Sprout: UEFI Bootloader in Rust

libkmod in Rust

experimental X11 compatibility layer

Programmatic sandboxing tool

Edera Runtime Class Mutating Webhook

Validate the isolation posture of your container environment.

Build the Linux kernel into OCI images, suitable for Edera products.

Linux kernel source tree with OpenPaX patch

krata is a Xen control plane in Rust.

#supply #chain #attack #detection

Public Chainguard Images

Production-ready detection & response queries for osquery

Main package repository for production Wolfi images

Generic webhook controller / proxy for ease of integration with Styra in particular.

Code-signing for npm packages

The easiest, most secure way to use WireGuard and 2FA.

Keyless Git signing using Sigstore

A reading list for software supply-chain security.

Keyless Git signing with cosign!

Build OCI images from APK packages directly without Dockerfile

Linux eBPF backdoor over TCP. Spawn reverse shells, RCE, on prior privileged access. Less Honkin, More Tonkin.

Code signing and transparency for containers and binaries

Adversary emulation for EDR/SIEM testing (macOS/Linux)

HSM-backed remote-attestable enclave.

Merlin is a cross-platform post-exploitation HTTP/2 Command & Control server and agent written in golang.

awesome-linux-rootkits

Packet, where are you? -- eBPF-based Linux kernel networking debugger

Manage your dotfiles across multiple diverse machines, securely.

High-level tracing language for Linux