21 results found Sort:

747
20.4k
apache-2.0
182
Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
Created 2015-09-09
1,086 commits to master branch, last one 15 days ago
708
6.8k
other
212
Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager.
Created 2014-01-08
8,207 commits to master branch, last one 5 days ago
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or maki...
Created 2020-08-19
116 commits to main branch, last one 6 months ago
Provide powerful tools for seccomp analysis
Created 2017-05-27
271 commits to master branch, last one about a month ago
A stupid game for learning about containers, capabilities, and syscalls.
Created 2016-05-23
129 commits to master branch, last one 2 years ago
176
811
lgpl-2.1
34
The main libseccomp repository
Created 2015-01-15
1,030 commits to main branch, last one 3 days ago
The Kubernetes Security Profiles Operator
Created 2020-04-24
2,735 commits to main branch, last one a day ago
31
299
apache-2.0
8
vArmor is a cloud native container sandbox system based on AppArmor/BPF/Seccomp. It also includes multiple built-in protection rules that are ready to use out of the box.
Created 2023-08-08
624 commits to main branch, last one a day ago
56
270
bsd-2-clause
14
The libseccomp golang bindings repository
Created 2015-06-10
114 commits to main branch, last one 4 months ago
A set of curated exercises to help you prepare for the CKS exam
Created 2021-11-06
248 commits to main branch, last one 2 years ago
10
194
apache-2.0
2
minT(oolkit): Mint awesome, secure and production ready containers just the way you need them! Don't change anything in your container image and minify it by up to 30x (and for compiled languages even...
Created 2024-03-05
1,278 commits to master branch, last one 3 days ago
eBPF Python runtime sandbox with seccomp (Blocks RCE).
Created 2022-07-02
168 commits to master branch, last one 16 days ago
21
133
gpl-3.0
10
Rust implementation of PRoot, a ptrace-based sandbox
Created 2017-02-12
223 commits to master branch, last one about a year ago
6
118
apache-2.0
5
🔍 Trace syscalls from user-space functions, by using eBPF
Created 2023-09-20
67 commits to main branch, last one a day ago
19
80
apache-2.0
166
Go library for installing a seccomp BPF system call filter.
Created 2018-04-25
50 commits to main branch, last one 23 days ago
12
77
apache-2.0
19
Provides easy-to-use Linux seccomp-bpf jailing.
Created 2021-05-19
93 commits to main branch, last one 5 days ago
8
59
unlicense
7
Record process launches and files read and written by each process
Created 2017-04-11
88 commits to master branch, last one 15 days ago
3
43
apache-2.0
1
Going Florida on container keyring masks. A tool to demonstrate the ineffectivity containers have on isolating Linux Kernel keyrings.
Created 2020-07-22
59 commits to master branch, last one 4 years ago
10
42
apache-2.0
20
agent for handling seccomp descriptors for container runtimes
Created 2020-10-26
97 commits to main branch, last one 10 months ago
📦 Run untrusted python code on the server.
Created 2023-07-20
37 commits to main branch, last one about a year ago
DSL language to write seccomp filters
Created 2021-01-27
80 commits to main branch, last one 8 months ago