{"id":30085968,"url":"https://github.com/cisagov/thorium","last_synced_at":"2026-03-05T19:13:15.214Z","repository":{"id":307569383,"uuid":"967688555","full_name":"cisagov/thorium","owner":"cisagov","description":"A scalable file analysis and data generation platform that allows users to easily orchestrate arbitrary docker/vm/shell tools at scale.","archived":false,"fork":false,"pushed_at":"2025-09-26T19:30:03.000Z","size":31010,"stargazers_count":942,"open_issues_count":13,"forks_count":112,"subscribers_count":23,"default_branch":"main","last_synced_at":"2025-09-26T20:20:39.529Z","etag":null,"topics":["docker","kubernetes","malware-analysis","rust","rust-lang","scalability"],"latest_commit_sha":null,"homepage":"https://cisagov.github.io/thorium/","language":"Rust","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"other","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/cisagov.png","metadata":{"files":{"readme":"README.md","changelog":"CHANGELOG.md","contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2025-04-16T21:01:16.000Z","updated_at":"2025-09-26T19:30:07.000Z","dependencies_parsed_at":null,"dependency_job_id":"74e56bc9-d728-4f4a-a9f9-88580191e18d","html_url":"https://github.com/cisagov/thorium","commit_stats":null,"previous_names":["cisagov/thorium"],"tags_count":3,"template":false,"template_full_name":null,"purl":"pkg:github/cisagov/thorium","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cisagov%2Fthorium","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cisagov%2Fthorium/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cisagov%2Fthorium/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cisagov%2Fthorium/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/cisagov","download_url":"https://codeload.github.com/cisagov/thorium/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/cisagov%2Fthorium/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":279019157,"owners_count":26086685,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-10-14T02:00:06.444Z","response_time":60,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["docker","kubernetes","malware-analysis","rust","rust-lang","scalability"],"created_at":"2025-08-09T01:02:23.692Z","updated_at":"2025-10-14T14:47:06.584Z","avatar_url":"https://github.com/cisagov.png","language":"Rust","funding_links":[],"categories":["rust"],"sub_categories":[],"readme":"\u003cdiv align=\"center\"\u003e\n  \u003cpicture\u003e\n    \u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"./api/docs/src/static_resources/logo_dark.svg\"\u003e\n    \u003csource media=\"(prefers-color-scheme: light)\" srcset=\"./api/docs/src/static_resources/logo_light.svg\"\u003e\n        \u003cimg alt=\"Thorium\"\n         src=\"./api/docs/src/static_resources/logo_dark.svg\"\n         width=\"50%\"\u003e\n  \u003c/picture\u003e\n\n[Documentation] | [Install Documentation] | [Single Node Install Documentation]\n\u003c/div\u003e\n\nA scalable file analysis and data generation platform that allows users to\neasily orchestrate arbitrary docker/vm/shell tools at scale.\n\n[Documentation]: https://cisagov.github.io/thorium/intro.html\n[Install Documentation]: https://cisagov.github.io/thorium/admins/deploy/deploy.html\n[Single Node Install Documentation]: https://github.com/cisagov/thorium/blob/main/minithor/README.md\n\n\n### Features\n---\n- Highly scalable analysis of arbitrary files/repos\n- Near zero-cost analysis tool integration\n- Static and dynamic analysis sandboxes\n- User friendly interfaces: GUI + CLI\n- RESTful API for automated access to data\n- Multi-tenant friendly permission system\n- Full-text search of analysis results\n- Key/Value tags for labeling data\n\n### FAQ\n---\n\n##### What Does Thorium actually do?\n\nThorium allows for developers or analysts to:\n - Easily scale up and orchestrate docker or baremetal based tools\n - Easily search and use results from tools\n - Comment and share files, tags, and results between users/analysts\n\n##### Are any tools included?\n\nCurrently no there are no tools included in Thorium but we plan on releasing some\nsoon. We hope to continue to release tools as well as allow for curated\ncontributions from the community.\n\n##### What do I need to deploy Thorium?\n\nThorium was built and intended to run in a K8s cluster but it can also run on a\nlaptop using minikube. However it is important to note the single node deployment\nwas not intended for production and reliability/stability may be less then stellar.\nTo deploy a single node instance follow the Minithor docs\n[here](https://github.com/cisagov/thorium/blob/main/minithor/README.md).\n\nFor full production deployment on a cluster you will need the following:\n- Block store provider\n- S3 storage\n\nFor on prem deployments we recommend CEPH. To deploy Thorium on a cluster\nfollow the docs [here](https://cisagov.github.io/thorium/admins/deploy/deploy.html).\n\n##### How scalable is Thorium?\n\nThorium is almost infinitely scalable if you have the compute/storage. Thorium has\nbeen tested to support billions of samples and utilization of large amounts of\ncompute. Thorium partitions data temporally and allows admins to\nconfigure how scalable they want the system to be.\n\n##### Does Thorium call home or send any telemetry out?\n\nNo, Thorium does not send any telemetry out.\n\n##### How large of files/repos does Thorium support?\n\nCurrently, Thorium supports up to ~50 GiB per file/repo. This is after\ncompression and so it is a fuzzy limit but it should never be significantly\nsmaller then 50 GiB. We do have plans to increase this limit in the future\nplease create an issue if you feel this would be useful.\n\n##### Can you add more documentation and examples of using Thorium and what it can do?\n\nYes, we plan to continue to expand our documentation and examples soon.\n\n### Funded by\n---\n\u003cdiv align=\"center\"\u003e\n  \u003cpicture\u003e\n    \u003csource media=\"(prefers-color-scheme: dark)\" srcset=\"./api/docs/src/static_resources/funders_dark.png\"\u003e\n    \u003csource media=\"(prefers-color-scheme: light)\" srcset=\"./api/docs/src/static_resources/funders.png\"\u003e\n        \u003cimg alt=\"Thorium\"\n         src=\"./api/docs/src/static_resources/funders_dark.png\"\n  \u003c/picture\u003e\n\u003c/div\u003e\n\nContact us at thorium@sandia.gov.\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcisagov%2Fthorium","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fcisagov%2Fthorium","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fcisagov%2Fthorium/lists"}