|Project Name||Stars||Downloads||Repos Using This||Packages Using This||Most Recent Commit||Total Releases||Latest Release||Open Issues||License||Language|
|Portainer||24,964||1||a day ago||78||April 21, 2021||1,087||zlib||Go|
|Making Docker and Kubernetes management easy.|
|Trivy||16,711||25||12 hours ago||176||September 16, 2022||383||apache-2.0||Go|
|Find vulnerabilities, misconfigurations, secrets, SBOM in containers, Kubernetes, code repositories, clouds and more|
|Authelia||15,853||1||11 hours ago||34||September 19, 2022||110||apache-2.0||Go|
|The Single Sign-On Multi-Factor portal for web apps|
|Vitess||15,786||66||12 hours ago||397||September 01, 2022||826||apache-2.0||Go|
|Vitess is a database clustering system for horizontal scaling of MySQL.|
|Cilium||14,760||15||12 hours ago||547||September 14, 2022||1,098||apache-2.0||Go|
|eBPF-based Networking, Security, and Observability|
|Teleport||14,020||6||11 hours ago||252||July 29, 2021||2,425||apache-2.0||Go|
|The easiest, most secure way to access infrastructure.|
|Linkerd2||9,440||11||12 hours ago||108||March 23, 2022||265||apache-2.0||Go|
|Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.|
|Kubescape||8,139||2||13 hours ago||142||September 19, 2022||70||apache-2.0||Go|
|Kubescape is an open-source Kubernetes security platform for your IDE, CI/CD pipelines, and clusters. It includes risk analysis, security, compliance, and misconfiguration scanning, saving Kubernetes users and administrators precious time, effort, and resources.|
|Devops Resources||6,762||a day ago||12||Groovy|
|DevOps resources - Linux, Jenkins, AWS, SRE, Prometheus, Docker, Python, Ansible, Git, Kubernetes, Terraform, OpenStack, SQL, NoSQL, Azure, GCP|
|Netmaker||6,323||13 hours ago||64||September 20, 2022||138||other||Go|
|Netmaker makes networks with WireGuard. Netmaker automates fast, secure, and distributed virtual networks.|
We've announced our plans to discontinue Starboard and merge it into Trivy.
Starboard CLI has been reintroduced as trivy kubernetes command and starboard-operator with a focus on trivy capabilities is available as Trivy-Operator.
We will not be accepting new features/pull requests/issues. we encourage you to contribute to Trivy-Operator and Trivy CLI and influence the future of Trivy Kubernetes.
for more info and discussions
Checkout the latest : What's next for Trivy Q&A
Kubernetes-native security toolkit.
There are lots of security tools in the cloud native world, created by Aqua and by others, for identifying and informing users about security issues in Kubernetes workloads and infrastructure components. However powerful and useful they might be, they tend to sit alongside Kubernetes, with each new product requiring users to learn a separate set of commands and installation steps in order to operate them and find critical security information.
Starboard attempts to integrate heterogeneous security tools by incorporating their outputs into Kubernetes CRDs (Custom Resource Definitions) and from there, making security reports accessible through the Kubernetes API. This way users can find and view the risks that relate to different resources in what we call a Kubernetes-native way.
Starboard can be used:
As a Kubernetes operator to automatically update security reports in response to workload and other changes on a Kubernetes cluster - for example, initiating a vulnerability scan when a new Pod is started or running CIS Benchmarks when a new Node is added.
As a command, so you can trigger scans and view the risks in a kubectl-compatible way or as part of your CI/CD pipeline.
Although we are trying to keep new releases backward compatible with previous versions, this project is still incubating, and some APIs and Custom Resource Definitions may change.
The official Documentation provides detailed installation, configuration, troubleshooting, and quick start guides.
Learn how to install the Starboard command From the Binary Releases and follow the Getting Started guide to generate your first vulnerability and configuration audit reports.
You can install the Starboard Operator with Static YAML Manifests and follow the Getting Started guide to see how vulnerability and configuration audit reports are generated automatically.
Read more about the motivations for the project in the Starboard: The Kubernetes-Native Toolkit for Unifying Security blog.
At this early stage we would love your feedback on the overall concept of Starboard. Over time, we'd love to see contributions integrating different security tools so that users can access security information in standard, Kubernetes-native ways.
Starboard is an Aqua Security open source project.
Learn about our Open Source Work and Portfolio.
Join the community, and talk to us about any matter in GitHub Discussions or Slack.