Awesome Cloud Native
Section: Security & Compliance · Container signing, verification, and provenance powered by Sigstore.
FreshScore 87
Entry
cosign
Appears in 6 awesome lists
Container signing, verification, and transparency log for OCI artifacts.
Open github.comsigstore/cosign
Found in these lists
Awesome Docker
Section: Supply Chain · Container signing, verification, and transparency log for OCI artifacts.
FreshScore 92
Awesome Go
Section: Zero Trust · Container Signing, Verification and Storage in an OCI registry.
FreshScore 94
Awesome Stars
Section: Go · Code signing and transparency for containers and binaries
SlowScore 58
go-awesome
Section: 容器技术 · 容器签名和验证
StaleScore 56
awesome-go
Section: Other · Code signing and transparency for containers and binaries
FreshScore 81
Often listed next to it
Darkmoon
🟢⚠️ — Autonomous AI penetration-testing platform that orchestrates specialized web, AD, Kubernetes, CMS, and framework agents through an MCP-controlled Docker toolbox with local privacy-tokenization for sensitive target data. — note: GPL-3.0 licensed; heavy Docker/LLM stack, use only for…;…
In 10 listsDetails
Trivy
A Simple and Comprehensive Vulnerability Scanner for Containers and other Artifacts, Suitable for CI. Trivy detects vulnerabilities of OS packages (Alpine, RHEL, CentOS, etc.) and application dependencies (Bundler, Composer, npm, yarn, etc.). Checks containers and filesystems.
In 9 listsDetails
Keycloak
🆓 Open-source Identity and Access Management. Supports OIDC, OAuth 2 and SAML 2, LDAP and AD directories, password policies.
In 7 listsDetails
Checkov
Static analysis for infrastructure as code manifests (Terraform, Kubernetes, Cloudformation, Helm, Dockerfile, Kustomize) find security misconfiguration and fix them.
In 7 listsDetails
brood-box
🟢 — Experimental runner for coding agents in hardware-isolated microVMs with copy-on-write workspace snapshots, egress profiles, selective secret forwarding, and file-by-file review before applying changes. (Stacklok) — note: APIs and behavior are explicitly experimental; workspace-mode=direct…
In 6 listsDetails
syft
star:8295 A CLI tool and Go library for generating a Software Bill of Materials (SBOM) from container images and filesystems.
In 6 listsDetails
Pomerium
Pomerium is a zero-trust context and identity aware access gateway inspired by BeyondCorp.
In 6 listsDetails
hashicorp/vault
A tool for securely accessing secrets. A secret is anything that you want to tightly control access to, such as API keys, passwords, certificates, and more.
In 7 listsDetails