Stars
TerraGoat is Bridgecrew's "Vulnerable by Design" Terraform repository. TerraGoat is a learning and training project that demonstrates how common configuration errors can find their way into product…
Extensible auto-tagger for your IaC files. The ultimate way to link entities in the cloud back to the codified resource which created it.
tas50 / mondoo-operator
Forked from mondoohq/mondoo-operator☸️ Mondoo Client Kubernetes Operator
Informative site with EoL dates of everything
openmediavault is the next generation network attached storage (NAS) solution based on Debian Linux. Thanks to the modular design of the framework it can be enhanced via plugins. openmediavault is …
awesome resources about cloud native security 🐿
Vulnerability scanner written in Go which uses the data provided by https://osv.dev
An open source, cloud-native security to protect everything from build to runtime
A set of GitHub actions for validating your projects with a policy
A program which ensures source code files have copyright license headers by scanning directory patterns recursively
open source, cloud-native, graph-based asset inventory
Minimal Docker Images for testing
An open-source data logging library for machine learning models and data pipelines. 📚 Provides visibility into data quality & model performance over time. 🛡️ Supports privacy-preserving data collec…
Packer plugin cnspec by Mondoo - Build machine images free of security misconfigurations and vulnerabilities!
Ranger RPC is a simple and fast proto-based RPC framework
List of changes announced for AWS that may break existing code
SQL powered operating system instrumentation, monitoring, and analytics.
OpenSSF Scorecard - Security health metrics for Open Source
Supply-chain Levels for Software Artifacts
This is a step-by-step guide to implementing a DevSecOps program for any size organization
Linux, macOS and Windows Install scripts for cnquery & cnspec
Ruby library to perform server-side tracking into the official Google Analytics Measurement Protocol
Fork of Gerrit Pape's runit init/services management and execution framework.