Automated developer-oriented status page with alerting and incident support

Algorithmic Information Theory, using Binary Lambda Calculus

slog: Handler for systemd journal

seccomp-BPF filtering and pledge/unveil sandboxing for Linux

A place for new transparency projects to be developed before being disbanded or finding their forever homes

Deterministic container hashes and container signing using Cosign, Bazel and Google Cloud Build

A structured concurrency library

Simple and easy to use DDNS. Support Aliyun, Tencent Cloud, Dnspod, Cloudflare, Callback, Huawei Cloud, Baidu Cloud, Porkbun, GoDaddy, Namecheap, NameSilo...

Octoscan is a static vulnerability scanner for GitHub action workflows.

ssh, sftp client running in the browser powered by golang and wasm

A pure Rust implementation of FIDO2/WebAuthn CTAP 2.0/2.1/2.2 protocol

PKI support for SSH certificates

💫 Toolkit to help you get started with Spec-Driven Development

OpenBSD unveil(2) like function in Linux using Landlock

A Go library for the Linux Landlock sandboxing feature

Sandboxing for GNU Make has never been easier

eBPF-based Linux high-performance transparent proxy solution.

Internet-Draft: The Asynchronous Remote Key Generation (ARKG) algorithm

The account-utils package contains services, utilities and PAM modules, which allow authentication and account management on systems with the NoNewPrivs flag set (no setuid/setgid binaries)

Git Credential Helper for Github Apps

A transparent monitoring wrapper for programs, for use in nix builds

Runtime sandboxing for Nix

Bear is a tool that generates a compilation database for clang tooling.

A user-friendly method of sandboxing applications using bubblewrap with portals support.

Source code for the pre-print of Attestable Builds

Full-throttle, wire-speed hardware implementation of Wireguard VPN, using low-cost Artix7 FPGA with opensource toolchain. If you seek security and privacy, nothing is private in our codebase. Our d…

NitroTPM Attestation Samples