cnspec
mondoohq/cnspecAn open source, cloud-native security to protect everything from build to runtime
cloud-infrastructure-securitycloud-securityconfiguration-auditing+6
443
mondoohq/cnspecAn open source, cloud-native security to protect everything from build to runtime
cybersecsi/raudiA repo to automatically generate and keep updated a series of Docker images through GitHub Actions.
cartography-cncf/cartographyPulls infrastructure assets and their relationships from 30+ cloud, identity, and SaaS platforms into a Neo4j graph for security queries and…
anchore/syftCLI tool and library for generating a Software Bill of Materials from container images and filesystems
cdxgen/cdxgenCreates CycloneDX Bill of Materials (BOM) for your projects from source and container images. Supports many languages and package managers. Integrate…
safedep/pmgPMG protects developers, AI agents from malicious open source packages using proxy, sandbox and SafeDep's threat intelligence feed.
provos/ironcurtainA secure* runtime for autonomous AI agents. Policy from plain-English constitutions. (*https://ironcurtain.dev)
kubescape/kubescapeOpen-source Kubernetes security platform scanning clusters, manifests, and images for misconfigurations, vulnerabilities, and compliance against NSA,…
microsoft/azurelinuxHardened, Azure-optimized Linux distribution built from Fedora sources with RPM packaging, supply chain security, and declarative configuration for…
stillbigjosh/kube-reaperScans Kubernetes clusters from any identity, flags dangerous permissions, and chains them into multi-step escalation paths to cluster compromise.
kstenerud/yoloaiYour agent is a security risk, so treat it like one. yoloAI does AI agent sandboxing right.
alixiacf/rep-openai-artifactoryForensic Analysis and Local Replication of the OpenAI-Artifactory Privilege Escalation Incident (CVE-2026-65616)
kalidoulabghaly/log4shell-exploitation-detectionHands-on project demonstrating Log4Shell exploitation, detection engineering with Splunk and auditd, and validated remediation in a containerized…
roxanne_ardary/aureaAurea is an open-source, AI-powered platform that secures infrastructure-as-code (IaC) across Terraform, Kubernetes, Docker, and Ansible. It…
spanwich/sel4-ics-gateway-demoDefensive security demo: seL4 microkernel gateway protecting vulnerable ICS from CVE-2019-14462
kinryulabs/rootpacket-cve-2026-31431Live cryptojacking toolkit with CVE-2026-31431 LPE exploit, container escape, kernel rootkit, and XMRig Monero miner, captured from real attacks for…
wenekar/procinfoGet process information straight from bash, minimal dependencies.
barappteam/nginx-cve-fixSource-built nginx 1.25.5 container with backported CVE-2026-42945 fix, OpenSSL bump, full provenance chain, and VEX attestation.