Liz Rice

substrate. Agent Substrate: the core system

network-immune-system-ciliumcon. A repository containing talk material used during KubeCon CiliumCon 2025 for the talk titled "Containing Wildfires in a Sprawling Multi-Cluster Network: The Network's Immune System".

ai-platform-engineering. CAIPE: Community AI Platform Engineering

k8s-on-macos. Fully functional Kubernetes clusters on macOS (Apple silicon)

qcore. The world's most lightweight 5G Core (probably)

twitter-to-bluesky. Import all tweets exported from X/Twitter to a Bluesky account.

attestagon. Create Attestations for Kubernetes Pods using Tetragon events

game-of-life. Game Of Life example

eBPF-Summit-2024-CTF. C

gron. Make JSON greppable!

eBPF-Summit-2023-CTF. C

cilium. eBPF-based Networking, Security, and Observability

social-app. The Bluesky Social application for Web, iOS, and Android

ebeedex. Find your favorite eBee

learning-ebpf. Learning eBPF, published by O'Reilly - out now! Here's where you'll find a VM config for the examples, and more

community. Here you can find community content around Cilium

cilium-grafana-observability-demo.

soci-snapshotter. A containerd snapshotter plugin which enables standard OCI images to be lazily loaded without requiring a build-time conversion step.

tetragon. eBPF-based Security Observability and Runtime Enforcement

marcel. Le docker français :whale: :fr:

lima. Linux virtual machines, with a focus on running containers

echo-bpftool. Material for eCHO #11 (https://github.com/isovalent/eCHO/)

ebpf-for-windows. eBPF implementation that runs on top of Windows

libbpfgo. eBPF library for Go. Powered by libbpf.

eCHO. eBPF & Cilium Office Hours

opal. Policy and data administration, distribution, and real-time updates on top of Policy Agents (OPA, Cedar, ...)

lipgloss. Style definitions for nice terminal layouts 👄

examples. Kubernetes NetworkPolicy Examples

community. Resources for Kubernetes network policies

cilium-cli. CLI to install, manage & troubleshoot Kubernetes clusters running Cilium

SimpleVM. Sample code for Virtualization framework

starboard-lens-extension. Lens extension for viewing Starboard security information

kubevscan. Kubernetes security scanner based on the open-source container vulnerability scanner Trivy.

karn. Simplifying Seccomp enforcement in containerized or non-containerized apps

bpfbox. 🐝 BPFBox 📦 Exploring process confinement in eBPF

star-history. The de facto GitHub star history graph.

community. Aqua Security's open source community

code-maat. A command line tool to mine and analyze data from version-control systems

osm. Open Service Mesh (OSM) is a lightweight, extensible, cloud native service mesh that allows users to uniformly manage, secure, and get out-of-the-box observability features for highly dynamic microservice environments.

shell-operator. Shell-operator is a tool for running event-driven scripts in a Kubernetes cluster

community. AWS Controllers for Kubernetes (ACK) is a project enabling you to manage AWS services from Kubernetes

trivy-vscode-extension. A VS Code Extension for Trivy

microbadger. What's inside your Docker containers?

container-scan. A GitHub action to help you scan your docker image for vulnerabilities

starboard-operator. The Starboard Operator has moved to the main Starboard repo, and this one is being retired

starboard-aqua-csp-webhook. The image scan results webhook configurable in Aqua CSP management console to integrate with the Starboard tool kit.

linux-bench. Checks whether a Linux server according to security best practices as defined in the CIS Distribution-Independent Linux Benchmark

harbor-scanner-aqua. Aqua Enterprise scanner as a plug-in vulnerability scanner in the Harbor registry

starboard-octant-plugin. Octant plugin for viewing Starboard security information

starboard. Superseded by https://github.com/aquasecurity/trivy-operator

sonobuoy-plugins. Plugins for Sonobuoy

TCN. Specification and reference implementation of the TCN Protocol for decentralized, privacy-preserving contact tracing.

