📦 Make security testing of K8s, Docker, and Containerd easier.

linux docker kubernetes container blackhat exploits k8s cloud-native penetration vulnerabilities kernel-exploitation privilege-escalation hacktools container-security penetration-testing-tools kubernetes-security hitb k8s-penetration-toolkit container-escape cloud-native-security

• Updated May 1, 2026
• Go

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

aws security aws-security cloud-security azure-security mitre-attack adversary-emulation threat-detection purple-team gcp-security kubernetes-security detection-engineering cloud-native-security

• Updated Nov 9, 2026
• Go

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

security vulnerability cloud-native compliance cloud-custodian compliance-as-code prowler sbom kubernetes-security trivy k8s-security cspm cloud-native-security

• Updated Dec 26, 2024
• Java

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

kubernetes container target cloud-native vulnerabilities kernel-exploitation privilege-escalation container-security kubernetes-security container-escape cloud-native-security vulnerable-infrastructure vulnerable-scenes vulnerable-infrastructures

• Updated Jul 22, 2026
• Python

Tool for building Kubernetes attack paths

kubernetes security-audit exploit red-team security-automation security-tools mitre-attack adversary-emulation attack-graph purple-team kubernetes-security attack-paths cloud-native-security

• Updated Nov 11, 2026
• Go

Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)

kubernetes checklist security devsecops container-security kubernetes-security cloud-native-security requirments

• Updated Dec 13, 2021

AWS云平台 AccessKey 泄漏利用工具

aws security accesskey security-tools accesskeysecret cloud-security cloud-native-security cloud-security-tools

• Updated Jul 18, 2023
• Python

awesome resources about cloud native security 🐿

docker kubernetes serverless container cloud-computing k8s cloud-native cloud-security docker-security container-security serverless-security kubernetes-security container-escape cloud-native-security

• Updated Nov 4, 2023

Deterministic Linux runtime enforcement with eBPF LSM: block file/network operations before syscalls complete.

helm incident-response linux-kernel prometheus ebpf observability bpf linux-security container-security runtime-security policy-enforcement kubernetes-security cloud-native-security bpf-lsm workload-securi

• Updated Oct 19, 2026
• C

An ongoing curated list of awesome frameworks, important books, articles, talks, libraries, learning tutorials, best practices and technical resources about Cloud Native Development

cloud cloud-resources api-documentation cloud-native api-docs cloud-migration cloud-native-architectures cloud-native-applications cloud-natural-language-api cloud-native-platform cloud-native-buildpacks cloud-native-computing cloud-native-java cloud-native-framework cloud-native-security

• Updated Apr 3, 2022

ZeroTrustOps — Kubernetes-native DevSecOps enforcement platform that scans Infrastructure-as-Code and repositories on every Git push, evaluating security rules and blocking deployments via a deterministic CI/CD gate (PASS/FAIL).

kubernetes security ci-cd infrastructure-as-code devsecops cloud-security gitops gitleaks secrets-detection argo-cd kubernetes-security trivy kubeaudit kyverno cloud-native-security

• Updated Jun 10, 2026
• Go

Web Appliaction Firewall reverse-proxy using Coraza WAF + Caddy with ready-to-use rulesets

kubernetes golang wordpress security openshift waf reverse-proxy caddy k8s wordpress-security web-application-firewall rootless-containers distroless dependabot riotkit k8s-security cloud-native-security coraza-waf

• Updated Jun 12, 2023
• Jinja

Exports Kubernetes resources created by Trivy Operator as individual metrics.

kubernetes cloud-native-security trivy-operator

• Updated Nov 11, 2026
• Go

Container security workshop is a hands-on Docker lab environment for Linux and GitHub Codespaces. It walks through deliberate misconfigurations and attack-style runtime scenarios on an isolated VM, then defence with image review, scanning, SBOM workflows, and secure defaults.

docker security container-security cloud-native-security

• Updated Sep 14, 2026

autonomous intrusion defense system for Kubernetes that combines eBPF-based real-time traffic intelligence with CNN-LSTM deep learning for sub-millisecond threat detection and policy-driven autonomous mitigation.

pytorch intrusion-detection ebpf policy-engine threat-intelligence cilium kubernetes-security cloud-native-security self-healing-kubernetes zero-trust-kubernetes

• Updated Jan 6, 2026
• Python

End-to-End Cybersecurity

cybersecurity cloudsecurity devsecops data-security cloud-native-security software-supply-chain-security

• Updated May 26, 2023

Defense-in-depth Zero Trust architecture for Kubernetes: Cilium, Kyverno, Vault, External Secrets Operator and Falco, validated with replayable attack scenarios.

rbac ebpf threat-modeling hashicorp-vault hubble devsecops zero-trust falco cilium network-policy kubernetes-security external-secrets kyverno cloud-native-security

• Updated Nov 9, 2026
• Shell

Continuous Kubernetes security assurance: deterministic posture scanning, baseline drift, and attack-path reasoning, no AI dependency in the core engine.

python kubernetes security rbac devsecops vulnerability-scanner kubernetes-security cloud-native-security kspm attack-path

• Updated Aug 11, 2026
• Python

Offline Kubernetes NetworkPolicy security auditor with connectivity contracts, ingress/egress isolation analysis, CIDR validation, policy regression detection, SARIF reports and CI/CD security gates.

python kubernetes sarif devsecops networkpolicy policy-as-code kubernetes-security network-segmentation cloud-native-security configuration-drift

• Updated Nov 10, 2026
• Python

Repository untuk tugas DevSecOps Week7 — Docker Security dengan Trivy

secure-coding devsecops software-composition-analysis vulnerability-scanning docker-security security-scanning github-actions python-app cicd-pipeline trivy container-scanning supply-chain-security cloud-native-security dockerfile-best-practices

• Updated Nov 30, 2025
• Dockerfile