Filter by
(2)
ClamAV is an open source (GPLv2) anti-virus toolkit, designed especially for e-mail scanning on mail gateways.
1h
100K+
11
Sealed Secrets is a Kubernetes controller and tool for one-way encrypted Secrets.
40m
100K+
Kubescape is an open-source Kubernetes security platform designed to provide practical, end-to-end security for Kubernetes environments. It supports engineers and operators throughout the development and deployment lifecycle, offering tools for configuration scanning, vulnerability assessment, policy enforcement, network policy and seccomp validation, and runtime threat detection.
1h
100K+
Docker Distribution registry for storing and distributing container images within Harbor
1h
100K+
Kyverno Readiness Checker is a component that checks the readiness of a Kyverno installation
1h
100K+
Cilium Standalone DNS Proxy is an alpha component that provides independent DNS proxying capabilities, receiving policy rules from the Cilium agent via gRPC.
1h
100K+
Grype is a vulnerability scanner for container images and filesystems. It provides fast and accurate vulnerability detection with support for multiple package ecosystems and output formats.
7h
100K+
Syft is a CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems with support for multiple output formats and package ecosystems.
7h
100K+
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
1h
100K+
This chart installs resources shared by all Istio revisions. This includes Istio CRDs.
42m
100K+
TruffleHog is a secrets scanning tool that finds credentials, API keys, and sensitive data in git repositories, filesystems, S3 buckets, and more. Written in Go.
44m
100K+
Vault is a tool for securely accessing secrets.
40m
100K+
OPA is a policy engine that streamlines policy management across your stack for improved development, security and audit capability.
1h
100K+
Sidecar for managing OPA instances in Kubernetes.
7h
100K+
Kubernetes-native security toolkit that leverages Trivy to continuously scan your Kubernetes cluster for security issues.
44m
100K+
OpenFGA is an open source Fine Grained Authorization solution that implements Google's Zanzibar paper, helping you manage complex authorization rules in your applications.
1h
100K+
Policy Controller for Kubernetes, built on Open Policy Agent.
1h
100K+
Notation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.
1h
100K+
Tailscale lets you securely connect devices and containers without exposing them to the public internet.
44m
100K+
SonarQube is a self-managed, automatic code review tool that systematically helps you deliver clean code.
7h
100K+
EFF's ACME client for obtaining and renewing TLS certificates from Let's Encrypt and any ACME-compatible CA.
7h
100K+
2
The AWS EKS Pod Identity Agent runs on Amazon EKS nodes and exchanges Kubernetes service account tokens for temporary AWS IAM credentials, providing pods with IAM roles without using IRSA or instance profiles.
7h
100K+
Socket CLI scans npm, pnpm, and yarn projects for supply-chain security risks -- malicious packages, typosquats, and known vulnerabilities -- from the command line and CI pipelines.
1h
100K+
3
Keycloak is a high performance Java-based identity and access management solution. It lets developers add an authentication layer to their applications with minimum effort.
41m
100K+
cert-manager trust-manager manages trust bundles in Kubernetes and OpenShift clusters
44m
100K+
A reverse proxy that provides authentication using OAuth2 and OIDC providers.
41m
100K+
Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. Written in Go.
1h
100K+
node-collector gathers file system and process information from Kubernetes cluster nodes for CIS benchmark compliance checking.
1h
100K+
Apache APISIX is a dynamic, real-time, high-performance API Gateway.
1h
100K+