Declarative Continuous Deployment for Kubernetes

ArgoProj Helm Charts

CloudNativePG is a Kubernetes operator that covers the full lifecycle of a PostgreSQL database cluster with a primary/standby architecture, using native streaming replication

Kubernetes Native Policy Management

Barman - Backup and Recovery Manager for PostgreSQL

Gatecheck CI/CD Validation Tool

Public Chainguard Images

Main package repository for production Wolfi images

DefectDojo is a DevSecOps and vulnerability management platform.

Docker and OCI Registry Client in Go and tooling using those libraries.

CloudNativePG Helm Charts

Bitnami Helm Charts

Helm chart to install Vault and other associated components.

CLI tool and library for generating a Software Bill of Materials from container images and filesystems

🔮 ✈️ to integrate OPA Gatekeeper's new ExternalData feature with cosign to determine whether the images are valid by verifying their signatures

Storage Orchestration for Kubernetes

Production-Grade Container Scheduling and Management

Move OIDC token acquisition out of your app code and into the Istio mesh

Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.

Automatically provision and manage TLS certificates in Kubernetes

BDD styled unit test framework for Kubernetes Helm charts as a Helm plugin.

The SPIFFE Runtime Environment

bootstrap Kubernetes with k3s over SSH < 1 min 🚀

A Go Implementation of in-toto with certificate constraint support.

Release infrastructure for Kubernetes and related components

Provides agent and server plugins for SPIRE to allow TPM 2-based node attestation.