kubectl-who-can. Show who has RBAC permissions to perform actions on different resources in Kubernetes

helm-trivy. Go

cob. Continuous Benchmark for Go Project

glow. Render markdown on the CLI, with pizzazz! 💅🏻

kube-query. [EXPERIMENTAL] Extend osquery to report on Kubernetes

hadolint. Dockerfile linter, validate inline bash, written in Haskell

tracee. Linux Runtime Security and Forensics using eBPF

kubesec. Security risk analysis for Kubernetes resources

trivy. Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more

fit. A Go package for decoding and encoding Garmin FIT files

rbac-lookup. Easily find roles and cluster roles attached to any user, service account, or group name in your Kubernetes cluster

registry-tooling. Install a secure Docker registry on any Kubernetes cluster with a single command

kube-hunter. Hunt for security weaknesses in Kubernetes clusters

no-meltdown. Resources for "Don't Have A Meltdown"

microscanner-wrapper. Bash wrapper script for Aquasec Microscanner

microscanner. Scan your container images for package vulnerabilities with Aqua Security

kubernetes-security-best-practice. Kubernetes Security - Best Practice Guide

nocode. The best way to write secure and reliable applications. Write nothing; deploy nowhere.

grafeas. Artifact Metadata API

grafeas-tutorial. A step by step guide for getting started with Grafeas and Kubernetes.

cnitch. Container Snitch checks running processes under the Docker Engine and alerts if any are found to be running as root

faas. OpenFaaS - Serverless Functions Made Simple

manifesto. Use Manifesto to store and query metadata for container images.

kube-bench. Checks whether Kubernetes is deployed according to security best practices as defined in the CIS Kubernetes Benchmark

ctop. Top-like interface for container metrics

containerd. An open and reliable container runtime

scope. Monitoring, visualisation & management for Docker & Kubernetes

go-watcher. Watch your .Go files and restart your processes without any configuration hassle

ofelia. A docker job scheduler (aka. crontab for docker)

aws-lambda-go-shim. Author your AWS Lambda functions in Go, effectively.

tenus. Linux networking in Go

docker-make. build,tag,and push a bunch of related docker images via a single command

go-build-template. A Makefile/Dockerfile example for Go projects.

go-dockerclient. Go client for the Docker Engine API.

awesome-microscaling. A curated list of Microscaling related principles and technologies.

microscaling. Microscaling Engine

ipfs. Peer-to-peer hypermedia protocol

coreos-marathon. Create a 3 node Marathon / Mesos cluster locally with Vagrant or hosted with Packet

apinalytics. Analytics for APIs

bootstrap-slider. A slider control for Bootstrap 3 & 4.

django-email-confirmation. simple email confirmation for the Django web framework

django-allauth. This is a clone of penners/django-allauth, but I'm modifying it to work with django-invitation. Note that I also made a small change to django-invitation as well (repo at lizrice/django-invitation, unless my pull request gets accepted). BUT ALSO NOTE there is a better way to do what I've tried to do here - see the discussion at https://github.com/pennersr/django-allauth/pull/91

django-privatebeta. A reusable application for collecting email addresses for later invitations and to restrict access to a site under private beta.

django-invitation. This is a fork of http://code.larlet.fr/django-invitation, modified to add support for using django-allauth as an optional alternative to django-registration. This combination worked fine for us on Django 1.5 but as we no longer need the invitation codes, we're not actively maintaining this fork.

django-invitation. This is a clone of http://code.larlet.fr/django-invitation

django-allauth. Integrated set of Django applications addressing authentication, registration, account management as well as 3rd party (social) account authentication. 🔁 Mirror of https://codeberg.org/allauth/django-allauth/

django-email-confirmation. simple email confirmation for the Django web framework

django-privatebeta. A reusable application for collecting email addresses for later invitations and to restrict access to a site under private beta.