(2)
Falco is a CNCF-graduated cloud-native runtime security tool that uses a modern eBPF probe to monitor syscalls and detect anomalous application and container behavior in real time.
9h
10K+
Spiped is a utility for creating symmetrically encrypted and authenticated pipes between sockets.
7d
1M+
66
Calico FlexVolume driver installer for secure connections from Kubernetes pods to local daemons.
3h
10K+
A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the StackHawk application security testing platform.
3h
10K+
Manages Tailscale resources on a Kubernetes cluster, including exposing Services on a tailnet and running Tailscale subnet routers, exit nodes, and proxies.
9h
10K+
Harbor - An open source trusted cloud native registry that stores, signs, and scans content
3h
10K+
Clustered in-memory database engine compatible with open source Redis by Redis Labs
3d
100M+
46
The Amazon EKS Pod Identity Webhook is a Kubernetes mutating admission webhook that injects AWS IAM Roles for Service Accounts (IRSA) credentials into pods, letting workloads assume an IAM role via a projected service account token instead of long-lived credentials.
3h
10K+
Portainer BE - a fully featured service delivery platform for containerized applications
3d
100M+
147
A Model Context Protocol server that connects AI assistants and LLM-powered IDEs to the Zscaler Zero Trust Exchange platform.
3h
10K+
First-class integrations between Vault and Kubernetes.
2m
50M+
20
Consul is a datacenter runtime that provides service discovery, configuration, and orchestration.
1d
50M+
4
A sidecar that acts as a git http(s) proxy to bitbucket.org
6y
50M+
1
The AWS provider for the Secrets Store CSI Driver fetches secrets from AWS Secrets Manager and AWS Systems Manager Parameter Store and mounts them into Kubernetes pods as files, supporting both IRSA and EKS Pod Identity authentication.
3h
10K+
Docker images for the Camunda Platform 7 Community Edition.
3m
50M+
144
Kubernetes controller that watches Ory Oathkeeper Rule custom resources and renders them into the access rules ConfigMap or file that Ory Oathkeeper consumes.
3h
10K+
Kubernetes Pod Security Standards implemented as Kyverno policies.
3h
10K+
Packages the Secrets Store CSI Driver CustomResourceDefinitions together with kubectl, so a cluster can register SecretProviderClass and SecretProviderClassPodStatus before the driver itself is deployed.
9h
10K+
stunnel is a TLS proxy that adds SSL/TLS encryption to TCP services with no native TLS support, forwarding plaintext traffic between clients and backends without modifying the underlying application.
3h
10K+
trust-manager manages TLS trust bundles in Kubernetes and OpenShift clusters.
3h
10K+
LDAP authentication daemon for the NGINX auth_request module, supporting OpenLDAP and Active Directory.
3h
10K+
Vault CSI Provider allows Kubernetes users retrieve and mount Vault secrets to Kubernetes pods.
2m
10M+
4