Filter by
(2)
DEPRECATED; Notary server and signer cooperatively handle signing and distribution
2y
5M+
72
Find and fix vulnerabilities in code, dependencies, containers, and infrastructure as code
3h
50K+
A container management platform built for organizations that deploy containers in production.
2m
100M+
442
Kubernetes CSI driver that injects the SPIFFE Workload API socket into workload pods as an ephemeral inline volume.
3h
50K+
OPA REST server that enforces Rego migration policies for the Forklift VM migration operator.
3h
50K+
Handshake service for kernel TLS consumers
3h
50K+
Envoy external authorization service that moves OIDC/OAuth2 token acquisition out of application code and into the Istio mesh
4h
50K+
Falco is a CNCF-graduated cloud-native runtime security tool that uses a modern eBPF probe to monitor syscalls and detect anomalous application and container behavior in real time.
3h
50K+
Open-source authentication and authorization server with a login portal, single sign-on, and multi-factor authentication.
4h
50K+
Kubeseal is the client side tool for Sealed Secrets to encrypt secrets.
3h
50K+
Pinniped CLI is a command-line utility for interacting with Pinniped
3h
50K+
Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.
4h
50K+
A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the StackHawk application security testing platform.
3h
10K+
Consul Template is a template renderer, notifier, and supervisor for HashiCorp Consul and Vault.
6d
100M+
32
Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.
3h
10K+
The Amazon EKS Pod Identity Webhook is a Kubernetes mutating admission webhook that injects AWS IAM Roles for Service Accounts (IRSA) credentials into pods, letting workloads assume an IAM role via a projected service account token instead of long-lived credentials.
4h
10K+
Packages the Secrets Store CSI Driver CustomResourceDefinitions together with kubectl, so a cluster can register SecretProviderClass and SecretProviderClassPodStatus before the driver itself is deployed.
3h
10K+
Spiped is a utility for creating symmetrically encrypted and authenticated pipes between sockets.
19h
1M+
66
Kubernetes controller that watches Ory Oathkeeper Rule custom resources and renders them into the access rules ConfigMap or file that Ory Oathkeeper consumes.
3h
10K+
A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the Zscaler Zero Trust Exchange platform.
3h
10K+
Clustered in-memory database engine compatible with open source Redis by Redis Labs
8d
100M+
47
The AWS provider for the Secrets Store CSI Driver fetches secrets from AWS Secrets Manager and AWS Systems Manager Parameter Store and mounts them into Kubernetes pods as files, supporting both IRSA and EKS Pod Identity authentication.
3h
10K+
Portainer BE - a fully featured service delivery platform for containerized applications
5d
100M+
147
LDAP authentication daemon for the NGINX auth_request module, supporting OpenLDAP and Active Directory.
3h
10K+