chainguard-dev/rumble chainguard-dev/rumble

  • This repository has been archived on 05/Feb/2024
  • Stars
    star
    3
  • Rank 3,963,521 (Top 79 %)
  • Language
    Go
  • License
    Apache License 2.0
  • Created almost 2 years ago
  • Updated 12 months ago
Twitter logo Share LinkedIn logo Share Facebook logo Share
chainguard-dev/rumble
github

chainguard-dev

Reviews

There are no reviews yet. Be the first to send feedback to the community and the maintainers!

Repository Details

Data collection for base image CVEs etc.

More Repositories

1

apko

Build OCI images from APK packages directly without Dockerfile
Go
747
star
2

osquery-defense-kit

Production-ready detection & response queries for osquery
Makefile
412
star
3

bincapz

detect malicious program behaviors
YARA
401
star
4

ssc-reading-list

A reading list for software supply-chain security.
327
star
5

melange

build APKs from source code
Go
227
star
6

incert

Add CA certificates into containers
Go
121
star
7

edu

Educational Resources for Software Supply Chain Security
HTML
76
star
8

actions

A collection of reusable Github Actions workflows.
65
star
9

justtrustme

Go
50
star
10

bomshell

An SBOM query language and associated utilities
Go
49
star
11

digestabot

Github Action to automatically update digests for container images.
Dockerfile
43
star
12

vex

vexctl is a tool to attest VEX impact statements
Go
43
star
13

bom-shelter

A place to systematically store software bill of materials (SBOM) documents.
Python
42
star
14

darkfiles

Darkfiles finds orphaned files in container images and makes them to bad deeds
Go
39
star
15

osqtool

Automated testing, generation & manipulation of #osquery packs
Go
36
star
16

go-apk

native go library for installation and management of apk packages
Go
29
star
17

registry-redirect

Go
29
star
18

cosign-ecs-verify

Lambda function for verifying signed images in ECS
Go
24
star
19

rules_apko

Bazel rules for apko
Starlark
23
star
20

crow-registry

TypeScript
21
star
21

clank

Simple tool that allows you to detect imposter commits in GitHub Actions workflows.
Go
21
star
22

yam

A sweet little formatter for YAML
Go
20
star
23

hakn

A High-Availability distribution of Knative.
Go
20
star
24

policy-catalog

Go
19
star
25

hello-melange-apko

Demo app duplicated in 5 languages (Go/JavaScript/Python/Ruby/Rust) showing how to go from source code to container image using melange+apko
Rust
19
star
26

tlogistry

Transparenty Immutable Container Image Tags
Go
19
star
27

clog

Context aware slog
Go
17
star
28

maxcve

Go
17
star
29

terraform-provider-apko

Go
14
star
30

image-comparison

Comparison of Chainguard Images to others
HTML
14
star
31

terraform-provider-oci

Terraform provider to perform OCI image operations
Go
12
star
32

exitdir

Common packages.
Go
8
star
33

go-oidctest

Library for creating fake OIDC providers in tests
Go
8
star
34

nginx-image-demo

nginx image demo
8
star
35

terraform-provider-cosign

Terraform provider for Sigstore Cosign
Go
8
star
36

yoloc

YOLO-level verifier
Go
7
star
37

admission-sidecar

Generic webhook controller / proxy for ease of integration with Styra in particular.
Go
7
star
38

terraform-infra-common

A repository containing a collection of "glue" modules for encapsulating common Cloud Run patterns.
HCL
7
star
39

pull-secret-updater

Go
6
star
40

vulnerability-scanner-support

Resources to help vulnerability scanners
6
star
41

stigs

HTML
6
star
42

platform-examples

Example apps demonstrating Chainguard platform integrations
Go
6
star
43

go-grpc-kit

Utility methods for gRPC.
Go
6
star
44

kolide-google-matcher

Unearth host mismatches between Kolide & Google Workspace
Go
6
star
45

learning-labs-static

Base code for Learning Labs: "Build Secure and Minimal Images with Chainguard Static Images"
Go
6
star
46

tekton-demo

Tekton and Sigstore Demo
HCL
5
star
47

terraform-publisher-apko

An experimental module for publishing images with tf-apko
HCL
5
star
48

images-autodocs

This project is now retired ๐Ÿ‘‹
PHP
5
star
49

cve-bliss

Use this repo to submit your final project for the Painless Vulnerability Management With Chainguard course.
Dockerfile
5
star
50

text4shell-policy

ClusterImagePolicy demo for cve-2022-42889 text4shell
Java
4
star
51

melange-php-demos

PHP demos for Melange + Apko
PHP
4
star
52

gobump

Go tool to declaratively bump dependencies.
Go
4
star
53

homebrew-tap

Chainguard Homebrew Tap
Ruby
3
star
54

source-integrity-demo

Shell
3
star
55

tekton-helm-charts

Helm charts for deploying Tekton Pipelines, Dashboard and Chains
Smarty
3
star
56

sigstore-custom-policies

Repo to contain files demo'd on the CNCF Webinar on the Sigstore Policy Controller
CUE
3
star
57

terraform-google-cron

Terraform module for deploying cron jobs that run on a defined schedule
HCL
3
star
58

go-workqueue

Go
3
star
59

fixfilter

Filter scanner results by applying data from the Wolfi secdb
Go
2
star
60

edu-images-demos

Sample education demos for Chainguard Images
Dockerfile
2
star
61

secureframe-issue-sync

Sync Secureframe tests to GitHub issues (unofficial)
Go
2
star
62

terraform-aws-chainguard-account-association

Terraform module to connect Chainguard Enforce to your AWS Account
HCL
2
star
63

deved-autodocs

DEPRECATED. Moved to chainguard-dev/images-autodocs
PHP
2
star
64

terraform-google-chainguard-account-association

Terraform module to connect Chainguard Enforce to your Google Cloud project
HCL
2
star
65

hello-wolfi-demo

Demo for the Hello Wolfi workshop
PHP
2
star
66

terraform-provider-imagetest

Go
2
star
67

.github

Default files to be used for any public repository under the chainguard-dev organization.
2
star
68

chainguard-weaveworks-gitops-demo

End to End Security & Operations with Chainguard & Weave GitOps
Makefile
2
star
69

terraform-cloudrun-dashboard

THIS HAS MOVED
HCL
2
star
70

openssl-fips-test

Test that OpenSSL is configured to be FIPS-compliant
C
1
star
71

ldso-cache

reading and writing of glibc /etc/ld.so.cache files
Go
1
star
72

terraform-google-prober

A terraform module and Go library for deploying probers to Google Cloud Run
HCL
1
star
73

acls-in-yaml

Collect ACLs from SaaS platforms for periodic user access reviews
Go
1
star
74

field-demos

Public repository of field demos and collaboration and other goodness - it's not pretty, but it's shared โค๏ธ
Dockerfile
1
star
75

go-pkgconfig

Go package for wrangling pkg-config data
Go
1
star
76

go-demo

go demo app
Go
1
star
77

cg-images-python-migration

Sample Flask application migrated to Chainguard Images
Dockerfile
1
star
78

trusted-cert

Un-forked clone of Trusted Cert operator so we can test github actions workflows
Go
1
star