developer-guy

awesome-falco

A curated list of Falco related tools, frameworks, blogs, podcasts, and articles

buildkit-machine

A proof-of-concept project that makes accessible buildkitd daemon from macOS

container-image-sign-and-verify-with-cosign-and-opa

This is just a proof-of-concept project that aims to sign and verify container images using cosign and OPA (Open Policy Agent)

falco-analyze-audit-log-from-k3s-cluster

Detect intrusions that happened in your Kubernetes cluster through audit logs using Falco

policy-as-code-war

OPA Gatekeeper vs Kyverno

kaniko

Build Container Images In Kubernetes

terratest

Terratest is a Go library that makes it easier to write automated tests for your infrastructure code.

minikube

Run Kubernetes locally

opa

Open Policy Agent (OPA) is an open source, general-purpose policy engine.

faas

OpenFaaS - Serverless Functions Made Simple

developer-guy/go-multi-arch-buildx

A demonstration of using Docker Buildx by enabling multi-arch support while building container image for Go application

developer-guy/oci-kyverno

A demonstration of pulling/pushing and signing/verifying Kyverno policies by storing them on OCI registries

developer-guy/hello-world-buildx

An experimental project that demonstrates of using Docker Buildx features

developer-guy/my-kyverno-policies

A repository that holds my Kyverno repositories and will be published to OCI registry with flux

developer-guy/vault-kubernetes-auth-method-reconciler

A PoC project to address a dead simple problem

developer-guy/flux-cosign-helm-oci-demo

A demo repository that demonstrates you can use cosign to verify the integrity of the Helm charts stored as OCI Artifacts reconciled with Flux

developer-guy/mage-go-example

A demonstration of how you can use Mage within your Go projects to assemble release process using two of greatest projects GoReleaser and ko

developer-guy/slsa-workflow-examples

Showcasing some example workflows to apply SLSA principles

developer-guy/springboot-kotlin-github-api-demo

Demo project on Springboot + Kotlin

developer-guy/buildg

Interactive debugger for Dockerfile

developer-guy/cyclonedx-gomod

Creates CycloneDX Software Bill of Materials (SBOM) from Go modules

developer-guy/distroless-k8s

Kubernetes tools in a "distroless" container

developer-guy/docker-allhands2-buildx-bake

buildx bake demo @ Docker Community All-Hands #2

developer-guy/flux-cosign-demo

developer-guy/flux-kyverno-policies

An example to show you how you can use OCI Repositories of Flux to apply Kyverno policies stored in an OCI registry

developer-guy/gh-actions-cache

A GitHub (gh) CLI extension to manage the GitHub Actions caches being used in a GitHub repository.

developer-guy/KDP

Kyverno Design Proposals

developer-guy/krew

📦 Find and install kubectl plugins

developer-guy/krew-index

Plugin index for https://github.com/kubernetes-sigs/krew. This repo is for plugin maintainers.

developer-guy/miniko

developer-guy/oci-conformance

OCI Conformance/Certification Working Group

developer-guy/pkg

Toolkit common packages

developer-guy/slsa-github-generator-ko

developer-guy/source-controller

The GitOps Toolkit source management component

developer-guy/spiffe-vault

Integrates Spiffe and Vault to have secretless authentication

developer-guy/sudo-bmitch-helm-charts

developer-guy/syft

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

developer-guy/tag-security

🔐CNCF Security Technical Advisory Group -- secure access, policy control, privacy, auditing, explainability and more!

developer-guy/undock

Extract contents of a container image in a local folder

developer-guy/witness

Witness is a pluggable framework for software supply chain risk management. It automates, normalizes, and verifies software artifact provenance.