cloud-native-security

📦 Make security testing of K8s, Docker, and Containerd easier.

☁️ ⚡ Granular, Actionable Adversary Emulation for the Cloud

HummerRisk 是云原生安全平台，包括混合云安全治理和云原生安全检测。

Metarget is a framework providing automatic constructions of vulnerable infrastructures.

Tool for building Kubernetes attack paths

Kubernetes Security Checklist and Requirements - All in One (authentication, authorization, logging, secrets, configuration, network, workloads, dockerfile)

AWS云平台 AccessKey 泄漏利用工具

awesome resources about cloud native security 🐿

Deterministic Linux runtime enforcement with eBPF LSM: block file/network operations before syscalls complete.

An ongoing curated list of awesome frameworks, important books, articles, talks, libraries, learning tutorials, best practices and technical resources about Cloud Native Development

ZeroTrustOps — Kubernetes-native DevSecOps enforcement platform that scans Infrastructure-as-Code and repositories on every Git push, evaluating security rules and blocking deployments via a deterministic CI/CD gate (PASS/FAIL).

Web Appliaction Firewall reverse-proxy using Coraza WAF + Caddy with ready-to-use rulesets

Exports Kubernetes resources created by Trivy Operator as individual metrics.

End-to-End Cybersecurity

autonomous intrusion defense system for Kubernetes that combines eBPF-based real-time traffic intelligence with CNN-LSTM deep learning for sub-millisecond threat detection and policy-driven autonomous mitigation.

Container security workshop is a hands-on Docker lab environment for Linux and GitHub Codespaces. It walks through deliberate misconfigurations and attack-style runtime scenarios on an isolated VM, then defence with image review, scanning, SBOM workflows, and secure defaults.

Jibril Runtime Security Public Types. Important for unmarshalling events and similar needs.

A curated list of cloud security tools for AWS, Azure, GCP, and Kubernetes

Small Go CLI for publishing images to Harbor, triggering vulnerability scans, and exporting scan reports.

KCSA (Kubernetes Cloud Native Security Associate) hands-on labs covering Kubernetes security, container security, admission control, and cloud native security practices.