicture\u003e\n    \u003csource media=\"(prefers-color-scheme: light)\" srcset=\"docs/assets/icons/logo.svg\" width=\"400\"\u003e\n    \u003cimg src=\"docs/assets/icons/logo-dark.svg\" width=\"400\"\u003e\n  \u003c/picture\u003e\n\u003c/a\u003e\n\n[![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)\n[![License](https://img.shields.io/badge/license-BSD-blue.svg)](https://opensource.org/license/bsd-2-clause/)\n[![License](https://img.shields.io/badge/license-GPL-blue.svg)](https://opensource.org/license/gpl-2-0/)\n\n---\n\nCilium’s new [Tetragon](https://tetragon.io) component enables powerful\nreal-time, eBPF-based Security Observability and Runtime Enforcement.\n\nTetragon detects and is able to react to security-significant events, such as\n\n- Process execution events\n- System call activity\n- I/O activity including network \u0026 file access\n\nWhen used in a Kubernetes environment, Tetragon is Kubernetes-aware - that is,\nit understands Kubernetes identities such as namespaces, pods and so on - so\nthat security event detection can be configured in relation to individual\nworkloads.\n\n[![Tetragon Overview Diagram](https://github.com/cilium/tetragon/blob/main/docs/static/images/smart_observability.png)](https://tetragon.io/docs/overview/)\n\nSee more about [how Tetragon is using eBPF](https://tetragon.io/docs/overview#functionality-overview).\n\n## Getting started\n\nRefer to the [official documentation of Tetragon](https://tetragon.io/docs/).\n\nTo get started with Tetragon, take a look at the [getting started\nguides](https://tetragon.io/docs/getting-started/) to:\n- [Try Tetragon on Kubernetes](https://tetragon.io/docs/getting-started/install-k8s/)\n- [Try Tetragon on Linux](https://tetragon.io/docs/getting-started/install-docker/)\n- [Deploy Tetragon](https://tetragon.io/docs/installation/)\n- [Install the Tetra CLI](https://tetragon.io/docs/installation/tetra-cli/)\n\nTetragon is able to observe critical hooks in the kernel through its sensors\nand generates events enriched with Linux and Kubernetes metadata:\n1. **Process lifecycle**: generating `process_exec` and `process_exit` events\n   by default, enabling full process lifecycle observability. Learn more about\n   these events on the [process lifecycle use case page](https://tetragon.io/docs/use-cases/process-lifecycle/).\n1. **Generic tracing**: generating `process_kprobe`, `process_tracepoint` and\n   `process_uprobe` events for more advanced and custom use cases. Learn more\n   about these events on the [TracingPolicy concept page](https://tetragon.io/docs/concepts/tracing-policy/)\n   and discover [multiple use cases](https://tetragon.io/docs/use-cases/) like:\n   - [🌏 network observability](https://tetragon.io/docs/use-cases/network-observability/)\n   - [📂 filename access](https://tetragon.io/docs/use-cases/filename-access/)\n   - [🔑 credentials monitoring](https://tetragon.io/docs/use-cases/linux-process-credentials/)\n   - [🔓 privileged execution](https://tetragon.io/docs/use-cases/process-lifecycle/privileged-execution/)\n\nSee further resources:\n- [Conference Talks, Books, Blog Posts, and Labs](https://tetragon.io/docs/resources/)\n- [Frequently Asked Question](https://tetragon.io/docs/installation/faq/)\n- [References](https://tetragon.io/docs/reference/)\n\n## Join the community\n\nJoin the Tetragon [💬 Slack channel](https://slack.cilium.io) and the\n[📅 Community Call](https://isogo.to/tetragon-meeting-notes) to chat with\ndevelopers, maintainers, and other users. This is a good first stop to ask\nquestions and share your experiences.\n\n## How to Contribute\n\nFor getting started with local development, you can refer to the\n[Contribution Guide](https://tetragon.io/docs/contribution-guide/). If\nyou plan to submit a PR, please [\"sign-off\"](https://tetragon.io/docs/contribution-guide/developer-certificate-of-origin/)\nyour commits.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcilium%2Ftetragon","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcilium%2Ftetragon","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcilium%2Ftetragon/lists"}