ReadyStackDev

PostHog: product analytics from captured user events. Signed; SBOM and SLSA v1 provenance.

Canvas LMS: learning management system for online courses. Signed; SBOM and SLSA v1 provenance.

Grafana: dashboards and alerts over metrics, logs and traces. Signed; SBOM and SLSA v1 provenance.

Argo CD: keeps Kubernetes clusters in sync with Git (GitOps). Signed; SBOM and SLSA v1 provenance.

NodeBB: real-time forum software with a REST API. Signed; SBOM and SLSA v1 provenance.

Keycloak: identity and access management; external PostgreSQL. Signed; SBOM and SLSA v1 provenance.

ERPNext: ERP for invoices, stock, sales, production, projects. Signed; SBOM and SLSA v1 provenance.

Caddy: web server and reverse proxy with HTTPS on by default. Signed; SBOM and SLSA v1 provenance.

Ghost: publishing for websites, newsletters, memberships. Signed; SBOM and SLSA v1 provenance.

Frappe CRM: tracks leads and deals, with a Kanban pipeline. Signed; SBOM and SLSA v1 provenance.

Harbor: container registry with scanning, signing, replication. Signed; SBOM and SLSA v1 provenance.

ZITADEL: identity and access management with SSO and passkeys. Signed; SBOM and SLSA v1 provenance.

Tempo: distributed tracing backend on object storage. Signed; SBOM and SLSA v1 provenance.

SeaweedFS: distributed object, file and table storage. Signed; SBOM and SLSA v1 provenance.

Qdrant: vector database and similarity search engine. Signed; SBOM and SLSA v1 provenance.

Traefik: reverse proxy that configures routes automatically. Signed; SBOM and SLSA v1 provenance.

VictoriaMetrics: time series database and monitoring. Signed; SBOM and SLSA v1 provenance.

Mimir: scalable long-term storage for Prometheus metrics. Signed; SBOM and SLSA v1 provenance.

OpenProject: project management with Gantt and time tracking. Signed; SBOM and SLSA v1 provenance.

Valkey: open-source key-value datastore. Signed; SBOM and SLSA v1 provenance.

WireGuard: simple, modern VPN (wireguard-go, userspace). Signed; SBOM and SLSA v1 provenance.

OpenBao secrets manager: starts sealed, no built-in root token. v2.5.5 r1-r3 withdrawn (dev mode)

Home Assistant: home automation that runs locally. Signed; SBOM and SLSA v1 provenance.

Uptime Kuma: self-hosted uptime monitoring and status pages. Signed; SBOM and SLSA v1 provenance.

pause: the infrastructure container of every Kubernetes pod. Signed; SBOM and SLSA v1 provenance.

Kubernetes Node: kubelet, containerd and CNI for a node. Signed; SBOM and SLSA v1 provenance.

virtctl: KubeVirt's command-line client for virtual machines. Signed; SBOM and SLSA v1 provenance.

virt-exportproxy: KubeVirt's proxy for virtual machine exports. Signed; SBOM and SLSA v1 provenance.

virt-controller: KubeVirt's cluster-wide VM controller. Signed; SBOM and SLSA v1 provenance.

virt-api: KubeVirt's API server for virtual machines. Signed; SBOM and SLSA v1 provenance.