OPA Control Plane (OCP) simplifies how you manage policies for your OPA deployments.

A unikernel designed specifically for running Wasm applications and compatible with WASI

oreboot is a fork of coreboot, with C removed, written in Rust.

⛔️ DEPRECATED Kubernetes operator and CLI tool for encrypting and managing Kubernetes secrets

SELinux policy files for Container Runtimes

Verification Validation and Visualization of Security Policy Abstractions

The LinuxBoot project is working to enable Linux to replace your firmware on all platforms.

A tool for testing, building, signing, and publishing binaries.

A tool for exploring each layer in a docker image

Shamir's Secret Sharing Algorithm implementation in golang combined with PGP and a mail delivery system

Go wrapper module for the Pluggable Authentication Modules (PAM) API

dlayer is docker layer analyzer.

Assisted code review, running custom code analyzers on pull requests

A PID controller implementation in Golang.

A CNI meta-plugin for multi-homed pods in Kubernetes

Visualize Kubernetes RBAC rules

pgquarrel compares PostgreSQL database schemas (DDL)

Tools for browsing and manipulating docker registries.

Implement crypto.Signer and crypto.Decrypter for HSM-protected keys via PKCS#11

Consistent hashing with bounded loads in Golang

Go security checker

DEPRECATED: Like diff but for PostgreSQL schemas

Filesystem in userspace (FUSE) with transparent authenticated encryption

golang hpkp client library

An HTTP-Proxy that adds AuthN through JWTs

A Kubernetes controller and tool for one-way encrypted Secrets

Go HTTP proxy server library

htest is a http-test package

Constant-Time Toolkit