21 results found Sort:

760
20.9k
apache-2.0
183
Slim(toolkit): Don't change anything in your container image and minify it by up to 30x (and for compiled languages even more) making it secure too! (free and open source)
Created 2015-09-09
1,098 commits to master branch, last one 5 days ago
710
6.8k
other
212
Sandstorm is a self-hostable web productivity suite. It's implemented as a security-hardened web app package manager.
Created 2014-01-08
8,207 commits to master branch, last one about a month ago
Curated resources help you prepare for the CNCF/Linux Foundation CKS 2021 "Kubernetes Certified Security Specialist" Certification exam. Please provide feedback or requests by raising issues, or maki...
Created 2020-08-19
116 commits to main branch, last one 7 months ago
Provide powerful tools for seccomp analysis
Created 2017-05-27
278 commits to master branch, last one 9 days ago
A stupid game for learning about containers, capabilities, and syscalls.
Created 2016-05-23
129 commits to master branch, last one 2 years ago
176
819
lgpl-2.1
34
The main libseccomp repository
Created 2015-01-15
1,042 commits to main branch, last one 8 days ago
The Kubernetes Security Profiles Operator
Created 2020-04-24
2,832 commits to main branch, last one 19 hours ago
34
313
apache-2.0
8
vArmor is a cloud native container sandbox system based on AppArmor/BPF/Seccomp. It also includes multiple built-in protection rules that are ready to use out of the box.
Created 2023-08-08
655 commits to main branch, last one 26 days ago
56
274
bsd-2-clause
14
The libseccomp golang bindings repository
Created 2015-06-10
121 commits to main branch, last one 7 days ago
A set of curated exercises to help you prepare for the CKS exam
Created 2021-11-06
248 commits to main branch, last one 2 years ago
12
215
apache-2.0
2
minT(oolkit): Mint awesome, secure and production ready containers just the way you need them! Don't change anything in your container image and minify it by up to 30x (and for compiled languages even...
Created 2024-03-05
1,289 commits to master branch, last one 2 days ago
eBPF Python runtime sandbox with seccomp (Blocks RCE).
Created 2022-07-02
168 commits to master branch, last one 2 months ago
20
135
gpl-3.0
10
Rust implementation of PRoot, a ptrace-based sandbox
Created 2017-02-12
223 commits to master branch, last one 2 years ago
6
133
apache-2.0
5
🔍 Trace syscalls from user-space functions, by using eBPF
Created 2023-09-20
99 commits to main branch, last one a day ago
19
81
apache-2.0
222
Go library for installing a seccomp BPF system call filter.
Created 2018-04-25
50 commits to main branch, last one 2 months ago
15
80
apache-2.0
19
Provides easy-to-use Linux seccomp-bpf jailing.
Created 2021-05-19
93 commits to main branch, last one about a month ago
8
59
unlicense
7
Record process launches and files read and written by each process
Created 2017-04-11
88 commits to master branch, last one 2 months ago
10
44
apache-2.0
20
agent for handling seccomp descriptors for container runtimes
Created 2020-10-26
97 commits to main branch, last one about a year ago
3
43
apache-2.0
1
Going Florida on container keyring masks. A tool to demonstrate the ineffectivity containers have on isolating Linux Kernel keyrings.
Created 2020-07-22
59 commits to master branch, last one 4 years ago
📦 Run untrusted python code on the server.
Created 2023-07-20
37 commits to main branch, last one about a year ago
DSL language to write seccomp filters
Created 2021-01-27
80 commits to main branch, last one 10 months ago