security

Open Source Identity and Access Management For Modern Applications and Services

Mirror of https://github.com/keycloak/keycloak

A reverse proxy that provides authentication with Google, Azure, OpenID Connect and many more identity providers.

Mirror of https://github.com/oauth2-proxy/oauth2-proxy

A Simple and Comprehensive Vulnerability Scanner for Containers, Suitable for CI

Mirror of https://github.com/aquasecurity/trivy

🥑 Language focused docker images, minus the operating system.

Mirror of https://github.com/GoogleContainerTools/distroless

🛡️ A private certificate authority (X.509 & SSH) & ACME server for secure automated certificate management, so you can use TLS everywhere & SSO for SSH.

Mirror of https://github.com/smallstep/certificates

Container Signing

Mirror of https://github.com/sigstore/cosign

https://mastocloud.shivering-isles.com

🔒 A curated checklist of 300+ tips for protecting digital security and privacy in 2021

Mirror of https://github.com/Lissy93/personal-security-checklist

Catalogue all images of a Kubernetes cluster to multiple targets with Syft

Mirror of https://github.com/ckotzbauer/sbom-operator

Automated Encryption Framework

Mirror of https://github.com/latchset/clevis

ShellCheck, a static analysis tool for shell scripts

Mirror of https://github.com/koalaman/shellcheck

CFSSL: Cloudflare's PKI and TLS toolkit

Mirror of https://github.com/cloudflare/cfssl

Proxy over your Docker socket to restrict which requests it accepts

Mirror of https://github.com/Tecnativa/docker-socket-proxy

The Illustrated TLS Connection: Every byte explained

Mirror of https://github.com/syncsynchalt/illustrated-tls

This is a security-enhanced proxy for the Docker Socket

Tools to bootstrap CAs, certificate requests, and signed certificates.

Mirror of https://github.com/square/certstrap

Useful IT policies

Mirror of https://github.com/lfit/itpol

Tool for complete hardening of Linux boot chain with UEFI Secure Boot

Mirror of https://github.com/Snawoot/linux-secureboot-kit

Create an ipset based blocklist imported from an text file (automatically downloaded from e.g. blocklist.de. Multiple Sources at once supported).

Mirror of https://github.com/virus2500/blocklist-with-ipset