Stars
A lightweight sandboxing tool for enforcing filesystem and network restrictions on arbitrary processes at the OS level, without requiring a container.
Connect any LLM to your internal knowledge sources and chat with it in real time alongside your team. OSS alternative to NotebookLM, Perplexity, and Glean. Join our Discord: https://discord.gg/ejRN…
Multi-platform high-performance compute language extension for Rust.
Writing a container in a few lines of Go code, as seen at DockerCon 2017 and on O'Reilly Safari
Mastering Embedded Linux Security, published by Packt
Achieve state of the art inference performance with modern accelerators on Kubernetes
A library for building tools to determine if vulnerabilities are reachable in a code base.
A container for deploying bootable container images.
Trusted Computing based services supporting TPM provisioning and supply chain validation concepts. #nsacyber
Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.
Platform software for Trusted Computing - TPM 2.0, Certificate Authority, and Web Services required to perform Local and Remote Attestation, provision, deploy, manage, and secure connected devices …
Roo Code gives you a whole dev team of AI agents in your code editor.
Development repository for the Triton language and compiler
Confidential Containers Guest Tools and Components
💥 A Lodash-style Go library based on Go 1.18+ Generics (map, filter, contains, find...)
Proof of concept that uses cosign and GitHub's in built OIDC for actions to sign container images, providing a proof that what is in the registry came from your GitHub action.
Use cosign to secure your container images using Github actions