An open API service indexing awesome lists of open source software.

Projects in Awesome Lists tagged with container-security

A curated list of projects in awesome lists tagged with container-security .

https://github.com/madhuakula/kubernetes-goat

Kubernetes Goat is a "Vulnerable by Design" cluster environment to learn and practice Kubernetes security using an interactive hands-on playground 🚀

blueteam cloud-native cloud-security cloudsecurity container container-security devsecops docker hacking infrastructure k8s kubernetes kubernetes-goat kubernetes-security owasp pentesting redteam security vulnerable-app

Last synced: 13 May 2025

https://github.com/chaitin/veinmind-tools

veinmind-tools 是由长亭科技自研,基于 veinmind-sdk 打造的容器安全工具集

cloud-native cloud-security container-security containerd docker image-security security

Last synced: 15 May 2025

https://github.com/opengovern/opensecurity

opensecurity: open-source security and compliance. See and secure your cloud, containers, code, networks, deployments, devices. Define your rules, get precise checks, fix gaps fast. Streamlined audits. No fluff.

audit cloud-security compliance container-security cspm devsecops optimization oss policy-as-code security security-auditing-tool

Last synced: 15 May 2025

https://github.com/Vinum-Security/kubernetes-security-checklist

Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)

checklist cloud-native-security container-security devsecops kubernetes kubernetes-security requirments security

Last synced: 29 Apr 2025

https://github.com/sysdiglabs/kube-psp-advisor

Help building an adaptive and fine-grained pod security policy

container-security kubernetes psp security-tools

Last synced: 06 Apr 2025

https://github.com/Metarget/k0otkit

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

container-escape container-injection container-security fileless-attack hack-k8s k8s kubernetes-security post-penetration reverse-shell

Last synced: 29 Apr 2025

https://github.com/metarget/k0otkit

k0otkit is a universal post-penetration technique which could be used in penetrations against Kubernetes clusters.

container-escape container-injection container-security fileless-attack hack-k8s k8s kubernetes-security post-penetration reverse-shell

Last synced: 13 Apr 2025

https://github.com/jetstack/paranoia

Inspect certificate authorities in container images

certificate-authority container-security containers security tls

Last synced: 09 Apr 2025

https://github.com/r0binak/MTKPI

🧰 Multi Tool Kubernetes Pentest Image

container-security image kubernetes kubernetes-security pentest redteam

Last synced: 11 May 2025

https://github.com/twistlock/whoc

A container image that exfiltrates the underlying container runtime to a remote server

container-security containers

Last synced: 30 Apr 2025

https://github.com/chaitin/libveinmind

一个由长亭自研,直观而可扩展的容器安全 SDK

cloud-native container-security containerd docker golang-library image-security python-library sdk

Last synced: 09 Apr 2025

https://github.com/grantseltzer/karn

Simplifying Seccomp enforcement in containerized or non-containerized apps

container-security containers karn seccomp seccomp-filter security security-hardening security-tools

Last synced: 12 May 2025

https://github.com/falcosecurity-retire/falco-security-workshop

Container Security Workshop covering using Falco on Kubernetes.

cncf container-security containers docker kubernetes kubernetes-security

Last synced: 22 Apr 2025

https://github.com/appvia/cosign-keyless-admission-webhook

Kubernetes admission webhook that uses cosign verify to check the subject and issuer of the image matches what you expect

container-security cosign hacktoberfest kubernetes kubernetes-admission-webhook oidc sigstore

Last synced: 31 Dec 2024

https://github.com/blues-man/vote-app-gitops

A demo of cloud-native Inner Loop and Outer Loop controlling a 2-tier app (Python + Go) with Red Hat OpenShift using Tekton Pipelines, Argo CD GitOps, Eclipse Che aka OpenShift DevSpaces and Quay.io registry

argocd cicd cloud-native container-security devsecops-pipeline gitops kubernetes openshift tekton-pipelines

Last synced: 10 Apr 2025

https://github.com/kube-tarian/sigrun

Sign your artifacts, source code or container images using Sigstore tools, Save the Signatures you want to use, and Validate & Control the deployments to allow only the known Sources based on Signatures, Maintainers & other payloads automatically.

artifacts container-security containers containersecurity cosign fulcio gatekeeper kubernetes kubernetes-security kubernetessecurity opa open-policy-agent pods policy-as-code rekor signature signature-verification sigstore

Last synced: 01 May 2025

https://github.com/stelligent/aws-anchore-engine-scanner

This guide details steps and procedures you can follow to create, launch and implement your own standalone container scanning solution within AWS ecosystem. This approach uses an opensource container scanning tool called Anchore Engine as a proof-of-concept and provides examples of how Anchore integrates with your favorite CI/CD systems orchestration platforms.

anchore-cli anchore-engine aws container-security devops devsecops docker ecs

Last synced: 09 Apr 2025

https://github.com/onzack/kube-scout

Vulnerability Management Tool for Kubernetes and Containers

container-security docker kubernetes

Last synced: 13 Apr 2025

https://github.com/houssemdellai/kubernetes-allowed-registries-policy

Demoing whitelisting Container Registries in Kubernetes using OPA/Gatekeeper policy.

aks-kubernetes-cluster container-registry container-security policy security

Last synced: 15 Mar 2025

https://github.com/sysdiglabs/security-playground

This is a sample application which runs an HTTP web server and allows to read and write files and exec commands

container-security kubernetes security-tools

Last synced: 22 Nov 2024

https://github.com/veilair/docker-development

An ongoing curated list of awesome frameworks, important books, articles, talks, libraries, learning tutorials, best practices and technical resources about Docke

container container-image container-linux container-management container-runtime container-security containerization containers docker docker-apps docker-build docker-cloud docker-compose docker-container docker-hub docker-image docker-registry

Last synced: 28 Feb 2025

https://github.com/sysdiglabs/secure-image-scanning

Image scanning with Sysdig Secure

container-security security-tools

Last synced: 16 Mar 2025

https://github.com/meysam81/build-docker

A shorthand GitHub Action for building Docker and pushing to ghcr.io and other repositories. An smaller alternative to combining qemu and other steps.

automation buildx ci-cd composite-action container-image container-registry container-security devops docker docker-build docker-push docker-scout dockerhub ghcr github-action github-actions kubescape multi-platform security-scanning vulnerability-scanning

Last synced: 11 Apr 2025