GitHub Actions Runner images for AWS

GitLab Attack TOolkit

ForgeMT is a secure, scalable GitHub Actions runner platform for ephemeral workloads. Designed for multi-tenant environments, it automates isolated runner provisioning on Kubernetes or EC2, with bu…

Github action to retrieve all (added, copied, modified, deleted, renamed, type changed, unmerged, unknown) files and directories. Secure drop-in replacement for tj-actions/changed-files.

Awesome free cloud native security learning labs. Includes CTF, self-hosted workshops, guided vulnerability labs, and research labs.

Turing Pi Cluster with Turing RK1s and Jetson Orin Nanos

Validate the isolation posture of your container environment.

Static analysis for GitHub Actions

Arcjet JS SDKs. Bot detection, rate limiting, email validation, attack protection, data redaction for Node.js, Next.js, Deno, Bun, Remix, SvelteKit, NestJS.

GitHub Attack Toolkit - Extreme Edition - A static analysis and exploit toolkit for GitHub Actions.

Generate datasets of cloud audit logs for common attacks

krata is a Xen control plane in Rust.

List of actions created by github technology partners that have self-attested to best practices.

Tool for building Kubernetes attack paths

eBPF-based Security Observability and Runtime Enforcement

Kubernetes controller for GitHub Actions self-hosted runners

Simple and elegant invoicing solution.

AI-Powered Code Reviews for Best Practices & Security Issues Across Languages

Pull Requests for GitHub repository settings

Macaron is an extensible supply-chain security analysis framework from Oracle Labs that supports a wide range of build systems and CI/CD services. It can be used to prevent supply chain attacks, de…

Cloud-ops automation runbooks that are ready to use. Build your own automations using the hundreds of drag and drop actions included in the repository. Built on Jupyter Notebooks, our automation pl…

Simplify OpenSSF Scorecard tracking in your organization with automated markdown and JSON reports, plus optional GitHub issue alerts

Node.js Ecosystem Security Working Group

Extension for Visual Studio Code that makes it easy for developers to build and debug Chaincode right from within the IDE.

Ebook - Become a Node.js developer - https://fraxken.github.io/ebook_nodejs/

Roadmap voting app for sharing product plan and get customer feedback.

A small script for running programs with (minimal) network sandboxing

Ranger Incident Management System—Server

A .NET implementation of decentralized identifiers and verifiable credentials, some associated protocols and cryptographic routines.