(2)
A reverse proxy that provides authentication using OAuth2 and OIDC providers.
4h
100K+
OpenFGA is an open source Fine Grained Authorization solution that implements Google's Zanzibar paper, helping you manage complex authorization rules in your applications.
4h
100K+
OPA is a policy engine that streamlines policy management across your stack for improved development, security and audit capability.
4h
100K+
Grype is a vulnerability scanner for container images and filesystems. It provides fast and accurate vulnerability detection with support for multiple package ecosystems and output formats.
4h
100K+
OpenID Connect (OIDC) identity and OAuth 2.0 provider with pluggable connectors
4h
100K+
Syft is a CLI tool and Go library for generating Software Bill of Materials (SBOM) from container images and filesystems with support for multiple output formats and package ecosystems.
11h
100K+
TruffleHog is a secrets scanning tool that finds credentials, API keys, and sensitive data in git repositories, filesystems, S3 buckets, and more. Written in Go.
4h
100K+
Please refer to the docker/ucp image for more information
6y
500M+
4
The Kyverno Command Line Interface (CLI) is designed to validate and test policy behavior to resources prior to adding them to a cluster.
4h
100K+
SonarQube is a self-managed, automatic code review tool that systematically helps you deliver clean code.
4h
100K+
Docker Distribution registry for storing and distributing container images within Harbor
4h
100K+
Notation is a CLI tool for signing and verifying OCI artifacts with trust policies and plugin-based key management.
4h
100K+
The official image for monitoring systems, containers and applications with Netdata.
10h
500M+
569
Tailscale lets you securely connect devices and containers without exposing them to the public internet.
4h
50K+
Polaris is an open source policy engine for Kubernetes that validates and remediates resource configuration. It includes 30+ built in configuration policies, as well as the ability to build custom policies with JSON Schema. When run on the command line or as a mutating webhook, Polaris can automatically remediate issues based on policy criteria.
4h
50K+
Kyverno Readiness Checker is a component that checks the readiness of a Kyverno installation
4h
50K+
Gitleaks is a SAST tool for detecting and preventing hardcoded secrets like passwords, API keys, and tokens in git repos. Written in Go.
4h
50K+
Sidecar for managing OPA instances in Kubernetes.
4h
50K+
DEPRECATED; Notary server and signer cooperatively handle signing and distribution
2y
5M+
72
A Kubernetes utility to identify optimal resource requests and limits using Vertical Pod Autoscalers.
4h
50K+
Kubernetes-native security toolkit that leverages Trivy to continuously scan your Kubernetes cluster for security issues.
4h
50K+
A container management platform built for organizations that deploy containers in production.
2h
100M+
442
Apache APISIX is a dynamic, real-time, high-performance API Gateway.
4h
50K+
Policy Controller for Kubernetes, built on Open Policy Agent.
4h
50K+
Certificate signing request agent for integrating cert-manager with Istio
4h
50K+