A tool for securing CI/CD workflows with version pinning.

Go library to trace Linux syscalls using the FTRACE kernel framework.

A high performance go implementation of Wappalyzer Technology Detection Library

Go security checker

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

The slightly more awesome standard unix password manager for teams

OCI hook to trace syscalls and generate a seccomp profile

Kubevuln is an in-cluster component of the Kubescape security platform. It scans container images for vulnerabilities, using Grype as its engine.

GitHub Action for creating software bill of materials using Syft.

🧵 CLI tool for directly patching container images!

Port of Wappalyzer (uncovers technologies used on websites) to automate mass scanning.

Generate seccomp profiles from go binaries

A lightweight CLI tool that finds system calls being called inside golang applications.