Carol Valencia

signalhound. Signalhound monitors TestGrid dashboards to identify and summarize test failures and flaking patterns in Kubernetes CI/CD pipelines.

cloud-provider-kind. Cloud provider for KIND clusters

memorials. 🕯️💐CNCF Community Memorials

crd-to-sample-yaml. Generate a sample YAML file from a CRD and view it rendered on a nice website

communitygroups. 👩🏿‍💻👨🏿‍💻👩🏾‍💻👨🏾‍💻👩🏽‍💻👨🏽‍💻👩🏼‍💻👨🏼‍💻👩🏻‍💻👨🏻‍💻CNCF Community Groups (formerly meetups)

calico. Cloud native networking and network security

elastic-container. Stand up a simple Elastic container with Kibana, Fleet, and the Detection Engine

awesome-cicd-attacks. Practical resources for offensive CI/CD security research. Curated the best resources I've seen since 2021.

MinikubeWindowsContainers. This repo describes the steps for a prototype of Windows on MiniKube

cloudsec-ninja. Become a CloudSecurity Engineer using the AWS Cloud for free. ☁️🔐🥷

httpbin. HTTP Request & Response Service, written in Python + Flask.

kubeadm-scripts. Scripts & Kubernetes manifests for Kubeadm Kubernetes cluster setup

pyroscope. Continuous Profiling Platform. Debug performance issues down to a single line of code

reaper. Live validation proxy tool for testing web app vulnerabilities

BioDrop. Connect to your audience with a single link. Showcase the content you create and your projects in one place. Make it easier for people to find, follow and subscribe.

learning-ebpf. Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more

website. Kubernetes website and documentation repo:

capsule. Multi-tenancy and policy-based framework for Kubernetes.

morningpost. A project template for a personalised newspaper in Go

cilium. eBPF-based Networking, Security, and Observability

all-things-advocacy. Conference talks, podcasts, speaking engagements...oh my!

grace. :screwdriver: It's strace, with colours.

topaz. Cloud-native authorization for modern applications and APIs

guac. GUAC aggregates software security metadata into a high fidelity graph database.

demo-fileless. Go

ebpf-slide. Collection of Linux eBPF slides/documents.

gitjacker. 🔪 :octocat: Leak git repositories from misconfigured websites

lazytrivy. Vulnerability scanning just got lazier

ThreatMapper. Open Source Cloud Native Application Protection Platform (CNAPP)

chain-bench. An open-source tool for auditing your software supply chain stack for security compliance based on a new CIS Software Supply Chain benchmark.

trivy-operator. Kubernetes-native security toolkit

cloudquery. Data pipelines for cloud config and security data. Build cloud asset inventory, CSPM, FinOps, and vulnerability management solutions. Extract from AWS, Azure, GCP, and 70+ cloud and SaaS sources.

trivy-action. Runs Trivy as GitHub action to scan your Docker container image for vulnerabilities

CVE-2022-0847. The Dirty Pipe Vulnerability

settingLimitsToContainers. You should be setting limits to your Linux containers.

defsec. Trivy's misconfiguration scanning engine

csp-integration-samples. Aqua CSP integrations Samples

vulnerability-operator. Scans SBOMs for vulnerabilities with Grype

security-review.

terraform-provider-aquasec. The Aqua Security Provider for Terraform allows you to declaratively define the configuration of your Aqua platform.

workshop-cloud-native-security. workshop about cloud-native security

peridot. Developer machine management for Linux/OSX. Think Terraform/Ansible for your dotfiles/packages! :gear::house:

developers-conferences-agenda. developers.events is a community-driven platform listing developer/tech conferences and Calls for Papers (CFPs) worldwide with a list, a calendar and a map view. It helps organizers, speakers, sponsors & attendees.

kubescape. Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.

build-security-action. GitHub Action for Aqua Build Security

gifski. GIF encoder based on libimagequant (pngquant). Squeezes maximum possible quality from the awful GIF format.

tfsec-pr-commenter-action. Add comments to pull requests where tfsec checks have failed

cloud-metadata. Common metadata repository for CSPM and TFSec checks

docker-bench-security. The Docker Bench for Security is a script that checks for dozens of common best-practices around deploying Docker containers in production.

