An initial OpenAPI definition of an OSCAL REST API.

Kepler (Kubernetes-based Efficient Power Level Exporter) uses eBPF to probe performance counters and other system stats, use ML models to estimate workload energy consumption based on these stats, …

Archivista is a graph and storage service for in-toto attestations. Archivista enables the discovery and retrieval of attestations for software artifacts.

A curated list of awesome Go frameworks, libraries and software

Compliance-to-Policy (C2P) provides the framework to bridge the gap between compliance and policy administration.

eBPF implementation that runs on top of Windows

An opinionated tooling platform for managing compliance as code, using continuous integration and NIST's OSCAL standard.

Build OCI images using APK directly without Dockerfile

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

Implement crypto.Signer and crypto.Decrypter for HSM-protected keys via PKCS#11

A simple service for interacting with an HSM or other PKCS#11 device.

Reconstruct Open API Specifications from real-time workload traffic seamlessly.

Red team tool that emulates the SolarWinds CI compromise attack vector.

BitTorrent DHT Protocol && DHT Spider.

Container Signing

Specification for Cloud Native Buildpacks

Cloud artifact metadata CRUD API and resource specifications

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

Supply-chain Levels for Software Artifacts

fucking around with bpf

OpenTelemetry in Go with Elastic APM

Automatically set GOMAXPROCS to match Linux container CPU quota.

Exposure Notification Reference Server | Covid-19 Exposure Notifications

Go Training Class Material :

A go implementation of in-toto verifylib

The Pokemon Go Bot, baking with community.

Trace Go program execution with uprobes and eBPF

Automatically gets docker credentials from Hashicorp Vault