
sandbox-runtime
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
configuration-auditingcontainer-securitydefensive-tools+4
6.8k

A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.

Kubernetes policy engine with OPA-based admission control, mutation, and audit for enforcing security and compliance configurations.

System utility that identifies and restarts daemons using outdated libraries after package upgrades to maintain security. Supports containers and…