DescomplicandoDocker. Descomplicando o Docker, o livro.

linux-insides. A book-in-progress about the Linux kernel and its insides.

libbpfgo. eBPF library for Go. Powered by libbpf.

container-security-checklist. Checklist for container security - devsecops practices

btfhub. BTFhub, in collaboration with the BTFhub Archive repository, supplies BTF files for all published kernels that lack native support for embedded BTF. This joint effort ensures that even kernels without built-in BTF support can effectively leverage the benefits of eBPF programs, promoting compatibility across various kernel versions.

tracee-action. Protect GitHub Actions with Tracee

samples. Learn how to develop with Okteto

aqua-dash. Sample Aqua CSP dashboard

saas-api-samples. Sample code snippets for consuming the CloudSploit API

tfsec. Tfsec is now part of Trivy

devops-exercises. Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP, DNS, Elastic, Network, Virtualization. DevOps Interview Questions

libbpf. Automated upstream mirror for libbpf stand-alone build.

trivy-plugin-kubectl. A Trivy plugin that scans the images of a kubernetes resource

terrascan. Detect compliance and security violations across Infrastructure as Code to mitigate risk before provisioning cloud native infrastructure.

appshield. Security configuration checks for popular cloud native applications and infrastructure.

litmus. Litmus helps SREs and developers practice chaos engineering in a Cloud-native way. Chaos experiments are published at the ChaosHub (https://hub.litmuschaos.io). Community notes is at https://hackmd.io/a4Zu_sH4TZGeih-xCimi3Q

harbor-scanner-trivy. Use Trivy as a plug-in vulnerability scanner in the Harbor registry

docker-bench. Checks whether Docker is deployed according to security best practices as defined in the CIS Docker Benchmark

linux-bench. Checks whether a Linux server according to security best practices as defined in the CIS Distribution-Independent Linux Benchmark

fanal. Static Analysis Library for Containers

simulator. Kubernetes Security Training Platform - focusing on security mitigation

kube-query. [EXPERIMENTAL] Extend osquery to report on Kubernetes

tag-contributor-strategy. CNCF Technical Advisory Group on Contributor Strategy -- maintainer relations, building up contributors, governance, graduation, and more.

starboard-lens-extension. Lens extension for viewing Starboard security information

binfinder. Find binary files not installed through package manager

Certified-Kubernetes-Security-Specialist. Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or making a pull request. All feedback for improvements are welcome. thank you.

learn-go-with-tests. Learn Go with test-driven development

contained.af. A stupid game for learning about containers, capabilities, and syscalls.

kubepug. Kubernetes PreUpGrade (Checker)

kubedoom. Kill Kubernetes pods by playing Id's DOOM!

conftest. Write tests against structured configuration data using the Open Policy Agent Rego query language

Free_CyberSecurity_Professional_Development_Resources. An awesome list of FREE resources for training, conferences, speaking, labs, reading, etc that are free. Originally built during COVID-19 for cybersecurity professionals with downtime can take advantage of to improve their skills and marketability to come out on the other side ready to rock. Now its taken on a life of its own and will persist, COVID be damned.

pixie. Instant Kubernetes-Native Application Observability

security-profiles-operator. The Kubernetes Security Profiles Operator

cloud-native-bpf-workshop. Shell

cloud-native-security-tutorial. Getting Started With Cloud Native Security

app-2025. Use architecture patterns from the future to build on AWS today!

starboard-operator. The Starboard Operator has moved to the main Starboard repo, and this one is being retired

starboard-octant-plugin. Octant plugin for viewing Starboard security information

kubectl-neat. Clean up Kubernetes yaml and json output to make it readable

learngo. ❤️ 1000+ Hand-Crafted Go Examples, Exercises, and Quizzes. 🚀 Learn Go by fixing 1000+ tiny programs.

CKA-StudyGuide. Study guide for the CKA exam

cka. Resources to get ready for CKA exam

cloudsploit. Cloud Security Posture Management (CSPM)

kubectl-who-can. Show who has RBAC permissions to perform actions on different resources in Kubernetes

kube-hunter. Hunt for security weaknesses in Kubernetes clusters

kube-bench. Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

tracee. Linux Runtime Security and Forensics using eBPF

shipper. Kubernetes native multi-cluster canary or blue-green rollouts using Helm

go-tutor. Golang exercises and solutions

kubicorn. Simple, cloud native infrastructure for Kubernetes.